Re: [Duplicity-talk] Unnecessarily asking for passphrase on incremental backup

[Kenneth Loafman]

Georg Lutz wrote:
> Hi,
> 
> I currently experience that in some situations duplicity is asking for
> GnuPG passphrase when I think it shouldn't necessarily.
> 
> The first (full) backup runs without problems if I enter an empty passphrase
> when being asked. In fact there is a "export PASSPHRASE=notneeded" before
> those lines.
> 
> The second time duplicity detects the previous full backup and triggers a
> incremental backup. And now duplicity asks for the passphrase to my
> encryption key.
> 
> Why does this happen? Of course in the data store (duplicity/data) the
> files are all encrypted. But shouldn't it use the unencrypted version in
> duplicity/archive when its available?

Duplicity needs the key to decrypt the remote manifest file, which it
then compares to the local manifest to guarantee that the two are in
sync.  If you are running a recent release of duplicity, --use-agent is
available to allow gpg to query a gpg-agent instead of the user.

...Ken

signature.asc
Description: OpenPGP digital signature