-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
It depends on how much data you have, but for most users, qvm-backup on
a subset of VMs with bzip2 compression is likely to result in a
reasonably small backup file that is suitable for daily or weekly
backups.
IMHO: qvm-backup is an underrated, underutilized tool. It's currently
the most secure way to do backups in Qubes OS (and has been for
years), because it performs authentication and encryption/decryption
in dom0 without having to install any additional programs in dom0.
It's time-tested, reliable, and secure: exactly what I want from a
backup tool. Really the only major thing it's missing is, as you say,
incremental backup functionality.
> [...]
>
> A good backup solution for security-focused systems should run in
> the Admin scope, handle disk volumes without getting involved in
> guest filesystems, and instantly know which parts of each volume
> have changed without data scans or regard to file sizes. The user
> should also feel free to consider any volumes for backup without
> thinking about additional security logistics (which guests can be
> trusted, etc).
>
Agreed. qvm-backup ticks all of these boxes except incremental backups.
- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----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=a9F/
-----END PGP SIGNATURE-----