Veracrypt
I met with Marcin to set him up with an ext3 backup usb drive that contains a 20M veracrypt file container. This encrypted volume contains:
- a backup of his pgp key (I created a new pgp key for him yesterday + revoked his old key from earlier this year as he forgot the password)
- a backup of his ssh key (I created a new ssh key for him yesterday)
- a backup of his personal keepass file (We created a new keepass for him yesterday)
- a backup of our shared ose keepass, which lives on the ose server. He also has a backup of #the keyfile used to decrypt our shared ose keepass on this drive as well.
- a redundant backup of our key file used to encrypt our server backups
Marcin's laptop now has ssh access to hetzner2 just by typing `ssh www.opensourceecology.org`. There's a '$HOME/.ssh/config' file that sets the port correctly. Marcin has been trained on how to access our shared ose keepass remotely using sshfs.
Install
- Follow command line option shown at https://www.linuxbabe.com/ubuntu/install-veracrypt-ubuntu-16-04-16-10