Ask Slashdot: Linux Mountable Storage Pool For All the Cloud Systems?
An anonymous reader writes "Many cloud systems are available on the market like: dropbox, google, sugar sync, or your local internet provider, that offer some free gigabytes of storage. Is there anything out there which can combine the storage into one usable folder (preferably linux mountable) and encrypt the data stored in the cloud? The basic idea would be to create one file per cloud used as a block device. Then combine all of them using a software raid (redundancy etc) with cryptFS on top. Have you heard of anything which can do that or what can be used to build upon?"
The first, and most interesting, is Tahoe LAFS. It does come with a FUSE driver, so it can be mounted like a regular filesystem. It is cloud-based and redundant to a degree you choose yourself. All copies stored are encrypted, so the only person who can read them is you. I'm not sure though if fetching from more nodes than you strictly need to reconstruct your original file actually buys you anything with that system, but I think it does.
You could also use something like a mountable version of Google Drive and then layer fuse-encfs on top of it. That's not quite as secure as encrypting at the block layer. The overall shape of your directory hierarchy is available, even if the individual file names and their contents are obscured. That should probably be good enough for most purposes.
Need a Python, C++, Unix, Linux develop
It has optional encrypted transport if you use the native (fuse) mount. Encryption on the back end is on the road map for a future release. It's available for Linux, there's a NetBSD port, and has had working Solaris and OS X support in the past, it probably wouldn't be too hard to make those work again.
http://www.pdx.edu/computer-science/hakim-weatherspoon
If you don't trust the provider to keep your data intact, don't use that provider.
If you need more storage, pay for it. The cost is not prohibitive - 100GB or so for under US$10/mo is pretty easy to find.
If $10/month prices you out of the market, there are better things to worry about than encrypting files and storing them in the cloud.
My residential internet connection via Comcast is fast enough today that I can pull files off of my server at home, "cloud" style.
I have two 2TB drives in RAID1, encrypted with whatever magic `cryptsetup' performs, with port 22 of my firewall forwarded to the server. SSH only accepts logins from me. I consider my data to be more secure and easier to access (it's literally seconds away from availability on any real operating system anywhere with internet access. Windows need not apply) than anything I could get from ZOMG TEH CLOUD. Only disadvantage is speed. I'm not gonna be shunting gigabyte plus files around like this.
Added bonus: easy to add users, easy to throw up a web interface, can do whatever you want with it, since you own the hardware (!!)
Pfft, cloud. I remember when it was called 'the internet'.
Now get the fuck off my lawn.
Spideroak (http://www.spideroak.com) does what you want. It encryptes data on your machine before sending it to the cloud.
Go green: turn off your refrigerator.
... being a free software user doesnt mean you need to be a free service user: If you aren't paying, you aren't the customer.
I use both Google Drive & Dropbox (for different usage cases and purposes) but my really important backups - including everything from both the other two - go into Amazon S3, as I have a contract there with the supplier, and knowing I'm a paying customer of a profitable service means I'm much less likely to have to rethink my backup strategy due to a withdrawal of a free offer. The time spent doing an initial backup of all my files I want to protect means I dont want to have to do that often, incremental backups are much easier to live with.
I have been a user for about 10 years. This ends Feb 2014. The site's been ruined. I'm off. Dice, FU
preferably linux mountable
You'll find a userspace script solution to be infinitely simpler. A script that clones such and such directory onto such and such other directory while encrypting is simple, another script to clone that encrypted directory into some other directory (basically just rsync). Run it periodically outta crontab, etc.
90% your effort will be expended on error detection / correction / reporting, 9% of your effort on key management for the encryption and keeping the individual services up and running, and probably about 1% on the actual nuts and bolts of copying stuff around while possibly encrypting.
There are more failure modes than you'd think... consider giant files, for example, which don't fit. Or running it outta crontab and somehow having two copies running simultaneously. Or your scratch directory is on a device that suddenly got remounted RO instead of RW due to developing hardware issues.
Bidirectional sync is ambitious but possible. You'll burn a seemingly infinite amount of bandwidth trying it (think about the next quote for a second)
The basic idea would be to create one file per cloud used as a block device
Thankfully you're just mirroring instead of requesting some kind of raid-5 like technology. Also you're just dumping "a big ole backup file" rather than individual files.
"Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
encrypt the data stored in the cloud
Oh and another thing its infinitely more secure to encrypt the data before "putting it up on your homemade mirror network" rather than as a process.
For example, 99.99999999% of the data I "control" does not need to be encrypted. It just simply doesn't matter, even to a paranoid, although those know no rational limit....
Another example, lets say you were backing up a sql database of usernames/passwords for some site. The wrong way to do it is store the passwords in plain text and then encrypt the backup. Wrong for about a zillion (obvious?) reasons. If you have a decent system to hash and/or encrypt the data in the DB itself, thats much better, and no one can do anything with the encrypted data anyway. Or at least your database-level-backup script (as distinct from this project) can encrypt it for you (even if its just pipe mysqldump thru mcrypt and then into a file)
"Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
You may need another text editor though
http://saveie6.com/
Someone's already done & blogged about this, using multiple free FTP accounts, with a FTPfs bringing them local, then mounting a RAID (mirrored & parity) partition over it, and encfs over the top of that.
It was VERY SLOW, but did work, even when he blocked access to some of the FTP accounts - it was just seen as a failed drive read, and the parity reconstruction still permitted access.
I think the key problem was that FTP servers he used (or the FTPfs driver) didn't allow for partial writes to files, so every time you changed something, large amounts of data was re-uploaded. So there were possibilities for optimization.....
Enjoy & share if you get anywhere !
Dom
Give OwnCloud a try.
http://owncloud.org/
I use both and there are instructions here including a script where you run l.bat to set it up and sync.
However, it seems your use case is a little different than a personal backup.
http://saveie6.com/
Forget redundancy, just go with "RAIC-0": unleashing the true power of the Cloud by striping providers!
lucm, indeed.
Just pay for it FFS, why try to combine different free services, and go throuth the trouble of running your own linux server in order to save 10$ a month oh my god, "!#$ excited kids.
You could use CEPH to do the distribution, then RADOS to create an RBD (Rados Block Device) and when you mount the RBD as asn iSCSI device, you could then build a cryptfs device on top of it, so the provider of the RBD couldn't read/write the data without the keys stored on your server (or wherever you keep them.) The difficulty is getting something like this that is product-ized, so that a provider can give enough economy-of-scale to make it really worthwhile.
Bitcasa is an encrypted block based filesystem which mounts via FUSE and streams to the cloud behind the scenes. Has really intelligent caching built in and works with all major platforms (Lin, Win, Mac).
Linux client hasn't been updated as much as the other platforms but should catch up soon.
Full disclosure- I'm the CEO of Bitcasa.
He has not said why he wants to do this, ie what problem he is trying to solve. Depending on the question the answer may be different. Does he want a cloud because:
* data must be available from many places - ie over the Internet ?
* data is to be safe from one place (ie home/office machine) blowing up and losing everything ?
* fast access is needed from many places at once ?
Please first answer these questions so that we may provide you with what you need rather than random solutions that may not be what you need.
I manage my files using git-annex which supports a number of storage services with seamless GPG encryption.
Avoid it.
Punt
Wouldn't a(n) LVM accomplish this? Set up a bunch of logical devices, put them into an LVM, and let that take care of itself?
I too have been looking for a solution for "denyable-they-don't-have-the-encryption-key" secure, remote storage, back ups and the like. Platform independent and standards compliance is important; I don't want to get locked into a proprietary ecosystem Its even better if there's a nice GUI and usability that doesn't require guru-level knowledge to access, and pricing isn't insane. Thus far I've found a handful of tools that seem to be the best of their breeds - CrashPlan for instance allows encrypted, secure multi-site backups (your own PCs, friends PCs, their servers), unlimited bandwidth/storage space etc... but it is only meant for backups, not sharing or accessing the data frequently. SpiderOak is a fantastic Dropbox alternative, Linux-friendly (both GUI and CLI for those interested) and seems to be amongst the best of the "Cloud (tm)/ Dropbox" type file-hosting/sharing services. However, as the OP specifically notes that they are looking for a unified solution to bring most or all of those remote hosted/"Cloud" stuff under a single mantle, there seems to be one project that has that goal in mind - OwnCloud
I've been watching OwnCloud (www.owncloud.org) since I heard of it, happy to see an open-source, standards-compliant, "installable on your own hardware as well as rented hosting etc.." universal, modular data storage/sync operation that can be totally under your own control. It has a ton of features, but most notable in this case is exactly what the OP wants: the ability to mount your Google Drive or Dropbox share and have your OwnCloud install interact with them. It looks to be a really promising project and I really hope that a lot of coding gurus join and take notice; if my skill was sufficient, I'd be looking to contribute. It is a relatively new platform and I am sure it will have some growing pains (ie. I do not know if it supports ALL "cloud drive" shares, for instance SpiderOak...), but it supports everything from a built in media player, Card/CalDAV, backups, LDAP, and seems to have amazing potential. I am told that Version 5.0 will be the next big leap forward in terms of polish. Check it out and those that can contribute, please do so. It seems the best option to have user-friendly, open source, secure "cloud" services without bolstering hegemony aspirations by Google, Microsoft, and many others.
FreeNAS + OpenVPN is my "cloud" storage. Decent Comcast upstream at home means I have direct access to all my files anywhere, via a single UDP socket secured with certificate-based authentication and encryption. I take special solace knowing I own the hardware my data touches, and FDE on all endpoints ensures another layer of protection.
Curlftpfs + Archivemount will allow it on any ftp. Just setup an account, mount it up with curlftpfs somewhere, create a tar file on the mount, and mount that to the folder you want.
This way you'll get all the posix privileges (user,group,others.rwxrwxrwx) and so on. Another advantage is that, theoretically, it should be possible to do the same thing on windows with a virtual mount. But I don't think the software for that is available FOSS or at all...
Sounds like a business opportunity to me - providing simple access to data in the Internet cloud that is mountable (either Linux or other) and strongly encrypted by default such that ONLY the owner or other authorized entity can access it in a decrypted form.
The OP wants to use free storage he already has (using Dropbox, Google Drive, SpiderOak, etc.), not pay for his own storage. While I would heartily recommend TAHOE-LAFS or sshfs+encfs or ownCloud or anything self-hosted that requires paying for storage, that's not what the OP is asking for.
I forgot to add that if you aren't satisfied with sftp or you don't trust the service provider, you don't have to ssh-tunnel the connection. You can preallocate a binary file with dd and then fuse-mount it as an encrypted file system of your choice.
Note that the real benefit of ftp is the lack of overhead. Those packets are as raw as it gets...
Probably, that's not what the OP is searching for, but Openstack swift is a very interesting cloud storage solution which has redundancy, so I thought it was a good idea to raise the topic in this thread.
Have you looked at S3QL http://code.google.com/p/s3ql/? Mountable infinite Amazon S3 storage via fuse (no limited blockdevice setup).
Bruce Schneier's friendly reminder that distributed/encrypted cloud storage interferes with the cloud providers' business models. It'd be terribly useful, but I'm afraid they will keep on throwing sticks between our legs there for quite a while.
I've been using the free Linux tools from Storage Made Easy (http://storagemadeeasy.com/LinuxDrive/). You need a Storage Made Easy Account and for that you get 5GB on their Cloud (which I think is actually Amazon S3) and the ability to add 3 other Clouds, so I am using it with my own WebDav Server, Google Drive, and Zimbra Briefcase (office solution). I've been using it on Ubuntu 12.04 and using their 4.01 Linux client. It works pretty good. You get a Cloud Drive that I can see is built using FUSE, and you also receive a graphical cloud explorer with a Synchronisation type App that has options where you can setup a scheduled upload / download of files.
The solution itself advertises that it supports over 35 clouds ((http://storagemadeeasy.com/cloud_list/) and I have not tried them all but the ones I tried worked OK. It seems the solution works by indexing the file names and endpoints (ie. does not copy any files) and then makes them available for you through whichever App you use. I get the same access from my phone (company Windows Phone).
The experience has been good enough for me to recommend it to my company as its possible to get it as a VMWARE appliance and host yourself. The business edition adds Active Directory for authentication and also adds some business features such as file auditing etc, but note I have not used it so can only comment on what I have read in their Wiki.
One interesting thing is that you can encrypt files using encryption built into the service for any of the clouds you have in your account. Beware though as they don't store the encryption key (as I found out....) so you have to remember it otherwise you cannot get back into your file.
There's also an online solution to combine free online storage services: http://www.zeropc.com/
Check out the FUSE listing of union/multiplexing filesystems here:
http://sourceforge.net/apps/mediawiki/fuse/index.php?title=UnionFileSystems
(Disclaimer: I'm involved with NubiSave so my recommendation would be to check it out. Be aware that it's a research system, though, and not recommended for production use yet.)
I think you just described SME:
http://storagemadeeasy.com/
Check out this startup: https://www.ncryptedcloud.com/ Basically their primary piece is encryption into the public cloud while maintaining the ability to share your data (encryption/decryption is all client side). They are also combining the backend storage, so your view would be across drop box, Google drive, etc. They are in "early access" now but I hear they going GA soon.
If you are interested in doing this at a scale beyond personal and have some money to spend ($125/month + disk utilization) you could use the AWS storage gateway to present an iSCSI target to your linux machine. It will write to the local storage backing the VM and asynchronously push this data to Amazon S3 as the cache fills or on a timed interval.
http://aws.amazon.com/storagegateway/
You're assuming every single cloud-storage-as-a-service...service uploads differences as opposed to wiping & rewriting the whole thing. If you're gonna treat each service as a volume at least have multiple blocks to hack your way around that. But yeah, I remember as far back as right after GMail launching, some hackers RAIDed multiple GMail accounts together for unlimited storage. I wouldn't know if you'd find public info on this as I've personally never had a need for more than modest storage.
They have an Android client, so making the jump to Linux shouldn't be that hard but...
It's basically a managed cloud gateway/relay service, allowing you combine private storage backends, and S3 storage.
https://oxygencloud.com/
If you are willing to pay a little and get under the hood, try the stuff from Eldos (probably SolFS+CloudBlackbox)
http://www.eldos.com/sbb/desc-cloud.php
Valentine Day Jordan Heels Sale
Air Jordan Heels 2013
Nike Heels 2013
Nike Dunk SB High Heels
Nike Air Force One Heels
Air Jordan 11 High Heels First it was lights (and the shoe had batteries as well) that have been flashing every time you put your foot down desirable but completely useless in any other case Raptor 7S For Sale. In a period of quickly changing personnel, Aikman continued to be a steady performer, but suffered from a faltering pass protection by his offensive line. Hines Ward Sr. These events helped form my attitudes. A lot of dance students wish to be like their dance teacher.. Nevertheless, just for this unique style, the Air Jordan 11 is truly enchanting Real Jordans 7 For Sale. The color pattern for your ghillie will be dictated by the terrain in which you Will be using it. If you are into running, a pair of Nike athletics shoes may be just what you are looking for. For protein, make sure it's a lean source. Carry the burdens of your marriage on four shoulders, not just two. Jordan 8 Shoes from market officially in 1993.