Fwd: Unexpected password prompt when isolating an encrypted archive

ogreg--- via Dar-support <[email protected]> Wed, 24 Dec 2025 21:53:34 +0100
Newsgroups gmane.comp.sysutils.backup.dar.support
Message-ID <[email protected]>
This is a multi-part message in MIME format.
--===============9119618708295496720==
Content-Type: multipart/alternative;
 boundary="------------DkWoXA4mCWjMMo6PetWQrWaU"
Content-Language: da

This is a multi-part message in MIME format.
--------------DkWoXA4mCWjMMo6PetWQrWaU
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable

I still have the problem, even with your suggestion to darrc and reading=
=20
up on the Conditional Syntax.
If I specify -J on the isolation command line the problem disappears.
See small testcase below.

Merry Christmas and regards,

Ole G

*sh-5.2$ cat minimal-darrc**
***all:
 =C2=A0 -an
 =C2=A0 -R /fs/
 =C2=A0 -K aes:secret

reference:
 =C2=A0 -J aes:secret

*sh-5.2$ dar -N -B minimal-darrc -g f/test -c test**
***Error reading EA for /fs : Error retrieving EA list for /fs : No such=
=20
file or directory
Error reading EA for /fs/f/System Volume Information : Error retrieving=20
EA list for /fs/f/System Volume Information : Permission denied
Cannot read directory contents: /fs/f/System Volume Information : Error=20
opening directory: /fs/f/System Volume Information : Permission denied
 =C2=A0 --------------------------------------------
 =C2=A036 inode(s) saved
 =C2=A0=C2=A0 including 0 hard link(s) treated
 =C2=A00 inode(s) changed at the moment of the backup and could not be sav=
ed=20
properly
 =C2=A00 byte(s) have been wasted in the archive to resave changing files
 =C2=A00 inode(s) with only metadata changed
 =C2=A00 inode(s) not saved (no inode/file change)
 =C2=A00 inode(s) failed to be saved (filesystem error)
 =C2=A022 inode(s) ignored (excluded by filters)
 =C2=A00 inode(s) recorded as deleted from reference backup
 =C2=A0--------------------------------------------
 =C2=A0Total number of inode(s) considered: 58
 =C2=A0--------------------------------------------
 =C2=A0EA saved for 29 inode(s)
 =C2=A0FSA saved for 36 inode(s)
 =C2=A0--------------------------------------------

*# The above messages are normal for my backups**
**
**sh-5.2$ dar -N -B minimal-darrc -A test -C test-cat**
***Archive test requires a password: Received signal: Interrupt

*# I pressed ^C*

=2D------- Forwarded Message --------
Subject: 	Re: [Dar-support] Unexpected password prompt when isolating an=
=20
encrypted archive
Date: 	Tue, 23 Dec 2025 08:36:56 +0100
From: 	[email protected]
To: 	Denis Corbin via Dar-support <[email protected]>



Thanks, Denis.

I see the point, especially the case where the catalog is being isolated=
=20
could need 0, 1 or 2 passwords...

Regards, Ole G

On 22/12/2025 21.29, Denis Corbin via Dar-support wrote:
> I guess you make a confusion between -K and -J options
>
> -K is to be used for the object of the operation (the archive you=20
> create, the isolated catalog you create, the archive you test, list,=20
> extract data from...)
>
> -J option apply to the archive of reference (the one given to -A=20
> option), here the archive you take as reference to isolate a catalog.
>
> the same way '-$' option (pay attention to the quote if given on shell=
=20
> prompt), applies to the auxiliary archive of reference (see -@ option)
>
> note that -K is only mandatory if you want to cipher the archive (or=20
> isolated catalog, which is just a particular type of archive) about to=
=20
> be created.
>
> When reading an archive, if -K -J or '-$' is not specified and the=20
> corresponding archive is ciphered, dar will issue a prompt for you=20
> provide the password (this is what you got here without -J option).
>
> I would suggest setting the lennz-darrc file more or less that way:
>
> #-------
> all:
> =C2=A0 -K aes:secret
>
> reference:
> =C2=A0 -J aes:secret
> #-------
>
> I let you read the conditional syntax paragraph in dar man page for=20
> more information on that syntax and if you want to do more funny things:
> http://dar.linux.free.fr/doc/man/dar.html#CONDITIONAL%20SYNTAX
>
> Cheers,
> Denis
>
>
> Le 22/12/2025 =C3=A0 20:30, ogreg--- via Dar-support a =C3=A9crit=C2=A0:
>> Isolating the catalog from an encrypted archive:
>>
>> /dar -zzstd -N -B lennz-darrc -R /proc/cygdrive -C /proc/cygdrive/F/=20
>> darback/lennz-1-C-0 -A /proc/cygdrive/F/darback/lennz-1-F-0/
>> Archive lennz-1-F-0 requires a password:
>>
>> lennz-darrc contains the line:
>> *-K aes:secret*
>>
>> The previous steps dar -c, dar -t, and dar -d run with a similar=20
>> command line, but are able to used the needed information from=20
>> lennz-darrc.
>>
>>
>>
>
>

--------------DkWoXA4mCWjMMo6PetWQrWaU
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<html>
  <head>

    <meta http-equiv=3D"content-type" content=3D"text/html; charset=3DUTF-=
8">
  </head>
  <body>
    I still have the problem, even with your suggestion to darrc and
    reading up on the Conditional Syntax.<br>
    <div class=3D"moz-forward-container"> If I specify -J on the isolation
      command line the problem disappears.<br>
      See small testcase below.<br>
      <br>
      Merry Christmas and regards,<br>
      <br>
      Ole G<br>
      <br>
      <b>sh-5.2$ cat minimal-darrc</b><b><br>
      </b><b> </b><font face=3D"monospace">all:<br>
        =C2=A0 -an<br>
        =C2=A0 -R /fs/<br>
        =C2=A0 -K aes:secret<br>
        <br>
        reference:<br>
        =C2=A0 -J aes:secret<br>
      </font><br>
      <b>sh-5.2$ dar -N -B minimal-darrc -g f/test -c test</b><b><br>
      </b><font face=3D"monospace"><b> </b>Error reading EA for /fs :
        Error retrieving EA list for /fs : No such file or directory<br>
        Error reading EA for /fs/f/System Volume Information : Error
        retrieving EA list for /fs/f/System Volume Information :
        Permission denied<br>
        Cannot read directory contents: /fs/f/System Volume Information
        : Error opening directory: /fs/f/System Volume Information :
        Permission denied<br>
        =C2=A0 --------------------------------------------<br>
        =C2=A036 inode(s) saved<br>
        =C2=A0=C2=A0 including 0 hard link(s) treated<br>
        =C2=A00 inode(s) changed at the moment of the backup and could not=
 be
        saved properly<br>
        =C2=A00 byte(s) have been wasted in the archive to resave changing
        files<br>
        =C2=A00 inode(s) with only metadata changed<br>
        =C2=A00 inode(s) not saved (no inode/file change)<br>
        =C2=A00 inode(s) failed to be saved (filesystem error)<br>
        =C2=A022 inode(s) ignored (excluded by filters)<br>
        =C2=A00 inode(s) recorded as deleted from reference backup<br>
        =C2=A0--------------------------------------------<br>
        =C2=A0Total number of inode(s) considered: 58<br>
        =C2=A0--------------------------------------------<br>
        =C2=A0EA saved for 29 inode(s)<br>
        =C2=A0FSA saved for 36 inode(s)<br>
        =C2=A0--------------------------------------------<br>
      </font><br>
      <b># The above messages are normal for my backups</b><b><br>
      </b><b><br>
      </b><b>sh-5.2$ dar -N -B minimal-darrc -A test -C test-cat</b><b><br=
>
      </b><b> </b><font face=3D"monospace">Archive test requires a
        password: Received signal: Interrupt<br>
      </font><br>
      <b># I pressed ^C</b><br>
      <br>
      -------- Forwarded Message --------
      <div class=3D"moz-forward-container">
        <table class=3D"moz-email-headers-table" cellspacing=3D"0"
          cellpadding=3D"0" border=3D"0">
          <tbody>
            <tr>
              <th valign=3D"BASELINE" nowrap=3D"nowrap" align=3D"RIGHT">Su=
bject:
              </th>
              <td>Re: [Dar-support] Unexpected password prompt when
                isolating an encrypted archive</td>
            </tr>
            <tr>
              <th valign=3D"BASELINE" nowrap=3D"nowrap" align=3D"RIGHT">Da=
te:
              </th>
              <td>Tue, 23 Dec 2025 08:36:56 +0100</td>
            </tr>
            <tr>
              <th valign=3D"BASELINE" nowrap=3D"nowrap" align=3D"RIGHT">Fr=
om:
              </th>
              <td><a class=3D"moz-txt-link-abbreviated
                  moz-txt-link-freetext" href=3D"mailto:[email protected]"
                  moz-do-not-send=3D"true">[email protected]</a></td>
            </tr>
            <tr>
              <th valign=3D"BASELINE" nowrap=3D"nowrap" align=3D"RIGHT">To=
: </th>
              <td>Denis Corbin via Dar-support <a
                  class=3D"moz-txt-link-rfc2396E"
                  href=3D"mailto:[email protected]"
                  moz-do-not-send=3D"true">&lt;[email protected]=
ge.net&gt;</a></td>
            </tr>
          </tbody>
        </table>
        <br>
        <br>
        Thanks, Denis.<br>
        <br>
        I see the point, especially the case where the catalog is being
        isolated could need 0, 1 or 2 passwords...<br>
        <br>
        Regards, Ole G<br>
        <br>
        On 22/12/2025 21.29, Denis Corbin via Dar-support wrote:<br>
        <blockquote type=3D"cite">I guess you make a confusion between -K
          and -J options<br>
          <br>
          -K is to be used for the object of the operation (the archive
          you create, the isolated catalog you create, the archive you
          test, list, extract data from...)<br>
          <br>
          -J option apply to the archive of reference (the one given to
          -A option), here the archive you take as reference to isolate
          a catalog.<br>
          <br>
          the same way '-$' option (pay attention to the quote if given
          on shell prompt), applies to the auxiliary archive of
          reference (see -@ option)<br>
          <br>
          note that -K is only mandatory if you want to cipher the
          archive (or isolated catalog, which is just a particular type
          of archive) about to be created.<br>
          <br>
          When reading an archive, if -K -J or '-$' is not specified and
          the corresponding archive is ciphered, dar will issue a prompt
          for you provide the password (this is what you got here
          without -J option).<br>
          <br>
          I would suggest setting the lennz-darrc file more or less that
          way:<br>
          <br>
          #-------<br>
          all:<br>
          =C2=A0 -K aes:secret<br>
          <br>
          reference:<br>
          =C2=A0 -J aes:secret<br>
          #-------<br>
          <br>
          I let you read the conditional syntax paragraph in dar man
          page for more information on that syntax and if you want to do
          more funny things:<br>
          <a class=3D"moz-txt-link-freetext"
            href=3D"http://dar.linux.free.fr/doc/man/dar.html#CONDITIONAL%=
20SYNTAX"
            moz-do-not-send=3D"true">http://dar.linux.free.fr/doc/man/dar.=
html#CONDITIONAL%20SYNTAX</a><br>
          <br>
          Cheers,<br>
          Denis<br>
          <br>
          <br>
          Le 22/12/2025 =C3=A0 20:30, ogreg--- via Dar-support a =C3=A9cri=
t=C2=A0:<br>
          <blockquote type=3D"cite">Isolating the catalog from an
            encrypted archive:<br>
            <br>
            /dar -zzstd -N -B lennz-darrc -R /proc/cygdrive -C
            /proc/cygdrive/F/ darback/lennz-1-C-0 -A
            /proc/cygdrive/F/darback/lennz-1-F-0/<br>
            Archive lennz-1-F-0 requires a password:<br>
            <br>
            lennz-darrc contains the line:<br>
            *-K aes:secret*<br>
            <br>
            The previous steps dar -c, dar -t, and dar -d run with a
            similar command line, but are able to used the needed
            information from lennz-darrc.<br>
            <br>
            <br>
            <br>
          </blockquote>
          <br>
          <br>
        </blockquote>
        <br>
      </div>
    </div>
  </body>
</html>

--------------DkWoXA4mCWjMMo6PetWQrWaU--


--===============9119618708295496720==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============9119618708295496720==--