From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <infrabit@infrabit.net>
Received: from mail.saout.de ([127.0.0.1])
 by localhost (mail.saout.de [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 5sm8GzwLFzoZ for <dm-crypt@saout.de>;
 Thu,  1 Aug 2013 22:46:59 +0200 (CEST)
Received: from smtp-out-03.shaw.ca (smtp-out-03.shaw.ca [64.59.136.139])
 by mail.saout.de (Postfix) with ESMTP
 for <dm-crypt@saout.de>; Thu,  1 Aug 2013 22:46:58 +0200 (CEST)
Message-ID: <51FAC6E4.4090409@infrabit.net>
Date: Thu, 01 Aug 2013 13:36:52 -0700
From: infrabit <infrabit@infrabit.net>
MIME-Version: 1.0
References: <CA+Tk8fx_Xh-Ou8MZq1MDO+XkCOi3BwaqU0GY2Vd8_Vt5cqdnLg@mail.gmail.com>
 <20130801003458.GA1093@tansi.org>
 <CA+Tk8fxDaNhu9WY+KvUdWbPZDciDdYZ+ivLNbc-z2mP77GTYRQ@mail.gmail.com>
 <CAFnMBaQpO8UPmuDbv9VOS0=gGRk6u8SbhL=974G+jUk3USx2kQ@mail.gmail.com>
 <CA+Tk8fyTJYSdBp-kceKeXM0e4_5D0utuW-H3tGzdLefr4CF80w@mail.gmail.com>
 <51FA1198.6040406@gmail.com>
 <CA+Tk8fwmr7FaetvfFkoydiLY2KMpNCmxTStCd8VgrCnHr7gRqA@mail.gmail.com>
 <51FA3B5E.6030800@gmail.com> <20130801133442.GA10436@tansi.org>
 <51FA74C3.8010208@logtenberg.eu>
 <CA+Tk8fyvJco2CmrLCTxSODnvdcR9yvVuL8DdaKxGcN5fygBAWA@mail.gmail.com>
In-Reply-To: <CA+Tk8fyvJco2CmrLCTxSODnvdcR9yvVuL8DdaKxGcN5fygBAWA@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Subject: Re: [dm-crypt] dm-crypt "inverted" usage (i.e. exporting an
 "encrypted" image of a block device)
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt/>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: dm-crypt@saout.de

On Thu, 1 Aug 2013 19:17:00 +0300, Ciprian Dorin Craciun 
<ciprian.craciun@gmail.com> wrote:
>     I found that the best way to "clone" the
> contents of a file system (minus any meta-data like ACL, extended
> attributes, etc.) is via `cpio` over `ssh`.  It beats `rsync` [...]

...or tar+ssh and if you can afford to trade security (although from your posts 
I wouldn't) use a weak cipher f.e. arcfour (use case: private network where you 
only have ssh login to servers).

As all others posters suggested you will shoot yourself in the foot. It's not 
about if, but when.