Re: [Duplicity-talk] .onion, .i2p

[du_ml]

Hello Ede!

TL;DR
Duplicity with paramiko doesn't work with .onion addresses.

Duplicity with pexpect - partially works with .onion addresses (I've 
only tested 3 options - backup, restore, list-current-files).

The last but the best:  THE WINNER is lftp+sftp!
Fast, no failures in DEBUG at all.
I have tested backup, restore and list-current-files. All 3 work super well.
lftp+sftp - the winner!
---

1. I've checked options scp and sftp as well. The output is still the 
same like stated below:
paramiko+sftp:// , paramiko+scp://

"BackendException: ssh connection to user@abcd.onion:xx failed: [Errno 
-3] Temporary failure in name resolution"

I' d like to point out one more time that ssh or rsync recognizes .onion 
or .b32.i2p address using the ssh configuration below.

/etc/ssh_config

Host abcd.onion
        Port xx
        User user
        IdentityFile /path/to/file
        ProxyCommand nc -x 127.0.0.1:9050 -X 5 %h %p
        Compression yes
Host zxcvbnm
        Hostname 127.0.0.1
        Port xx
        User user
        IdentityFile /path/to/file
        ProxyCommand nc -x 127.0.0.1:4447 -X 5 %h %p
        Compression yes

2. pexpect+scp,  pexpect+sftp
- I checked only 3 simple options- backup and restore - they work but 
using duplicity -v9 I saw a lot of failures.

Bottom line is the backup was created on remote server and I was able to 
restore it on local machine.
I did not check any sophisticated options.

- I checked on top backup and restore - list-current-files - it doesn't 
work.

"Traceback (innermost last):  File "/usr/bin/duplicity", line 92, in 
<module>    with_tempdir(main)  File "/usr/bin/duplicity", line 75, in 
with_tempdir    fn()  File 
"/usr/lib/python3/dist-packages/duplicity/dup_main.py", line 1577, in 
main    do_backup(action)  File 
"/usr/lib/python3/dist-packages/duplicity/dup_main.py", line 1664, in 
do_backup    list_current(col_stats)  File 
"/usr/lib/python3/dist-packages/duplicity/dup_main.py", line 717, in 
list_current    sig_chain = col_stats.get_signature_chain_at_time(time)  
              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^  File 
"/usr/lib/python3/dist-packages/duplicity/dup_collections.py", line 
1035, in get_signature_chain_at_time    raise CollectionsError(u"No 
signature chains found") duplicity.dup_collections.CollectionsError: No 
signature chains found"

3. lftp+sftp - I've only tested: backup, restore and list-current-files.
Everything works smoothly with .onion address.

---
OS: Debian 12, official repository
Duplicity: Version: 0.8.22-1+b3
python3-paramiko: Version: 2.12.0-2

Kind regards,
/


> From:   edgar . soldin
> Subject:        Re: [Duplicity-talk] .onion, .i2p
> Date:   Thu, 26 Oct 2023 13:43:41 +0200
> User-agent:     Mozilla Thunderbird
>
> On 26.10.2023 10:59, du_ml--- via Duplicity-talk wrote:
>
>     Hello,
>
>     I cannot use duplicity with the remote server xxxx.onion.
>     I can connect with that server using e.g. ssh or rsync.
>
>     I used:
>
>     duplicity /home/directory scp://xxxx.onion:/remote/directory
>
>     output:
>
>     ackendException: ssh connection to yyy@xxxx.onion:ZZZ failed: [Errno 97] 
>     Address family not supported by protocol
>
>
>     my ssh_config:
>
>     Host *.onion
>               ProxyCommand nc -x 127.0.0.1:9050 -X 5 %h %p
>               Compression yes
>
>     Host xxxx.onion
>              Port ZZZ
>              User yyy
>
>     The same is with .i2p domain.
>
>
> hey anonymous,
>
> duplicity implements 2 ssh-backends.
>   https://duplicity.us/stable/duplicity.1.html#a-note-on-ssh-backends
>
> default being paramiko which afaics supports the proxy command
>   https://docs.paramiko.org/en/latest/api/config.html
> . maybe you got an older paramiko version, that didn't?
>
> anyway, two things
> 1. if at all possible use sftp:// because it is much more robust and reliable
>    https://duplicity.us/stable/duplicity.1.html#why-use-sftp-instead-of-scp
> 2. try pexpect+sftp:// the cmd line binary based backend. if they work for you 
> directly they should work in tandem with duplicity as well.
>
> should you find out why paramiko is not working we would appreciate a quick 
> description here for the ml archive and all future users.
>
> hope that helped.. sunny regards ede/duply.net