duplicity-talk
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Duplicity-talk] No secret key required on differential backups


From: Georg Lutz
Subject: Re: [Duplicity-talk] No secret key required on differential backups
Date: Fri, 26 Feb 2010 16:49:21 +0100
User-agent: Thunderbird 2.0.0.23 (X11/20090817)

Lluís Batlle schrieb:
Hello,

I've noticed that duplicity does not require me the GPG passphrase for
the secret key when doing a differential backup, but it requires the
passphrase for a 'verify'. From the latter I see that my files are
properly encrypted.

Nevertheless, how come duplicity can do a differential backup without
being able to decrypt what has already been backed up? Are the files
metadata (names, timestamps, sizes, ...) stored without encryption?



Hi Lluis,

this is strange since I still experience excatly the opposite, see the attached email. Unfourtunately I didn't received an answer from the mailing list. What command line options are you using?

Concerning your question: Duplicity stores its metadata unencrypted in the local "archive-dir" (see man page) folder so it must not necessarily decrypt the files. However in my setup it is asking for the passphrase.


Regards
  Georg

--
 Georg
--- Begin Message --- Subject: Re: [Duplicity-talk] Duplicity 0.6.06 Released Date: Sun, 15 Nov 2009 20:50:09 +0100 User-agent: Thunderbird 2.0.0.23 (X11/20090817)
Kenneth Loafman schrieb:

Fixed 435975 gpg asks for password in 0.6.05, but not in 0.5.18


Hi Kenneth,

thank you for the new version.

Is it sure that bug 435975 is really fixed?

I tried the following command line:

/usr/bin/duplicity --name fixedname --archive-dir
/tmp/duplicity_test/archive --encrypt-key B399F3FD -v9 /tmp/duplic
ity_testdata file:///tmp/duplicity_test/data

The first time (full backup) the backup finished successfully. The
second time a GPG error "Entschlüsselung fehlgeschlagen: Geheimer
Schlüssel ist nicht vorhanden" (english: "decryption failed: Secret key
not available") occured.

I have attached the full log as text file.


Regards
   Georg
address@hidden:~$ run_duplicity_test 
Using archive dir: /tmp/duplicity_test/archive/fixedname
Using backup name: fixedname
Import of duplicity.backends.giobackend Succeeded
Import of duplicity.backends.tahoebackend Succeeded
Import of duplicity.backends.botobackend Succeeded
Import of duplicity.backends.webdavbackend Succeeded
Import of duplicity.backends.ftpbackend Succeeded
Import of duplicity.backends.cloudfilesbackend Succeeded
Import of duplicity.backends.rsyncbackend Succeeded
Import of duplicity.backends.hsibackend Succeeded
Import of duplicity.backends.imapbackend Succeeded
Import of duplicity.backends.localbackend Succeeded
Import of duplicity.backends.sshbackend Succeeded
Main action: inc
================================================================================
duplicity 0.6.06 (October 29, 2009)
Args: /usr/bin/duplicity --name fixedname --archive-dir 
/tmp/duplicity_test/archive --encrypt-key B399F3FD -v9 /tmp/duplicity_testdata 
file:///tmp/duplicity_test/data
Linux ercws055.erc.lan 2.6.27.38-170.2.113.fc10.i686 #1 SMP Wed Nov 4 17:55:39 
EST 2009 i686 i686
/usr/bin/python 2.5.2 (r252:60911, Sep 30 2008, 15:41:38) 
[GCC 4.3.2 20080917 (Red Hat 4.3.2-4)]
================================================================================
Using temporary directory /tmp/duplicity-A8jL8d-tempdir
Registering (mkstemp) temporary file 
/tmp/duplicity-A8jL8d-tempdir/mkstemp-iHkJqF-1
Temp has 1931632640 available, backup will use approx 34078720.
Local and Remote metadata are synchronized, no sync needed.
0 files exist on backend
0 files exist in cache
Extracting backup chains from list of files: []
Last full backup date: none
Collection Status
-----------------
Connecting with backend: LocalBackend
Archive dir: /tmp/duplicity_test/archive/fixedname

Found 0 secondary backup chains.
No backup chains with active signatures found
No orphaned or incomplete backup sets found.
No signatures found, switching to full backup.
Using temporary directory 
/tmp/duplicity_test/archive/fixedname/duplicity-YJI60O-tempdir
Registering (mktemp) temporary file 
/tmp/duplicity_test/archive/fixedname/duplicity-YJI60O-tempdir/mktemp-sn9lT2-1
Using temporary directory 
/tmp/duplicity_test/archive/fixedname/duplicity-BxXzQN-tempdir
Registering (mktemp) temporary file 
/tmp/duplicity_test/archive/fixedname/duplicity-BxXzQN-tempdir/mktemp-IZvXhl-1
AsyncScheduler: instantiating at concurrency 0
Registering (mktemp) temporary file 
/tmp/duplicity-A8jL8d-tempdir/mktemp-ZtHt9k-2
Selecting /tmp/duplicity_testdata
Comparing () and None
Getting delta of (() /tmp/duplicity_testdata dir) and None
A .
Selecting /tmp/duplicity_testdata/test1
Comparing ('test1',) and None
Getting delta of (('test1',) /tmp/duplicity_testdata/test1 reg) and None
A test1
Removing still remembered temporary file 
/tmp/duplicity_test/archive/fixedname/duplicity-YJI60O-tempdir/mktemp-sn9lT2-1
Cleanup of temporary file 
/tmp/duplicity_test/archive/fixedname/duplicity-YJI60O-tempdir/mktemp-sn9lT2-1 
failed
Removing still remembered temporary file 
/tmp/duplicity_test/archive/fixedname/duplicity-BxXzQN-tempdir/mktemp-IZvXhl-1
Cleanup of temporary file 
/tmp/duplicity_test/archive/fixedname/duplicity-BxXzQN-tempdir/mktemp-IZvXhl-1 
failed
AsyncScheduler: running task synchronously (asynchronicity disabled)
Writing 
/tmp/duplicity_test/data/duplicity-full.20091115T193619Z.vol1.difftar.gpg
Deleting /tmp/duplicity-A8jL8d-tempdir/mktemp-ZtHt9k-2
Forgetting temporary file /tmp/duplicity-A8jL8d-tempdir/mktemp-ZtHt9k-2
AsyncScheduler: task completed successfully
Processed volume 1
Writing 
/tmp/duplicity_test/data/duplicity-full-signatures.20091115T193619Z.sigtar.gpg
Writing /tmp/duplicity_test/data/duplicity-full.20091115T193619Z.manifest.gpg
3 files exist on backend
2 files exist in cache
Extracting backup chains from list of files: 
['duplicity-full-signatures.20091115T193619Z.sigtar.gpg', 
'duplicity-full.20091115T193619Z.manifest.gpg', 
'duplicity-full.20091115T193619Z.vol1.difftar.gpg']
File duplicity-full-signatures.20091115T193619Z.sigtar.gpg is not part of a 
known set; creating new set
Ignoring file (rejected by backup set) 
'duplicity-full-signatures.20091115T193619Z.sigtar.gpg'
File duplicity-full.20091115T193619Z.manifest.gpg is not part of a known set; 
creating new set
File duplicity-full.20091115T193619Z.vol1.difftar.gpg is part of known set
Found backup chain [Sun Nov 15 20:36:19 2009]-[Sun Nov 15 20:36:19 2009]
--------------[ Backup Statistics ]--------------
StartTime 1258313779.41 (Sun Nov 15 20:36:19 2009)
EndTime 1258313779.46 (Sun Nov 15 20:36:19 2009)
ElapsedTime 0.05 (0.05 seconds)
SourceFiles 2
SourceFileSize 4096 (4.00 KB)
NewFiles 2
NewFileSize 4096 (4.00 KB)
DeletedFiles 0
ChangedFiles 0
ChangedFileSize 0 (0 bytes)
ChangedDeltaSize 0 (0 bytes)
DeltaEntries 2
RawDeltaSize 0 (0 bytes)
TotalDestinationSizeChange 478 (478 bytes)
Errors 0
-------------------------------------------------

Removing still remembered temporary file 
/tmp/duplicity-A8jL8d-tempdir/mkstemp-iHkJqF-1
address@hidden:~$ run_duplicity_test 
Using archive dir: /tmp/duplicity_test/archive/fixedname
Using backup name: fixedname
Import of duplicity.backends.giobackend Succeeded
Import of duplicity.backends.tahoebackend Succeeded
Import of duplicity.backends.botobackend Succeeded
Import of duplicity.backends.webdavbackend Succeeded
Import of duplicity.backends.ftpbackend Succeeded
Import of duplicity.backends.cloudfilesbackend Succeeded
Import of duplicity.backends.rsyncbackend Succeeded
Import of duplicity.backends.hsibackend Succeeded
Import of duplicity.backends.imapbackend Succeeded
Import of duplicity.backends.localbackend Succeeded
Import of duplicity.backends.sshbackend Succeeded
Main action: inc
================================================================================
duplicity 0.6.06 (October 29, 2009)
Args: /usr/bin/duplicity --name fixedname --archive-dir 
/tmp/duplicity_test/archive --encrypt-key B399F3FD -v9 /tmp/duplicity_testdata 
file:///tmp/duplicity_test/data
Linux ercws055.erc.lan 2.6.27.38-170.2.113.fc10.i686 #1 SMP Wed Nov 4 17:55:39 
EST 2009 i686 i686
/usr/bin/python 2.5.2 (r252:60911, Sep 30 2008, 15:41:38) 
[GCC 4.3.2 20080917 (Red Hat 4.3.2-4)]
================================================================================
Using temporary directory /tmp/duplicity-mYA1_1-tempdir
Registering (mkstemp) temporary file 
/tmp/duplicity-mYA1_1-tempdir/mkstemp-eNHXH2-1
Temp has 1931612160 available, backup will use approx 34078720.
Local and Remote metadata are synchronized, no sync needed.
3 files exist on backend
2 files exist in cache
Extracting backup chains from list of files: 
['duplicity-full-signatures.20091115T193619Z.sigtar.gpg', 
'duplicity-full.20091115T193619Z.manifest.gpg', 
'duplicity-full.20091115T193619Z.vol1.difftar.gpg']
File duplicity-full-signatures.20091115T193619Z.sigtar.gpg is not part of a 
known set; creating new set
Ignoring file (rejected by backup set) 
'duplicity-full-signatures.20091115T193619Z.sigtar.gpg'
File duplicity-full.20091115T193619Z.manifest.gpg is not part of a known set; 
creating new set
File duplicity-full.20091115T193619Z.vol1.difftar.gpg is part of known set
Found backup chain [Sun Nov 15 20:36:19 2009]-[Sun Nov 15 20:36:19 2009]
Last full backup date: Sun Nov 15 20:36:19 2009
Collection Status
-----------------
Connecting with backend: LocalBackend
Archive dir: /tmp/duplicity_test/archive/fixedname

Found 0 secondary backup chains.

Found primary backup chain with matching signature chain:
-------------------------
Chain start time: Sun Nov 15 20:36:19 2009
Chain end time: Sun Nov 15 20:36:19 2009
Number of contained backup sets: 1
Total number of contained volumes: 1
 Type of backup set:                            Time:      Num volumes:
                Full         Sun Nov 15 20:36:19 2009                 1
-------------------------
No orphaned or incomplete backup sets found.
Registering (mktemp) temporary file 
/tmp/duplicity-mYA1_1-tempdir/mktemp-JRt9BL-2
Removing still remembered temporary file 
/tmp/duplicity-mYA1_1-tempdir/mktemp-JRt9BL-2
Removing still remembered temporary file 
/tmp/duplicity-mYA1_1-tempdir/mkstemp-eNHXH2-1
GPG error detail: Traceback (most recent call last):
  File "/usr/bin/duplicity", line 1236, in <module>
    with_tempdir(main)
  File "/usr/bin/duplicity", line 1229, in with_tempdir
    fn()
  File "/usr/bin/duplicity", line 1210, in main
    check_last_manifest(col_stats) # not needed for full backup
  File "/usr/bin/duplicity", line 970, in check_last_manifest
    last_backup_set.check_manifests()
  File "/usr/lib/python2.5/site-packages/duplicity/collections.py", line 180, 
in check_manifests
    remote_manifest = self.get_remote_manifest()
  File "/usr/lib/python2.5/site-packages/duplicity/collections.py", line 214, 
in get_remote_manifest
    manifest_buffer = self.backend.get_data(self.remote_manifest_name)
  File "/usr/lib/python2.5/site-packages/duplicity/backend.py", line 490, in 
get_data
    assert not fin.close()
  File "/usr/lib/python2.5/site-packages/duplicity/dup_temp.py", line 210, in 
close
    assert not self.fileobj.close()
  File "/usr/lib/python2.5/site-packages/duplicity/gpg.py", line 201, in close
    self.gpg_failed()
  File "/usr/lib/python2.5/site-packages/duplicity/gpg.py", line 168, in 
gpg_failed
    raise GPGError, msg
GPGError: GPG Failed, see log below:
===== Begin GnuPG log =====
gpg: Entschlüsselung fehlgeschlagen: Geheimer Schlüssel ist nicht vorhanden
===== End GnuPG log =====


GPGError: GPG Failed, see log below:
===== Begin GnuPG log =====
gpg: Entschlüsselung fehlgeschlagen: Geheimer Schlüssel ist nicht vorhanden
===== End GnuPG log =====

address@hidden:~$ 


_______________________________________________
Duplicity-talk mailing list
address@hidden
http://lists.nongnu.org/mailman/listinfo/duplicity-talk

--- End Message ---

reply via email to

[Prev in Thread] Current Thread [Next in Thread]