Backing-up just my Home folder...

[Timmy]

I see that there was another thread started today which seems to touch on the issue of creating a secure backup of a file vaulted home directory.

After some testing, I have had less than perfect results with this backup scenario...

1. Make sure that you are logged into the file vaulted account.
2. Create a new blank encrypted sparseimage disk image with Disk Utility
2a. Make sure the image is mounted.

3. Launch SuperDuper

4. From the source pop-up list select the volume with the same name as your file vaulted home folder.

5. From the target pop-up select the diskimage that you created in step 1.

6. Use the 'Backup-all files" script.

7. From the Options... dialog, select 'Erase then copy'

8. Start the copy.

SuperDuper will copy the contents of your file vaulted home folder to the encrypted disk image.

The problem seems to arise when attempting to actually use the backup disk image.
The disk image does not seem to mount from a different user account.
This could potentially pose a problem when it comes time to recover files from thee backup image.

[dnanian]

That's probably just a matter of ownership, Timmy -- you can turn ownership off for the drive if you'd like to get access, or change the ownership of the image with the Get Info panel.

[Brent]

Wow. This is exciting stuff!!

If this works, SuperDuper becomes the answer to FileVault fears. Not sure if there are other answers out there. If not, I'd say you now have a heck of a competitive advantage in a world of 'too many' stolen laptops, Dave.

Anxiously awaiting to hear of your success Timmy. Are you running 10.4.8?

Lets hope that Leopard doesn't mess this up.

[Timmy]

I'm running 10.4.7.
The back-up does work as described using the steps above.

However, using the backup diskimage from a different user account is still somewhat problematic. The diskimage will not mount at all unless I use Finder->Get Info for the diskimage and choose 'Ignore permissions/ownership on this volume.'
Even then, the diskimage still mounts as read-only when used in a different user account.

At this point, I'm not convinced that this method is really any better/safer than just doing a full clone of the entire volume...
If you are worried about your file vault directory becoming corrupted you might be able to verify/repair it using the procedure in this Apple article: http://docs.info.apple.com/article.html?artnum=25695

[dnanian]

Did you try changing the ownership for the image itself, Timmy?

[Timmy]

Ok.
Setting the mounted disk image volume to ignore ownership does seem to let me access the files from any user account.

So, it looks like this is working well for creating an encrypted back-up of a file vault home directory.

Very cool!

[Brent]

Very cool indeed.

Dave, will you be adding this information to the manual where you reference FileVault?

Dave or Timmy, changing the ownership is as simple as checking the box in the get info pane??

[dnanian]

I'm considering it for the next major update of the User's Guide.

[Brent]

Dave, is there any way to make this backup bootable?

Choosing backup all files from the FileVault will not include applications either since they are not stored in the FileVault.

I guess what I am saying is that I would like to have SD make a 'full bootable' backup just like it did before I started using FV.

Is that possible and if so what is the best way to make it happen?

Thanks

[dnanian]

Backing up the FileVault volume separately doesn't retain the original data format from the drive, so you can't just "make it bootable". Instead, you'd need to log out of the FileVault account, into a non-FileVault account, and do a full Backup - all files, as we suggested originally. That'll create a bootable backup.

[Timmy]

Originally Posted by Timmy

Ok.
Setting the mounted disk image volume to ignore ownership does seem to let me access the files from any user account.

So, it looks like this is working well for creating an encrypted back-up of a file vault home directory.

Very cool!

Back again with some progress notes:

It looks like the ignore ownership option on the mounted diskimage volume becomes unchecked after a smart update.

I guess absent some fancy scripting (which I am not competent to do) I will need to remember to disable ownership on the backup diskimage volume after each backup...

[dnanian]

We have to turn ownership on to properly back up, and leave it on (because it really should be that way). If you need to access it from different accounts, I'm sure you'll remember to turn it off if necessary -- or to authenticate with the proper credentials...

[Timmy]

Originally Posted by dnanian

I'm sure you'll remember to turn it off if necessary --

Don't overestimate me Dave!

Also, in some of my earlier tests the diskimage would not mount at all when accessed from a different user account.
I think that FileVaulted home directories have strict permissions that get carried over to the cloned image which can prevent the image from even mounting for a user other than the owner of the account.

Oh, and I'm going to try to edit this thread to change the title to "Backing-up just my File Vault Home folder" to be more specific for folks who might be searching the Forum at a later date for this type of issue.