|
@@ -362,7 +362,7 @@ Using ``BORG_PASSCOMMAND`` with a properly permissioned file
|
|
directory and use permissions to keep anyone else from reading it. For
|
|
directory and use permissions to keep anyone else from reading it. For
|
|
example, first create a key::
|
|
example, first create a key::
|
|
|
|
|
|
- head -c 1024 /dev/urandom | base64 > ~/.borg-passphrase
|
|
|
|
|
|
+ head -c 32 /dev/urandom | base64 -w 0 > ~/.borg-passphrase
|
|
chmod 400 ~/.borg-passphrase
|
|
chmod 400 ~/.borg-passphrase
|
|
|
|
|
|
Then in an automated script one can put::
|
|
Then in an automated script one can put::
|
|
@@ -387,7 +387,7 @@ Using ``BORG_PASSCOMMAND`` with macOS Keychain
|
|
First generate a passphrase and use ``security`` to save it to your login
|
|
First generate a passphrase and use ``security`` to save it to your login
|
|
(default) keychain::
|
|
(default) keychain::
|
|
|
|
|
|
- security add-generic-password -D secret -U -a $USER -s borg-passphrase -w $(head -c 1024 /dev/urandom | base64)
|
|
|
|
|
|
+ security add-generic-password -D secret -U -a $USER -s borg-passphrase -w $(head -c 32 /dev/urandom | base64 -w 0)
|
|
|
|
|
|
In your backup script retrieve it in the ``BORG_PASSCOMMAND``::
|
|
In your backup script retrieve it in the ``BORG_PASSCOMMAND``::
|
|
|
|
|
|
@@ -405,7 +405,7 @@ Using ``BORG_PASSCOMMAND`` with GNOME Keyring
|
|
|
|
|
|
Then add a secret to the login keyring::
|
|
Then add a secret to the login keyring::
|
|
|
|
|
|
- head -c 1024 /dev/urandom | base64 | secret-tool store borg-repository repo-name --label="Borg Passphrase"
|
|
|
|
|
|
+ head -c 32 /dev/urandom | base64 -w 0 | secret-tool store borg-repository repo-name --label="Borg Passphrase"
|
|
|
|
|
|
If a dialog box pops up prompting you to pick a password for a new keychain, use your
|
|
If a dialog box pops up prompting you to pick a password for a new keychain, use your
|
|
login password. If there is a checkbox for automatically unlocking on login, check it
|
|
login password. If there is a checkbox for automatically unlocking on login, check it
|
|
@@ -429,7 +429,7 @@ Using ``BORG_PASSCOMMAND`` with KWallet
|
|
``kwalletcli`` can be used to store and retrieve secrets. Ensure ``kwalletcli``
|
|
``kwalletcli`` can be used to store and retrieve secrets. Ensure ``kwalletcli``
|
|
is installed, generate a passphrase, and store it in your "wallet"::
|
|
is installed, generate a passphrase, and store it in your "wallet"::
|
|
|
|
|
|
- head -c 1024 /dev/urandom | base64 | kwalletcli -Pe borg-passphrase -f Passwords
|
|
|
|
|
|
+ head -c 32 /dev/urandom | base64 -w 0 | kwalletcli -Pe borg-passphrase -f Passwords
|
|
|
|
|
|
Once the secret is saved, retrieve it in a backup script using ``BORG_PASSCOMMAND``::
|
|
Once the secret is saved, retrieve it in a backup script using ``BORG_PASSCOMMAND``::
|
|
|
|
|