This is a WIP draft describing the work-flow requirements to support backing up and restoring to and from an encrypted volume (e.g. USB token).
Requirements:
Backup
- Mount LUKS volume (block device passed in as argument)
- Export GPG Keyring
- Copy safe.tar.gz.asc to mounted volume
Restore
- Mount LUKS volume (block device passed in as argument)
- Import GPG Keyring (or simply point to it via environment vars)
- Optionally copy safe.tar.gz.asc to home directory