[solved] Encrypted backups

[Elleni]

I am testing PBS and it runs pretty fine! Thanks for this great peace of software

I have a question on encryption though. On my initial attempt to create encrypted backup, and restore it on another node, that would not work. I could only restore it on the same node. Is it possible to have the same enc. keys on all our nodes so the restore could take place in any node? And if so - how would I copy which key where? For now - as it is a requirement from my boss that the backups need to be encrypted, I ended up configuring an encrypted zfs pool, so I manually import the pool and do a load-key and type the password manually on each server reboot. But I thought, if it would be possible to have the same client encryption key which would be autogenerated on each pve node, I could automate the whole backup process further not needing to unlock a zfs encrypted pool upon reboot, thats why I am asking.

 

[tuxis]

In a single cluster, you should have the same encryption key on each node.

If you have multiple single nodes, you can import the encryptionkey which you could export upon creating the new datastore.

If you did not do that, you can find the encryptionkey in /etc/pve/priv/storage/$storagename.enc . Copy that file to the other node and you should be able to decrypt the backup again.

 

[Elleni]

Thanks a lot for your information. I'll try.