borg/docs/man/borg-key-change-passphrase.1

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

104 lines
2.8 KiB
Groff
Raw Normal View History

2017-02-05 13:22:06 +00:00
.\" Man page generated from reStructuredText.
.
.
.nr rst2man-indent-level 0
.
.de1 rstReportMargin
\\$1 \\n[an-margin]
level \\n[rst2man-indent-level]
level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
-
\\n[rst2man-indent0]
\\n[rst2man-indent1]
\\n[rst2man-indent2]
..
.de1 INDENT
.\" .rstReportMargin pre:
. RS \\$1
. nr rst2man-indent\\n[rst2man-indent-level] \\n[an-margin]
. nr rst2man-indent-level +1
.\" .rstReportMargin post:
..
.de UNINDENT
. RE
.\" indent \\n[an-margin]
.\" old: \\n[rst2man-indent\\n[rst2man-indent-level]]
.nr rst2man-indent-level -1
.\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
.in \\n[rst2man-indent\\n[rst2man-indent-level]]u
..
2022-11-26 21:23:46 +00:00
.TH "BORG-KEY-CHANGE-PASSPHRASE" 1 "2022-11-26" "" "borg backup tool"
2022-06-23 23:19:19 +00:00
.SH NAME
borg-key-change-passphrase \- Change repository key file passphrase
2017-02-05 13:22:06 +00:00
.SH SYNOPSIS
.sp
2022-06-23 23:19:19 +00:00
borg [common options] key change\-passphrase [options]
2017-02-05 13:22:06 +00:00
.SH DESCRIPTION
.sp
The key files used for repository encryption are optionally passphrase
protected. This command can be used to change this passphrase.
.sp
Please note that this command only changes the passphrase, but not any
secret protected by it (like e.g. encryption/MAC keys or chunker seed).
Thus, changing the passphrase after passphrase and borg key got compromised
does not protect future (nor past) backups to the same repository.
2017-02-05 13:22:06 +00:00
.SH OPTIONS
.sp
See \fIborg\-common(1)\fP for common options of Borg commands.
2017-06-18 10:13:28 +00:00
.SH EXAMPLES
.INDENT 0.0
.INDENT 3.5
.sp
.nf
.ft C
# Create a key file protected repository
2022-08-03 20:19:12 +00:00
$ borg rcreate \-\-encryption=keyfile\-aes\-ocb \-v
2022-09-10 14:03:27 +00:00
Initializing repository at \(dq/path/to/repo\(dq
2017-06-18 10:13:28 +00:00
Enter new passphrase:
Enter same passphrase again:
Remember your passphrase. Your data will be inaccessible without it.
2022-09-10 14:03:27 +00:00
Key in \(dq/root/.config/borg/keys/mnt_backup\(dq created.
2017-06-18 10:13:28 +00:00
Keep this key safe. Your data will be inaccessible without it.
Synchronizing chunks cache...
Archives: 0, w/ cached Idx: 0, w/ outdated Idx: 0, w/o cached Idx: 0.
Done.
# Change key file passphrase
2022-06-23 23:19:19 +00:00
$ borg key change\-passphrase \-v
2017-06-18 10:13:28 +00:00
Enter passphrase for key /root/.config/borg/keys/mnt_backup:
Enter new passphrase:
Enter same passphrase again:
Remember your passphrase. Your data will be inaccessible without it.
Key updated
2020-10-04 18:33:08 +00:00
# Import a previously\-exported key into the specified
# key file (creating or overwriting the output key)
# (keyfile repositories only)
2022-06-23 23:19:19 +00:00
$ BORG_KEY_FILE=/path/to/output\-key borg key import /path/to/exported
2017-06-18 10:13:28 +00:00
.ft P
.fi
.UNINDENT
.UNINDENT
.sp
Fully automated using environment variables:
.INDENT 0.0
.INDENT 3.5
.sp
.nf
.ft C
2022-06-23 23:19:19 +00:00
$ BORG_NEW_PASSPHRASE=old borg rcreate \-e=repokey
2022-09-10 14:03:27 +00:00
# now \(dqold\(dq is the current passphrase.
2022-06-23 23:19:19 +00:00
$ BORG_PASSPHRASE=old BORG_NEW_PASSPHRASE=new borg key change\-passphrase
2022-09-10 14:03:27 +00:00
# now \(dqnew\(dq is the current passphrase.
2017-06-18 10:13:28 +00:00
.ft P
.fi
.UNINDENT
.UNINDENT
2017-02-05 13:22:06 +00:00
.SH SEE ALSO
.sp
\fIborg\-common(1)\fP
.SH AUTHOR
The Borg Collective
.\" Generated by docutils manpage writer.
.