NFreezer
Infrastructure
remote backup
SHOW HN2020
How HN took it
2 positive, 8 neutral or asking, 1 mixed, 10 critical, out of 21 comments about the project. Thread score -0.28.
Idea: 0 for, 8 againstExecution: 0 for, 2 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Simple codebase (249 lines) that can be audited quickly
From 2 comments
As I discover it, borg seems to be pretty good for this use case indeed. But still there is one thing (at least) that can be of interest to some people with nFreezer: it is very…
josephernest on HNnFreezer is different to RClone and Duplicity on a very important point (for me because I often move big multimedia projects): if you move `/path/to/10GB_file` to…
josephernest on HN
Objections
Streaming decryption writes data before the authentication tag is verified, which is unsafe
From 2 comments
From https://github.com/josephernest/nfreezer/blob/master/nfreezer.py, this is how you decrypt files: ``` [...] with open(f2, 'wb') as f, src_cm.open(chunkid.hex(), 'rb') as g:…
rakoo on HN> So if there is a tag problem, this is clearly logged, and you know something is wrong [...] The good thing is that you can easily edit it and have instead (pass the filename fn…
rakoo on HN
Lacks the deduplication and compression features of established tools
From 1 comment
I don't see the key point: the two things (trusting the remote storage and the tool) are rather independent for me. I already trust probably billions lines of code which handle…
giomasce on HN
Requests
Content-defined chunking for finer deduplication
From 2 comments
> So if there is a tag problem, this is clearly logged, and you know something is wrong [...] The good thing is that you can easily edit it and have instead (pass the filename fn…
rakoo on HN> The "key thing" that lead me to code my own is that with nearly all the solutions I tried, data was resent over network when a big file is moved to another dir+renamed, WHEN…
quantumofalpha on HN
Questions
How does it compare to restic, borg and rclone
From 2 comments
restic, borg, even plain rclone. plenty of backup tools exist with encryption at rest, what's the key selling point of yours? I use rclone+restic because of google drive(=cheap…
quantumofalpha on HNI use Borg to a local home server and then Duplicity on the Borg repository to Google Drive (where I happen to have a lot of space for free due to my university). In this way I…
giomasce on HN
Does restic need to be installed on the remote host when using SFTP
From 1 comment
I'll have a look too. When using with SFTP, do Restic binaries need to be installed on both local and remote, or just local?
josephernest on HN
Alternatives named
restic
From 2 comments
Don’t forget restic - it also works great on s3 compatible services! https://restic.net
noodlesUK on HNYes, restic would be my pick: easy to deploy and use, well-maintained. If you want some assurance, CERN are deploying restic:…
sjellis on HN
borg
From 1 comment
borg[1] has become the de facto standard for this use-case.[2] It can run over SSH with the borg binary on the remote server or it can run in an SFTP mode with nothing installed…
rsync on HN
rclone
From 1 comment
restic, borg, even plain rclone. plenty of backup tools exist with encryption at rest, what's the key selling point of yours? I use rclone+restic because of google drive(=cheap…
quantumofalpha on HN
duplicacy
From 1 comment
Duplicacy is a separate backup tool, but has a confusingly similar name to duplicity. I believe its chunking algorithm means large renamed files aren't re-transferred.
jaden on HN
tarsnap
From 1 comment
Also want to plug an old HN favourite - tarsnap. https://www.tarsnap.com/
tonyhb on HN