icebox 0.3.0

Encrypting command-line client for Amazon Glacier.

icebox

Encrypting command-line client for Amazon Glacier.

This command-line client lets you store files and directories in Amazon Glacier. All data is encrypted using GnuPG before being uploaded and no original filenames will be visible remotely.

Requirements

• AWS credentials with write access to Glacier
• GnuPG public/private keypair
• Python 3.5 or higher

Setup

AWS credentials

Configure AWS credentials as described in the Boto documentation. The credentials should have write access to the Glacier vaults you plan to use. See the example IAM policy for recommended permissions.

GnuPG keypair

Create a keypair for icebox and make a note of the ID. Retrieval operations can take a long time, so you should make sure the keypair stays accessible, i.e. no password prompts blocking the operation.

Install icebox

Install icebox using pip (or pipsi):

pip3 install icebox

Usage

Create a new box

Create the box mybox for a Glacier vault called myvault like this:

icebox init mybox 0xMYKEYID glacier myvault

If your AWS credentials are not in the default profile, use the --profile option:

icebox init mybox 0xMYKEYID glacier myvault --profile icebox

Store data in a box

To store a file or directory, simply specify its location:

icebox put mybox cat-pictures/grumpy.jpg

Retrieve data from a box

There are no directories in boxes, so you just specify the original name of the source and a destination:

icebox get mybox grumpy.jpg -d ~/Desktop

Standard retrievals can take a long time. To perform an Expedited retrieval, use the Tier option:

icebox get mybox grumpy.jpg -d ~/Desktop -o Tier=Expedited

Retrieval operations are tracked by icebox, so you can interrupt a pending retrieval and request the same source again later.

Delete data from a box

To delete a stored file or directory, use its original name:

icebox delete mybox grumpy.jpg

List data in a box

To list the contents of a box:

icebox list mybox

Refresh data in a box

To update local box information with the current backend inventory:

icebox refresh mybox

Refresh operations are tracked by icebox, so you can interrupt a refresh and continue it later.