Skip to main content

Encrypting cold storage archiver for Amazon S3 and Glacier.

Project description


Encrypting cold storage archiver for Amazon S3 and Glacier.

icebox is a command-line client for storing files and directories in Amazon S3 and Glacier. All data is encrypted using GnuPG before being uploaded and no original filenames will be visible remotely.


  • AWS credentials with write access to S3/Glacier
  • GnuPG public/private keypair
  • Python 3.6 or higher


AWS credentials

Configure AWS credentials as described in the Boto documentation. The credentials should have write access to the S3 buckets or Glacier vaults you plan to use. See the example IAM policy for recommended permissions.

GnuPG keypair

Create a keypair for icebox and make a note of the ID. Retrieval operations can take a long time, so you should make sure the keypair stays accessible, i.e. no password prompts blocking the operation.

Install icebox

Install icebox using pip (or pipsi):

pip3 install icebox


Create a new box


Create the box mybox for an S3 bucket called mybucket:

icebox init mybox 0xMYKEYID s3 mybucket

Check out the available options:

icebox init mybox 0xMYKEYID s3 --help

Please note: encrypted metadata (1-2 KB per put operation) is stored using the Standard storage class.


Create the box mybox for a Glacier vault called myvault:

icebox init mybox 0xMYKEYID glacier myvault

Store data in a box

To store a file or directory, simply specify its location:

icebox put mybox cat-pictures/grumpy.jpg

Retrieve data from a box

There are no directories in boxes, so you just specify the original name of the source and a destination:

icebox get mybox grumpy.jpg -d ~/Desktop

Standard retrievals can take a long time. To perform an Expedited retrieval, use the Tier option:

icebox get mybox grumpy.jpg -d ~/Desktop -o Tier=Expedited

Retrieval operations are tracked by icebox, so you can interrupt a pending retrieval and request the same source again later.

Delete data from a box

To delete a stored file or directory, use its original name:

icebox delete mybox grumpy.jpg

List data in a box

To list the contents of a box:

icebox list mybox

Refresh data in a box

To update local box information from the backend:

icebox refresh mybox

Refresh operations are tracked by icebox, so you can interrupt a refresh and continue it later.

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

icebox-0.4.0.tar.gz (12.0 kB view hashes)

Uploaded source

Built Distribution

icebox-0.4.0-py3-none-any.whl (27.6 kB view hashes)

Uploaded py3

Supported by

AWS AWS Cloud computing Datadog Datadog Monitoring Facebook / Instagram Facebook / Instagram PSF Sponsor Fastly Fastly CDN Google Google Object Storage and Download Analytics Huawei Huawei PSF Sponsor Microsoft Microsoft PSF Sponsor NVIDIA NVIDIA PSF Sponsor Pingdom Pingdom Monitoring Salesforce Salesforce PSF Sponsor Sentry Sentry Error logging StatusPage StatusPage Status page