Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clarify the docs: use of key export and key import is required for backup #8145

Closed
goebbe opened this issue Mar 12, 2024 · 2 comments
Closed

Comments

@goebbe
Copy link

goebbe commented Mar 12, 2024

This is a follow up from an issue on Vorta, related to the backup of keyfiles:
borgbase/vorta#1918 (comment)

Currently the docs of borg, do not mention, that the use of borg key export and borg key import is
required for a backup of the keyfiles.

Possible issue:
When using local keyfiles (saved in the home directory) a borg user could (wrongly) believe that a simple copy/ paste of the local keyfile would be sufficient for backup/ restore of the keyfile.
However, following the comments of the Vorta issue, the use of the borg key export and borg key import are mandatory.

Enhancement to the docs: Explain and clarify the situation - and possible provide a hint why this is required.
Relevant part of the docs: https://borgbackup.readthedocs.io/en/stable/usage/key.html#borg-key-export

Example:
For a backup of the borg keyfiles, the commands borg key export and borg key import have to be used.
These borg commands executes internal steps / cryptographic verification that are / is required for successful key export and import.

Note that I have no understanding of borg internals. So this text should be carefully checked and adapted/ corrected.

Please feel free to close this issue, if I misunderstood or missed something.

@ThomasWaldmann
Copy link
Member

My comment about that you must use key export/import was just that you don't have to use implementation details (that could change) and get into troubles by doing that.

borg init tells users to use borg key export each time they init a repo.

@goebbe
Copy link
Author

goebbe commented Mar 12, 2024

Thank you for looking into this. It seems I got the "MUST use" in the Vorta issue wrong.
Sorry for the noise.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants