Enterprise SSD "small deals"
- Thread starter ca3y6
- Start date
Notice: Page may contain affiliate links for which we may earn a small commission through services like Amazon Affiliates or Skimlinks.
Having dealt with a ransomware recently, a backup computer on the same network and with the same credentials than the primary server is as good as no backup. These things propagate from machine to machine if they are online.
I had to go through eBay "Customer Service" because it messed up once for their International Shipping to Denmark and Postnord asked me to pay VAT again.
I had to upload like 10 Files, explain the Situation to at least 5 poorly trained "People" (or at least 5 poorly trained Chatbots) via email and finally got my like 30 EUR of VAT back. Piss poor Experience.
what you can do at least is have a firewall rules to prevent server to server connections of dangerous ports, like RDP on windows or SSH on linux. Likewise, no reason for a server to initiate a connection to your desktop, so firewall rules on your desktop.
I don't think there are any duties anyways.
It's the leeches in the Government charging 160 DKK / 20 EUR or so (at least here in Denmark) and just adding VAT on top of that.
And if it's DHL/UPS they also add like 1% Fees for their "Advance Customs Settlement" or whatever they call it.
That's why when I buy on Aliexpress I sometimes do "small" Orders so that they can fit under 150 EUR and avoid paying 20 EUR extra at Import.
EDIT 1: for Imports from US, I use Jetcarrier, they take care of everything and I just pay Shipping + VAT on the Products, no extra Fees.
For backups you might want to consider Stablebit DrivePool. it has some nice features. I just discovered one recently when I accidentally deleted the partition form a 14TB HD when I had it out for testing in another box. After an O shit moment that seemed to last forever as I contemplated on how to best fix this major goof I put the drive back in it's original server and to my complete surprise and joy, DrivePool began to rebuilt the pool automatically after booting up without me doing anything but stare in disbelief. After the rebuild everything was back to the way it was before. And also, you can remove a single drive from a pool and it automatically renders the entire pool read only. To recover you simply plug the drive back in.
EDIT - Forgot too mention the pool was X2, (Duplicated) had it been X1 I would have been SOL. And FWIW, if a drive in a pool fails you will only lose whats on the one drive, the rest of the pool is safe, but as individual drives and not a pool.
EDIT - Forgot too mention the pool was X2, (Duplicated) had it been X1 I would have been SOL. And FWIW, if a drive in a pool fails you will only lose whats on the one drive, the rest of the pool is safe, but as individual drives and not a pool.
It doesn't.
I'm still looking for a decent Linux Backup program but haven't found one yet. . This is why my 2 backup servers are still Windows.
Backup shouldn't be complicated. Everything you need is covered with ZFS snapshots/send/receive + rsync + cron jobs. Personally I am quite happy with zfs-autobackup.It doesn't.
Immutable backups. That's the only way to protect yourself. They can't be overwritten or deleted (unless rotated).Oh yeah I'd be in a big **** if that happened. Same credential everywhere both for root and normal User
I could in Theory change everywhere except my Workstations, and store the passwords in Bitwarden, but then it's also how to unlock in that event where I got no SSH / Clevis access at boot. Entering 64 Characters via IPMI Web Interface isn't fun
True, but arguably, with immutable backups, it doesn't really matter. Once the backup is written, it is written in stone until you delete/rotate it. Even admin credentials can't modify it.
Isn't that the whole mess that happened back then with the Merging/Aquisition of Hitachi / HGST into WD, then Toshiba taking over ex-Hitachi business, now split into Kioxia ?
To me it doesn't sound *that* weird. It's like Sun and Oracle, isn't it ?
But that's the thing I don't get. There is nothing you can setup with root privilege that can't be removed with the same privileges. Assume a semi-competent malware takes control of your backup machine. What will protect those files? He can simply copy an encrypted version of those files locally then delete all backup data.
The backups would be on a hardened repo. As an e.g. with Veeam:
Hardened Repository - User Guide
To protect your backup files from loss as a result of malware activity or unplanned actions, you can add a hardened repository based on a Linux server to your backup infrastructure.A hardened repository supports the following features: Immutability: when you add a hardened repository, you...
In my search I found a program called Backups. It's based on Deja something or other. I'm in the process of backing up to a network drive as I type this. This is the first program I have found that actually works. And as a bonus it was stupid to set up. Most backup programs I've seen act as if there's no such thing as a network or just plain don't work as advertised. This one will also do incremental backups after the first which is what I want.
Probably veering too much off topic but there are GUIs for restic such as Backrest.