Implementasi Backup Terenkripsi pada Server Linux Menggunakan Shell Script dan Penyimpanan Cloud Berbasis Rclone

Ahmad Dyas Faidzin, Ir. Alif Subardono, S.T., M.Eng.

2026 | Tugas Akhir | D4 TEKNOLOGI JARINGAN

Ketergantungan berbagai sektor terhadap server berbasis Linux menjadikan keberlangsungan data sebagai aspek krusial, sementara backup manual yang tidak konsisten dan risiko ransomware terhadap data tidak terenkripsi menuntut solusi backup otomatis dan aman. Penelitian ini merancang dan mengimplementasikan sistem backup otomatis berbasis Bash Shell Script yang mengintegrasikan kompresi tar/gzip, enkripsi simetris AES-256 melalui GPG dengan pengelolaan passphrase berbasis RAM (/dev/shm), verifikasi integritas SHA-256, pengunggahan terenkripsi ke Google Drive melalui rclone, serta notifikasi status real-time melalui Slack Incoming Webhook, seluruhnya berjalan terjadwal melalui cron tanpa intervensi pengguna. Pengujian dilakukan pada laptop berbasis Linux Mint 22.3 (dengan verifikasi kompatibilitas tambahan pada Ubuntu Server 22.04 LTS) melalui tujuh skenario: keberhasilan backup pada empat variasi ukuran data video (52 MB–1,2 GB) dan dokumen PDF 39 MB, mekanisme penguncian akibat kesalahan passphrase berulang, deteksi manipulasi data melalui checksum, proses restore, notifikasi Slack, performa waktu eksekusi, serta kualitas jaringan (QoS). Hasil penelitian menunjukkan seluruh 24 sesi backup berhasil dieksekusi tanpa kegagalan; mekanisme penguncian berhasil mencegah percobaan passphrase berulang; verifikasi checksum mendeteksi seluruh modifikasi satu byte; proses restore memulihkan data secara utuh; dan notifikasi Slack terkirim dalam waktu kurang dari sepuluh detik pada seluruh percobaan. Waktu eksekusi total didominasi oleh transfer jaringan dengan throughput efektif 3,6–4,6 MiB/detik, sedangkan rasio kompresi bervariasi dari mendekati nol persen pada berkas video hingga sekitar 41 persen pada berkas dokumen. Sistem yang dikembangkan terbukti mampu menjaga kerahasiaan, integritas, dan keandalan pelaporan proses backup secara otomatis pada lingkungan server Linux.

The growing reliance of various sectors on Linux-based servers makes data continuity critical, while inconsistent manual backups and ransomware risks against unencrypted data call for an automated, secure backup solution. This study designs and implements an automated backup system based on Bash Shell Script that integrates tar/gzip compression, symmetric AES-256 encryption via GPG with RAM-based passphrase management (/dev/shm), SHA-256 integrity verification, encrypted upload to Google Drive via rclone, and real-time status notification through Slack Incoming webhook, all scheduled through cron without user intervention. Testing was conducted on a laptop running Linux Mint 22.3 (with additional compatibility verification on Ubuntu Server 22.04 LTS) through seven scenarios: backup success across four video file size variations (52 MB–1.2 GB) and a 39 MB PDF document set, lockout mechanism testing under repeated passphrase errors, data manipulation detection via checksum, restore process testing, Slack notification testing, execution-time performance, and network quality of service (QoS). Results show all 24 backup sessions executed successfully without failure; the lockout mechanism successfully prevented repeated passphrase attempts; checksum verification detected every single-byte modification; the restore process fully recovered data; and Slack notifications were delivered in under ten seconds across all trials. Total execution time was dominated by network transfer, with an effective throughput of 3.6–4.6 MiB/s, while compression ratios ranged from near zero percent for video files to about 41 percent for document files. The developed system is shown to maintain confidentiality, integrity, and reliable automated reporting of the backup process within a Linux server environment.

Kata Kunci : backup terenkripsi, shell script, GPG AES-256, SHA-256, rclone, Slack Incoming webhook