Building a highly secure, cheap secondary backup from scratch

Using Banana PI

András Rutkai

Motivation

I needed a place where I can store my backups

Geographically somewhere else than my main server

As cheap as possible

Highly secure

At least 3-4 M/s throughput

Low power consumption

Alternatives

USB HDD + manual backup

NAS

Cloud

Raspberry PI

The hardware

Hardware

Why Banana PI?

1 GHZ CPU (2 cores)

1 GB memory

Gigabit ethernet

SATA port

Separate buses

Acquiring the parts

E-bay + DealExtreme

Part Specs Price
Banana PI   $45
Power supply 5V, 3000 mAh $5.5
SATA cable   $4
Case Transparent $8
Heatsinks 4 pieces set $5
SD card Kingston 16GB Class 10 $11.5
HDD WD Green 2 TB SATA-3 Laptop 35000 HUF

Assembling: parts

The parts

Assembling: cooling

The cooling

Assembling: cooling solution

Solution

Assembling: cooling in place

The cooling 2

Assembling: in progess

In progress

Assembling: without HDD

Assembled

Assembling: fine distance

The gap

Assembling: done

Done

Assembling: done cooling

Done (cooling)

The OS

Raspbian

No BIOS?

Custom bootloader

No error messages

LEDs

OS

Raspbian

Bananian

Arch

Berryboot

Raspbian for Banana PI

Installation

Simple dd

Interactive menu after installation

Further configurations over SSH

sudo apt-get

Apt

Wifi

WPA supplicant

Cleanup && update

Raspbian contains some junk

  • Wolfram engine
  • CUPS
  • Samba client
  • GUI (X)

Update

HDD

Not enough power?

Partitioning, formatting to ext4

HDParm

Securing the system

UFW

Fail2ban

Backup user and sudoer user

Restricting SSH to backup user

Encrypting /home

Conclusion?

?

Cheap?

~20k HUF + HDD

Secure?

Secure connection

Secure storage

User for administration

Fast?

~4+M/s over Wifi (150M)

Cheap to use?

8-9W on load

2W on idle

Building a highly secure, cheap secondary backup from scratch

By András Rutkai

Building a highly secure, cheap secondary backup from scratch

A presentation for my blogpost at rutkai.hu.

  • 529
Loading comments...