[Bacula-users] data encryption support

[Udo K. <ba...@in...>]

Am 17.02.25 um 14:14 schrieb Adam Weremczuk:
> Does Bacula 9.6.7 (from Debian 11 repository) likely support backups encryption out of the box?
>
> Or do I need to compile it with ./configure --with-openssl ?
>
> How do I check if encryption is currently available?
>
> I'm using it with LTO-8 ULTRIUM-HH8 external tape drive.
>
> ---
> Adam

If you like to try software encryption these are my lines. From ancient times and written down from memory... It positively worked with v9.

Cheers, Udo

openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout /etc/ssl/private/my.key -out /etc/ssl/private/my.cert
openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout /etc/ssl/private/customer.key -out /etc/ssl/private/customer.cert
openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout /etc/ssl/private/server-fd.key -out /etc/ssl/private/server-fd.cert

mkdir -p /etc/bacula/pki
cp /etc/ssl/private/server-fd.key /etc/bacula/pki/server-fd.pem
cat /etc/ssl/private/server-fd.cert >> /etc/bacula/pki/server-fd.pem
cp /etc/ssl/private/my.cert /etc/bacula/pki/my.cert
cp /etc/ssl/private/customer.cert /etc/bacula/pki/customer.cert

bacula-fd.conf:

FileDaemon {
...
   PKI Signatures = yes
   PKI Encryption = yes
   PKI Keypair = "/etc/bacula/pki/server-fd.pem"
   PKI MasterKey = "/etc/bacula/pki/customer.cert"
   PKI MasterKey = "/etc/bacula/pki/my.cert"
...
}

compile-bacula.sh:

#!/bin/sh
#

mkdir -p /usr/local/bin/bacula
mkdir -p /etc/bacula
mkdir -p /var/lib/bacula

CFLAGS="-g -Wall" \
   ./configure \
     --sbindir=/usr/local/bin/bacula \
     --sysconfdir=/etc/bacula \
     --with-pid-dir=/var/run \
     --with-subsys-dir=/var/lib/bacula \
     --enable-smartalloc \
     --enable-conio \
     --with-mysql \
     --disable-static-tools \
     --with-working-dir=/var/lib/bacula \
     --wit...@ma... \
     --wit...@ma... \
     --with-smtp-host=my.smtp.tld \
     --with-openssl

exit 0

-- 
Bitte denken Sie an die Umwelt, bevor Sie Mails drucken.
Please consider the environment before printing mails.
--
iNet Integrative Netzwerke Udo Kaune e.K.
Deichstraße 6
25335 Elmshorn
Tel: +49 (4121) 579 69 35
Fax: +49 (4121) 579 69 99
Web:http://www.inet-hamburg.de
Handelsregister Pinneberg: HRA 1509 EL