ivanpinatti/rsync-crypt repository overview

⁠rsync-crypt

Backup your files encrypted to any SSH-accessible server, without trusting the server with your data. Powered by gocryptfs⁠ (reverse mode) and rsync⁠, packaged in a minimal Alpine-based image.

The remote server only ever sees ciphertext. Encryption happens on-the-fly on your machine before anything leaves it.

Full setup instructions, configuration reference, and source: github.com/ivan-pinatti-labs/rsync-crypt⁠

⁠Tags

• latest — most recently released version
• a bare version, e.g. 1.5.0 — that exact build, never overwritten

Pin a version for anything unattended (cron, scheduled backups). Use latest only when pulling by hand.

⁠Verify before you trust it

Every image is signed with cosign⁠ via GitHub Actions keyless signing, no private key involved:

cosign verify \
  --certificate-identity "https://github.com/ivan-pinatti-labs/rsync-crypt/.github/workflows/publish-image.yml@refs/heads/main" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  docker.io/ivanpinatti/rsync-crypt:latest

Also published to GHCR: ghcr.io/ivan-pinatti-labs/rsync-crypt, same digest, same tags.