2017-02-05 13:22:06 +00:00
|
|
|
.\" Man page generated from reStructuredText.
|
|
|
|
|
.
|
2019-03-21 20:11:46 +00:00
|
|
|
.TH BORG-KEY-CHANGE-PASSPHRASE 1 "2019-03-21" "" "borg backup tool"
|
2017-02-05 13:22:06 +00:00
|
|
|
.SH NAME
|
|
|
|
|
borg-key-change-passphrase \- Change repository key file passphrase
|
|
|
|
|
.
|
|
|
|
|
.nr rst2man-indent-level 0
|
|
|
|
|
.
|
|
|
|
|
.de1 rstReportMargin
|
|
|
|
|
\\$1 \\n[an-margin]
|
|
|
|
|
level \\n[rst2man-indent-level]
|
|
|
|
|
level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
|
|
|
|
|
-
|
|
|
|
|
\\n[rst2man-indent0]
|
|
|
|
|
\\n[rst2man-indent1]
|
|
|
|
|
\\n[rst2man-indent2]
|
|
|
|
|
..
|
|
|
|
|
.de1 INDENT
|
|
|
|
|
.\" .rstReportMargin pre:
|
|
|
|
|
. RS \\$1
|
|
|
|
|
. nr rst2man-indent\\n[rst2man-indent-level] \\n[an-margin]
|
|
|
|
|
. nr rst2man-indent-level +1
|
|
|
|
|
.\" .rstReportMargin post:
|
|
|
|
|
..
|
|
|
|
|
.de UNINDENT
|
|
|
|
|
. RE
|
|
|
|
|
.\" indent \\n[an-margin]
|
|
|
|
|
.\" old: \\n[rst2man-indent\\n[rst2man-indent-level]]
|
|
|
|
|
.nr rst2man-indent-level -1
|
|
|
|
|
.\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
|
|
|
|
|
.in \\n[rst2man-indent\\n[rst2man-indent-level]]u
|
|
|
|
|
..
|
|
|
|
|
.SH SYNOPSIS
|
|
|
|
|
.sp
|
2017-11-25 13:38:04 +00:00
|
|
|
borg [common options] key change\-passphrase [options] [REPOSITORY]
|
2017-02-05 13:22:06 +00:00
|
|
|
.SH DESCRIPTION
|
|
|
|
|
.sp
|
|
|
|
|
The key files used for repository encryption are optionally passphrase
|
|
|
|
|
protected. This command can be used to change this passphrase.
|
2017-11-25 13:38:04 +00:00
|
|
|
.sp
|
|
|
|
|
Please note that this command only changes the passphrase, but not any
|
|
|
|
|
secret protected by it (like e.g. encryption/MAC keys or chunker seed).
|
|
|
|
|
Thus, changing the passphrase after passphrase and borg key got compromised
|
|
|
|
|
does not protect future (nor past) backups to the same repository.
|
2017-02-05 13:22:06 +00:00
|
|
|
.SH OPTIONS
|
|
|
|
|
.sp
|
|
|
|
|
See \fIborg\-common(1)\fP for common options of Borg commands.
|
|
|
|
|
.SS arguments
|
|
|
|
|
.sp
|
|
|
|
|
REPOSITORY
|
2017-06-18 10:13:28 +00:00
|
|
|
.SH EXAMPLES
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.INDENT 3.5
|
|
|
|
|
.sp
|
|
|
|
|
.nf
|
|
|
|
|
.ft C
|
|
|
|
|
# Create a key file protected repository
|
|
|
|
|
$ borg init \-\-encryption=keyfile \-v /path/to/repo
|
|
|
|
|
Initializing repository at "/path/to/repo"
|
|
|
|
|
Enter new passphrase:
|
|
|
|
|
Enter same passphrase again:
|
|
|
|
|
Remember your passphrase. Your data will be inaccessible without it.
|
|
|
|
|
Key in "/root/.config/borg/keys/mnt_backup" created.
|
|
|
|
|
Keep this key safe. Your data will be inaccessible without it.
|
|
|
|
|
Synchronizing chunks cache...
|
|
|
|
|
Archives: 0, w/ cached Idx: 0, w/ outdated Idx: 0, w/o cached Idx: 0.
|
|
|
|
|
Done.
|
|
|
|
|
|
|
|
|
|
# Change key file passphrase
|
|
|
|
|
$ borg key change\-passphrase \-v /path/to/repo
|
|
|
|
|
Enter passphrase for key /root/.config/borg/keys/mnt_backup:
|
|
|
|
|
Enter new passphrase:
|
|
|
|
|
Enter same passphrase again:
|
|
|
|
|
Remember your passphrase. Your data will be inaccessible without it.
|
|
|
|
|
Key updated
|
|
|
|
|
.ft P
|
|
|
|
|
.fi
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.sp
|
|
|
|
|
Fully automated using environment variables:
|
|
|
|
|
.INDENT 0.0
|
|
|
|
|
.INDENT 3.5
|
|
|
|
|
.sp
|
|
|
|
|
.nf
|
|
|
|
|
.ft C
|
|
|
|
|
$ BORG_NEW_PASSPHRASE=old borg init \-e=repokey repo
|
|
|
|
|
# now "old" is the current passphrase.
|
|
|
|
|
$ BORG_PASSPHRASE=old BORG_NEW_PASSPHRASE=new borg key change\-passphrase repo
|
|
|
|
|
# now "new" is the current passphrase.
|
|
|
|
|
.ft P
|
|
|
|
|
.fi
|
|
|
|
|
.UNINDENT
|
|
|
|
|
.UNINDENT
|
2017-02-05 13:22:06 +00:00
|
|
|
.SH SEE ALSO
|
|
|
|
|
.sp
|
|
|
|
|
\fIborg\-common(1)\fP
|
|
|
|
|
.SH AUTHOR
|
|
|
|
|
The Borg Collective
|
|
|
|
|
.\" Generated by docutils manpage writer.
|
|
|
|
|
.
|
