+# -*- mode: sh; sh-basic-offset: 3; indent-tabs-mode: nil; -*-
#
# duplicity script for backupninja
# requires duplicity
getconf password
getconf sign no
getconf encryptkey
+getconf signkey
setsection source
getconf include
getconf exclude
setsection dest
+getconf incremental yes
getconf keep 60
getconf sshoptions
getconf bandwidthlimit 0
[ "$destdir" != "" ] || fatal "Destination directory not set"
[ "$include" != "" ] || fatal "No source includes specified"
-[ "$password" != "" ] || fatal "No password specified"
### vservers stuff ###
vsnames="$vserver $vsnames"
done
else
- for vserver in "$vsnames"; do
+ for vserver in $vsnames; do
[ -d "$VROOTDIR/$vserver" ] || fatal "vserver '$vserver' does not exist."
done
fi
else
[ -z "$vsinclude" ] || warning 'vsnames is empty, vsinclude configuration lines will be ignored'
fi
+else
+ [ -z "$vsinclude" ] || warning 'vservers support disabled in backupninja.conf, vsincludes configuration lines will be ignored'
+ [ -z "$vsnames" ] || warning 'vservers support disabled in backupninja.conf, vsnames configuration line will be ignored'
fi
### see if we can login ###
if [ "$testconnect" == "yes" ]; then
debug "ssh $sshoptions -o PasswordAuthentication=no $desthost -l $destuser 'echo -n 1'"
if [ ! $test ]; then
- result=`ssh $sshoptions -o PasswordAuthentication=no $desthost -l $destuser 'echo -n 1' 2>&1`
+ result=`ssh $sshoptions -o PasswordAuthentication=no $desthost -l $destuser 'echo -n 1'`
if [ "$result" != "1" ]; then
fatal "Can't connect to $desthost as $destuser."
else
execstr="$options --no-print-statistics --scp-command 'scp $scpoptions' --ssh-command 'ssh $sshoptions' "
-if [ "$encryptkey" == "" ]; then
- [ "$sign" != "yes" ] || fatal "encryptkey option must be set when signing."
-else
+# deal with symmetric or asymmetric (public/private key pair) encryption
+if [ -n "$encryptkey" ]; then
execstr="${execstr}--encrypt-key $encryptkey "
- [ "$sign" != "yes" ] || execstr="${execstr}--sign-key $encryptkey "
+ debug "Data will be encrypted with the GnuPG key $encryptkey."
+else
+ [ -n "$password" ] || fatal "The password option must be set when using symmetric encryption."
+ debug "Data will be encrypted using symmetric encryption."
+fi
+
+# deal with data signing
+if [ "$sign" == yes ]; then
+ # duplicity is not able to sign data when using symmetric encryption
+ [ -n "$encryptkey" ] || fatal "The encryptkey option must be set when signing."
+ # if needed, initialize signkey to a value that is not empty (checked above)
+ [ -n "$signkey" ] || signkey="$encryptkey"
+ # check password validity
+ [ -n "$password" ] || fatal "The password option must be set when signing."
+ execstr="${execstr}--sign-key $signkey "
+ debug "Data will be signed will the GnuPG key $signkey."
+else
+ debug "Data won't be signed."
fi
if [ "$keep" != "yes" ]; then
execstr="${execstr}--remove-older-than $keep "
fi
+if [ "$incremental" == "no" ]; then
+ execstr="${execstr}--full "
+fi
+
execstr_serverpart="scp://$destuser@$desthost/$destdir"
execstr_clientpart="/"
### SOURCE ###
# excludes
-for i in $exclude; do
+for i in "$exclude"; do
str="${i//__star__/*}"
- execstr="${execstr}--exclude $str "
+ execstr="${execstr}--exclude '$str' "
done
# includes
-for i in $include; do
+for i in "$include"; do
str="${i//__star__/*}"
- execstr="${execstr}--include $str "
+ execstr="${execstr}--include '$str' "
done
# vsincludes
if [ $usevserver ]; then
for vserver in $vsnames; do
- for vi in $vsinclude; do
+ for vi in "$vsinclude"; do
str="${vi//__star__/*}"
execstr="${execstr}--include '$VROOTDIR/$vserver$str' "
done
debug "duplicity $execstr --exclude '**' / $execstr_serverpart"
if [ ! $test ]; then
+ export PASSPHRASE=$password
output=`nice -n $nicelevel \
su -c \
- "export PASSPHRASE=$password \
- && duplicity $execstr --exclude '**' / $execstr_serverpart 2>&1"`
+ "duplicity $execstr --exclude '**' / $execstr_serverpart 2>&1"`
code=$?
- if [ "$code" == "0" ]; then
+ if [ $code -eq 0 ]; then
debug $output
info "Duplicity finished successfully."
else
- warning $output
- warning "Duplicity failed."
+ debug $output
+ fatal "Duplicity failed."
fi
fi