\u00cbshte prezantuar versioni i sistemit t\u00eb kopjimit Restic 0.18, i cili mund\u00ebson ruajtjen e kopjeve t\u00eb rezervuara n\u00eb form\u00eb t\u00eb enkriptuar n\u00eb nj\u00eb depo t\u00eb versionuar me mb\u00ebshtetje p\u00ebr deduplication. Sistemi \u00ebsht\u00eb projektuar fillimisht p\u00ebr t\u00eb siguruar q\u00eb kopjet e rezervuara ruhen n\u00eb mjedise t\u00eb pasigurta, dhe q\u00eb ndarja e nj\u00eb kopje rezerv\u00eb me persona t\u00eb tjer\u00eb nuk duhet t\u00eb komprometoj\u00eb sistemin. Kur krijohet nj\u00eb kopje rezerv\u00eb, \u00ebsht\u00eb e mundur t\u00eb p\u00ebrcaktohen rregulla fleksibile p\u00ebr p\u00ebrfshirjen dhe p\u00ebrjashtimin e skedar\u00ebve dhe katalog\u00ebve (formati i rregullave p\u00ebrngjan me rsync ose gitignore). \u00cbsht\u00eb mb\u00ebshtetur puna n\u00eb sistemet Linux, macOS, Windows dhe BSD. Kodi i projektit \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebn Go dhe shp\u00ebrndahet n\u00ebn licenc\u00ebn BSD. <\/p>\n
Kopjet rezerv\u00eb mund t\u00eb ruhen n\u00eb sistemin lokal t\u00eb skedar\u00ebve, n\u00eb nj\u00eb disk t\u00eb jasht\u00ebm serveri<\/a> me akses p\u00ebrmes SFTP\/SSH ose HTTP REST, n\u00eb re Amazon S3, OpenStack Swift, BackBlaze B2, Microsoft Azure Blob Storage dhe Google Cloud Storage, si dhe n\u00eb \u00e7do ruajtje p\u00ebr t\u00eb cilat ekzistojn\u00eb backend rclone. P\u00ebr ruajtje mund t\u00eb p\u00ebrdoret gjithashtu serveri i zhvilluar nga projekti, i cili ofron performanc\u00eb m\u00eb t\u00eb lart\u00eb krahasuar me backend t\u00eb tjer\u00eb dhe mund t\u00eb funksionoj\u00eb n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb plot\u00ebsoj\u00eb, pa lejuar fshirjen ose ndryshimin e kopjeve rezerv\u00eb n\u00eb rast t\u00eb kompromitimit t\u00eb serverit burimor dhe qasjes n\u00eb \u00e7el\u00ebsat e enkriptimit. <\/p>\n Sistemi mb\u00ebshtet snapshot-e q\u00eb reflektojn\u00eb gjendjen e hierarkis\u00eb s\u00eb katalog\u00ebve n\u00eb koh\u00eb t\u00eb ndryshme (snapshot-et krijohen automatikisht p\u00ebr \u00e7do kopje rezerv\u00eb). \u00cbsht\u00eb e mundur t\u00eb kopjoni snapshot-et nd\u00ebrmjet depozita t\u00eb ndryshme. P\u00ebr t\u00eb kursyer trafikun, gjat\u00eb krijimit t\u00eb kopjeve rezerv\u00eb kopjohen vet\u00ebm t\u00eb dh\u00ebnat q\u00eb kan\u00eb ndryshuar. Nj\u00eb snapshot me nj\u00eb kopje rezerv\u00eb mund t\u00eb montohet n\u00eb form\u00ebn e nj\u00eb ndarje virtuale (montimi b\u00ebhet me ndihm\u00ebn e FUSE). Gjithashtu ofrohen komanda p\u00ebr analizimin e ndryshimeve dhe nxjerrjen selektive t\u00eb skedar\u00ebve. <\/p>\n Ruajtja e kopjeve rezerv\u00eb n\u00eb Restic manipulohet jo me skedar\u00eb t\u00eb plot\u00eb, por me blloqe me madh\u00ebsi t\u00eb ndryshueshme, t\u00eb zgjedhura duke p\u00ebrdorur n\u00ebnshkrimin e Rabinit. Informacioni ruhet i lidhur me p\u00ebrmbajtjen dhe jo me emrat e skedar\u00ebve (emrat dhe objektet e lidhura me t\u00eb dh\u00ebnat p\u00ebrcaktohen n\u00eb nivelin e metadata t\u00eb bllokut). P\u00ebr t\u00eb kursyer hap\u00ebsir\u00eb n\u00eb ruajtje dhe p\u00ebr t\u00eb p\u00ebrjashtuar kopjimin e tepruar t\u00eb t\u00eb dh\u00ebnave realizohet deduplication. <\/p>\n Informacioni ruajt\u00ebs n\u00eb serverat e jasht\u00ebm ruhet n\u00eb m\u00ebnyr\u00eb t\u00eb koduar \u2014 p\u00ebr shumicat kontrolluese dhe deduplication p\u00ebrdoren hash-e SHA-256, p\u00ebr enkriptimin \u2014 algoritmi AES-256-CTR, dhe p\u00ebr t\u00eb garantuar integritetin \u2014 kodet e autentifikimit t\u00eb bazuara n\u00eb Poly1305-AES. Ka nj\u00eb mund\u00ebsi p\u00ebr verifikimin e kopjes rezerv\u00eb p\u00ebrmes shumicave kontrolluese dhe kodeve t\u00eb autentifikimit p\u00ebr t\u00eb konfirmuar se integriteti i skedar\u00ebve nuk \u00ebsht\u00eb shkelur. <\/p>\n N\u00eb versionin e ri \u00ebsht\u00eb eliminuar mund\u00ebsia e realizimit t\u00eb nj\u00eb sulmi (PDF) p\u00ebr t\u00eb p\u00ebrcaktuar pranin\u00eb e skedar\u00ebve t\u00eb ve\u00e7ant\u00eb n\u00eb ruajtjen e enkriptuar t\u00eb kopjeve rezerv\u00eb. Sulmi lejon t\u00eb p\u00ebrcaktohet n\u00ebse n\u00eb nj\u00eb backup t\u00eb enkriptuar ndodhet nj\u00eb skedar specifik, duke aksesuar ruajtjen e kopjeve rezerv\u00eb ose duke analizuar trafikun rrjetor me kopjet rezerv\u00eb. P\u00ebr shembull, nj\u00eb administrator serveri, ofruesi i internetit ose agjencit\u00eb e siguris\u00eb q\u00eb kan\u00eb akses n\u00eb server<\/a> apo n\u00eb trafik. Objektivi i sulmit mund t\u00eb jet\u00eb hetimi i nj\u00eb rrjedhjeje informacioni, n\u00eb t\u00eb cilin agjencit\u00eb e siguris\u00eb mund t\u00eb vler\u00ebsojn\u00eb pranin\u00eb e dokumenteve t\u00eb interesuara n\u00eb ruajtjen e kopjeve rezerv\u00eb. <\/p>\n P\u00ebr t\u00eb shfryt\u00ebzuar nj\u00eb dob\u00ebsi, sulmuesi duhet t\u00eb arrij\u00eb t\u00eb shtoj\u00eb t\u00eb dh\u00ebnat e tij n\u00eb nj\u00eb kopje rezerv\u00eb t\u00eb viktim\u00ebs ose t\u00eb dij\u00eb se nj\u00eb skedar i njohur ndodhet n\u00eb kopjen rezerv\u00eb. N\u00ebse n\u00eb kopjen rezerv\u00eb ka nj\u00eb skedar p\u00ebr t\u00eb cilin dihet nga sulmuesi (p\u00ebr shembull, nj\u00eb p\u00ebrmbajtje sistemike ose multimedia), at\u00ebher\u00eb duke aksesuar ruajtjen e enkriptuar, sulmuesi mund t\u00eb p\u00ebrcaktoj\u00eb n\u00ebse brenda ndodhen skedar\u00eb t\u00eb tjer\u00eb t\u00eb interesuar. <\/p>\n Metoda bazohet n\u00eb faktin se duke iu referuar karakteristikave t\u00eb kompresimit t\u00eb p\u00ebrmbajtjes, \u00ebsht\u00eb e mundur t\u00eb p\u00ebrcaktohen parametrat e blloqeve q\u00eb p\u00ebrdoren gjat\u00eb segmentimit t\u00eb p\u00ebrmbajtjes. P\u00ebr t\u00eb p\u00ebrcaktuar k\u00ebto parametra, mjafton t\u00eb identifikoni 3 blloqe t\u00eb enkriptuara q\u00eb p\u00ebrmbajn\u00eb t\u00eb dh\u00ebna t\u00eb njohura p\u00ebr sulmuesin. <\/p>\n Vulnerabiliteti nuk \u00ebsht\u00eb specifik p\u00ebr Restic dhe prek sisteme t\u00eb tjera rezervimi q\u00eb p\u00ebrdorin ndarjen e t\u00eb dh\u00ebnave n\u00eb blloqe p\u00ebrmes teknik\u00ebs CDC (Content-Defined Chunking), si BorgBackup, Tarsnap, Bupstash dhe Duplicacy. N\u00eb Tarsnap, problemi \u00ebsht\u00eb zgjidhur n\u00eb p\u00ebrdit\u00ebsimin 1.0.41, nd\u00ebrsa n\u00eb BorgBackup punohet mbi nj\u00eb rregullim q\u00eb pritet t\u00eb p\u00ebrfshihet n\u00eb deg\u00ebn borg 2. N\u00eb Bupstash ndryshimi m\u00eb i fundit ishte 2 vjet m\u00eb par\u00eb, nd\u00ebrsa n\u00eb Duplicacy \u2014 4 muaj m\u00eb par\u00eb. <\/p>\n Gjithashtu v\u00ebrehet se n\u00eb sistemet q\u00eb p\u00ebrdorin deduplication, kur ka mund\u00ebsi p\u00ebr t\u00eb shtuar skedar\u00ebt tuaj n\u00eb kopjen rezerv\u00eb, mund t\u00eb veprohet m\u00eb thjesht\u00eb dhe t\u00eb p\u00ebrcaktohet prania e skedar\u00ebve t\u00eb interesit n\u00eb m\u00ebnyr\u00eb indirekte. Pas shtimit t\u00eb skedarit t\u00eb kontrolluar, mund t\u00eb vler\u00ebsohet ndryshimi n\u00eb madh\u00ebsin\u00eb e ruajtjes \u2014 n\u00ebse skedari tashm\u00eb ekziston n\u00eb ruajtje, at\u00ebher\u00eb rip\u00ebrs\u00ebritja e tij nuk do t\u00eb \u00e7oj\u00eb n\u00eb rritjen e duhur t\u00eb madh\u00ebsis\u00eb p\u00ebr shkak t\u00eb deduplication. <\/p>\n P\u00ebrve\u00e7 eliminimit t\u00eb dob\u00ebsis\u00eb n\u00eb Restic 0.18, gjithashtu jan\u00eb propozuar disa novacione: <\/p>\n\n