From: | David Steele <david(at)pgmasters(dot)net> |
---|---|
To: | pgsql-general(at)lists(dot)postgresql(dot)org |
Subject: | Re: pgbackrest info of encrypted seems broken |
Date: | 2021-05-19 18:27:38 |
Message-ID: | 9d922ff3-93d5-bcbe-b02a-22a4bd6e80f1@pgmasters.net |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
On 5/19/21 1:42 PM, Ron wrote:
> On 5/19/21 12:08 PM, David Steele wrote:
>> On 5/19/21 9:47 AM, Ron wrote:
>>>
>>> This is on Postgresql 9.6, if it matters. Attached is a text file
>>> showing the pgbackrest version, config, backup log and "pgbackrest
>>> info" output.
>>>
>>> I followed the instructions in
>>> https://pgbackrest.org/user-guide.html#quickstart/configure-encryption,
>>> and successfully ran these commands before the first encrypted
>>> backup, but they aren't in the text file:
>>> rm -r /Database/9.6/backups/pgbackrest
>>> pgbackrest stanza-create --stanza=localhost
>>>
>>> Have I misconfigured something?
>>
>> If the cipher is configured per stanza then the info command must be
>> run per stanza, e.g.
>>
>> pgbackrest --stanza=localhost info
>>
>> If the cipher settings were in [global] this would work as expected,
>> but of course there may be valid reasons to set the cipher at the
>> stanza level. Essentially, if you run the info command without
>> --stanza it has no knowledge of stanza-level settings.
>
> Both of those solved the problem. I wound up moving it up to [global].
>
>>
>> We've known about this internally for a while, but have never seen it
>> expressed in the field. If this is a blocker for you (i.e. you can't
>> put the cipher settings in [global]) then feel free to open a Gtihub
>> issue (https://github.com/pgbackrest/pgbackrest/issues) so it is on
>> our radar.
>
> What I suggest is documenting this. :) Issue #1407.
Documenting it sounds like a good plan.
Regards,
--
-David
david(at)pgmasters(dot)net
From | Date | Subject | |
---|---|---|---|
Next Message | Stephen Frost | 2021-05-19 18:33:25 | Re: pgbackrest - hiding the encryption password |
Previous Message | Ron | 2021-05-19 17:49:42 | pgbackrest - hiding the encryption password |