-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I'm trying to create an encrypted backup in DVD of my encrypted partition. What I have done so far is: 1) Use Yast to create a new encrypted filesystem, but using a 4000 Mb file instead of a new partition. This is mounted directly from fstab: /biggy/crypta.bck.file /biggy/crypta.bck ext3 noauto,acl,user_xattr,loop=/dev/loop1,encryption=twofish256,phash=sha512,itercountk=100 0 0 This is a new system for me, previously /etc/cryptotab and /etc/init.d/boot.crypto would be involved. It is easier now. 2) Copy everything needed to that filesystem (I used mc). 3) Umount the crypto filesystem. 4) Try to generate a zisofs compressed image: nimrodel:/other/backup # mkzftree --file /biggy/crypta.bck.file /other/backup/crypta.bck.file mkzftree: /biggy/crypta.bck.file: Value too large for defined data type And that's where problems start. I think I must have gone past the limits of mkzftree, or it is a bug. Anybody knows? 5) Create the DVD image (I add another directory to adjust up p to 4.7G) : time nice mkisofs -z -R -quiet -graft-points\ -publisher "Not Published, private backup" \ -p "Carlos E. R." \ -V "SysBck, SuSE Lnx 9.3, 20060206-4" \ -o /biggy/dvd_cuatro.iso \ /other/backup/cuatro/ /biggy/crypta.bck.file 6) Test it. First mount the iso image (not burnt yet to dvd): mount -t iso9660 -o ro,loop=/dev/loop3 /biggy/dvd_cuatro.iso /mnt Then, mount the crypto file there, with help of an entry in the fstab file: /mnt/crypta.bck.file /biggy/crypta.iso ext3 noauto,ro,acl,user_xattr,loop=/dev/loop2,encryption=twofish256,phash=sha512,itercountk=100 0 0 The result is: /biggy/dvd_cuatro.iso on /mnt type iso9660 (ro,loop=/dev/loop3) /mnt/crypta.bck.file on /biggy/crypta.iso type ext3 (ro,loop=/dev/loop2,phash=sha512,encryption=twofish256,acl,user_xattr) /biggy/crypta.bck.file on /biggy/crypta.bck type ext3 (rw,loop=/dev/loop1,phash=sha512,encryption=twofish256,acl,user_xattr) Compare the files... done. Burn it. Works! Pity I can not compress the big crypto file. - -- Cheers, Carlos Robinson -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFD/lp8tTMYHG2NR9URAnWBAKCOOITM+Q+/gWAeOcdwf8usMstI1QCcDfV0 bpnKQlRGES3xSeg777J/sPc= =cNkY -----END PGP SIGNATURE-----