{"id":2377,"date":"2017-04-11T23:16:49","date_gmt":"2017-04-11T21:16:49","guid":{"rendered":"https:\/\/www.fanjoe.be\/?p=2377"},"modified":"2017-04-13T19:46:57","modified_gmt":"2017-04-13T17:46:57","slug":"raspberry-pi-chiffrer-un-backup-a-la-volee","status":"publish","type":"post","link":"https:\/\/www.fanjoe.be\/?p=2377","title":{"rendered":"Raspberry Pi : Chiffrer un backup \u00e0 la vol\u00e9e"},"content":{"rendered":"<h1>Introduction<\/h1>\n<p>Nous avons vu dans de pr\u00e9c\u00e9dents articles comment :<\/p>\n<ul>\n<li><a href=\"https:\/\/www.fanjoe.be\/?p=391\" rel=\"bookmark\">Sauvegarder la carte SD du Raspberry Pi<\/a><\/li>\n<li><a href=\"https:\/\/www.fanjoe.be\/?p=422\" rel=\"bookmark\">Automatiser un backup en local<\/a><\/li>\n<li><a href=\"https:\/\/www.fanjoe.be\/?p=566\" rel=\"bookmark\">R\u00e9duire la taille d&rsquo;un backup<\/a><\/li>\n<li><a href=\"https:\/\/www.fanjoe.be\/?p=1373\" rel=\"bookmark\">Utiliser un script pour sauvegarder la carte SD d&rsquo;un RPi<\/a><\/li>\n<li><a href=\"https:\/\/www.fanjoe.be\/?p=1815\" rel=\"bookmark\">Uploader un backup vers un serveur FTP avec la commande cURL<\/a><\/li>\n<\/ul>\n<p>Le stockage dans le cloud du backup complet du RPi pourrait compromettre la s\u00e9curit\u00e9 vu que des donn\u00e9es sensibles sont stock\u00e9es en clair dans certains fichiers.<\/p>\n<p>Nous allons donc <a href=\"https:\/\/chiffrer.info\" target=\"_blank\">chiffrer<\/a> notre sauvegarde avant de l&rsquo;envoyer dans le nuage.<\/p>\n<h1>Proc\u00e9dure<\/h1>\n<h2>Cr\u00e9ation du backup<\/h2>\n<p>Par rapport \u00e0 tout ce qui a \u00e9t\u00e9 expliqu\u00e9 dans les billets pr\u00e9c\u00e9dents, nous allons introduire la commande <code>openssl<\/code> dans notre longue ligne d&rsquo;instructions :<\/p>\n<pre>$ sudo dd bs=4M if=\/dev\/mmcblk0 | gzip | openssl des3 -salt -k \"MonMotDePasse\" &gt; \/DossierCible\/NomDuFichier.gz.des3<\/pre>\n<p>Ce qui pourrait nous donner :<\/p>\n<pre>$ sudo dd bs=4M if=\/dev\/mmcblk0 | gzip | openssl des3 -salt -k \"password\" &gt; \/media\/Disque-USB\/Backups\/backup-20170411-test.gz.des3<\/pre>\n<p>Pour g\u00e9n\u00e9rer le fichier de sauvegarde le plus petit possible, on va le compresser <strong>avant<\/strong> de le chiffrer.<\/p>\n<p>L&rsquo;inverse ne permettrait pas de r\u00e9duire la taille du backup.<\/p>\n<p>En effet, le contenu d&rsquo;un fichier chiffr\u00e9 n&rsquo;est (en principe) pas diff\u00e9renciable de donn\u00e9es g\u00e9n\u00e9r\u00e9es al\u00e9atoirement ; tr\u00e8s difficiles \u00e0 compresser.<\/p>\n<h2>Restauration du backup<\/h2>\n<p>Pour restaurer le backup, on utilisera cette commande :<\/p>\n<pre>$ sudo cat \/CheminVersLeFichier\/NomDuFichier.gz.des3 | openssl des3 -d -k \"MonMotDePasse\" | gzip -dc | dd of=\/CheminVersLaCarteSD bs=4m<\/pre>\n<p>Ce qui pourrait nous donner ceci sur un Mac :<\/p>\n<pre>$ sudo cat ~\/desktop\/backup-20170411.gz.des3 | openssl des3 -d -k \"password\" | gzip -dc | dd of=\/dev\/disk5 bs=4m<\/pre>\n<p><strong>Sources :<\/strong><\/p>\n<p style=\"padding-left: 30px;\"><a href=\"https:\/\/www.cyberciti.biz\/faq\/linux-unix-encrypting-data-to-tape\/\" target=\"_blank\">www.cyberciti.biz<\/a><br \/>\n<a href=\"http:\/\/www.simplehelp.net\/2009\/02\/19\/adding-encryption-to-protect-your-backups-on-linux\/\" target=\"_blank\">www.simplehelp.net<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Introduction <\/p>\n<p>Nous avons vu dans de pr\u00e9c\u00e9dents articles comment :<\/p>\n<p> <a href=\"https:\/\/www.fanjoe.be\/?p=391\" rel=\"bookmark\">Sauvegarder la carte SD du Raspberry Pi<\/a> <a...\n<\/p>\n","protected":false},"author":1,"featured_media":2381,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[10,3,173,12],"tags":[21,267,188,268,22],"class_list":["post-2377","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-geek","category-informatique","category-linux","category-raspberrypi","tag-backup","tag-chiffrer","tag-linux","tag-openssl","tag-raspberry-pi","end"],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/www.fanjoe.be\/wp-content\/uploads\/2017\/04\/Chiffrer-Backup-00.jpg","_links":{"self":[{"href":"https:\/\/www.fanjoe.be\/index.php?rest_route=\/wp\/v2\/posts\/2377","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fanjoe.be\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fanjoe.be\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fanjoe.be\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fanjoe.be\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2377"}],"version-history":[{"count":0,"href":"https:\/\/www.fanjoe.be\/index.php?rest_route=\/wp\/v2\/posts\/2377\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.fanjoe.be\/index.php?rest_route=\/wp\/v2\/media\/2381"}],"wp:attachment":[{"href":"https:\/\/www.fanjoe.be\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2377"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fanjoe.be\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2377"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fanjoe.be\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2377"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}