What are your backup routines?

[adw]

Qubes has its own built-in backup tool, which is documented here:

How to back up, restore, and migrate

This may or may not meet your needs. If it does, then it’s a simple and secure solution that doesn’t require you to install any third-party tools.

If you choose to use a different tool, make sure you’re aware of the security properties you may be giving up. (For example, Qubes backups feature authenticated encryption, which most DIY backup schemes do not. This is what allows you to securely restore from a backup without dom0 being compromised.)

Related:

A new kind of back up tool

Data security has more aspects than merely secrecy. Perhaps you know about the InfoSec CIA triad. Confidentiality (which you seem to refer to as security) is just one of its aspects. Integrity and availability are the other two and a good backup system is necessary to ensure data availability. IOW, a decent back up is part of data security, not a compromise in it. The Qubes backup system has a security feature that most other backup options lack: authenticated encryption. When you need to re…

How do you organize your backups?

One of the main advantages of the Qubes backup system is that the backups it creates are not only encrypted but authenticated (and thereby also integrity-protected). Most other backup methods, including DIY procedures, do not feature this property or do not implement it correctly. (For example, if you’re not sure whether you should encrypt-then-MAC or MAC-then-encrypt, or if you don’t see the difference, then you should not be taking a DIY approach to this if security matters.) Authenticated bac…