I am looking for an existing service / tool which would support thefollowing in a UNIX-like shell environment:append-only writes, with writes guaranteed to be persistent for some well-specified period of timecommand-line interface or possibility of sending request using common tools like wget/curl, ssh, git etc.authentication-free (this would definitely simplify the previous item)By design, such a service would be useful as a tamper-free short-termauditing system / tool:automated asymmetric encryption of sensitive data (passphrase is not used in asymmetric encryption)no way to delete traces for a guaranteed period of time (e.g., 1 week)Some use cases likeautomatically track the location of a protable computer ordump system log entries of interestcould easily be supported by writing to such an append-only servicefrom the from /etc/rc.d/ startup script or from (ana)cron,respectively. If an attacker steals the computer and boots the OS (theformer), or hacks into it (the latter), the user would be able todetect it, perhaps with some help of yet another monitoring servicethat reads the former append-only write service. (Note the attackercould not delete the entries as it's append-only storage).Current attempts of emulating such a service:ssh 'bash -c cat ... >> writes.$(date +%Y-%m-%d)'Problem: requires a trusted machine (and do-it-yourself data cleanup)Create a new anonymous pastebin.com document on each write. Not feasible:No tamper-free storage of the URL to each documentis not feasible (note editing or reusing the same one would allowdeletion)probable IP ban if writes are too frequentUsing a cloud-based file-management service, such as DropboxCreate a Dropbox account associated with the rootFetch Dropbox credentials via ssh/scp from a trustedmachine/server, while making sure they don't escape the RAM (use/run/shm/ to store them if necessary)Delete contents of a well-known file, then rewrite new data.Problems:tricky to set up in a secure way.to read anything except the last written entry, one would need to(manually) dig through event history of file content updates.Version Control System with no history rewrites, such as MercurialProblem: storage is bounded - cleanup of old entries not possible (not deletion and recretion would make the service unavailable a that period of time)Any ideas of how to support/implement such a service are appreciated.
Remote queue-like auditing service (append-only pastebin)
security;configuration;remote;readonly;audit