Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #1299512

Bug#1140518: duplicity: no longer performs (incremental?) backups with OpenPGP encryption

From Alexander Zangerl <az@snafu.priv.at>
Newsgroups linux.debian.bugs.dist
Subject Bug#1140518: duplicity: no longer performs (incremental?) backups with OpenPGP encryption
Date 2026-06-24 03:10 +0200
Message-ID <N9khP-nXQ-1@gated-at.bofh.it> (permalink)
References <N8xAt-eF6e-1@gated-at.bofh.it> <N94mJ-cKN-3@gated-at.bofh.it> <N94mJ-cKN-1@gated-at.bofh.it> <N8xAt-eF6e-1@gated-at.bofh.it> <N94mJ-cKN-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

On Tue, 23 Jun 2026 09:59:33 +0200, Francesco Poli writes:
>Isn't this a bug anyway, even though of smaller severity?

i don't think so, as the --no-check-remote option exists.

as far as i understand the relevant logic, the primary
assumption behind (force-)checking the remote manifests is 
that you either use symmetric encryption, or encrypt and sign and
with gpg-agent fully primed and ready or with passphrase(s) preset via
the environment.
my interpretation is that upstream considers this case, where the
backup machine can be (and is) trusted, but maybe not the repository, is
the more critical they want to cover.

the asymmetric encrypt-only scenario (which i personally also definitely
require) reverses the trust assumptions, and needs no remote manifest
checking.

i'd say there is no bug as long as both scenarios remain supported
(or until one is cleanly retired).

(see also the section 'A NOTE ON SYMMETRIC ENCRYPTION AND SIGNING' in
the duplicity manpage.)

regarding actual passphrase interaction i'm not certain what is and
isn't supported with what exact version of gpg2, with respect to
operation without gpg-agent. personally i don't use gpg2.


-- 
Alexander Zangerl + GPG Key 2FCCF66BB963BD5F + https://snafu.priv.at/
The terrorists have won. They have successfully convinced America to
attack itself. -- Steve Kirsch

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Find similar | Unroll thread


Thread

Bug#1140518: duplicity: no longer performs (incremental?) backups with OpenPGP encryption "Francesco Poli (wintermute)" <invernomuto@paranoici.org> - 2026-06-21 23:10 +0200
  Bug#1140518: duplicity: no longer performs (incremental?) backups with OpenPGP encryption Francesco Poli <invernomuto@paranoici.org> - 2026-06-21 23:40 +0200
  Bug#1140518: duplicity: no longer performs (incremental?) backups with OpenPGP encryption Francesco Poli <invernomuto@paranoici.org> - 2026-06-23 10:10 +0200
    Bug#1140518: duplicity: no longer performs (incremental?) backups with OpenPGP encryption Alexander Zangerl <az@snafu.priv.at> - 2026-06-24 03:10 +0200

csiph-web