You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
C: coreP: majorPriority: major. Between "default" and "critical" in severity.T: bugType: bug report. A problem or defect resulting in unintended behavior in something that exists.
Verify the backup via Qubes Manager (restore with "verify only" option).
Qubes Manager reports verification successful.
Upload a copy of the backup tarball to a cloud storage service.
A day later, download the backup tarball from the cloud storage service.
Use md5sum to check that the hash of the downloaded tarball matches the hash of the original, local backup tarball. They match.
Attempt to verify the downloaded backup tarball via Qubes Manager.
Verification fails with the following error message:
ERROR: ERROR: invalid hmac for file /var/tmp/restore_[...]:
[...]
Is the passphrase correct?
Partially restored files left in /var/tmp/restore_*, investigate them and/or clean them up
Attempt to verify the original backup tarball via Qubes Manager. It also fails with the same error message.
Reboot dom0.
Re-attempt verification again three times, with the same failure each time.
Given the sequence of events, the most likely explanation seems to be that the original backup was corrupt, and Qubes Manager (or qvm-backup-restore) erroneously reported that verification was successful. If so, this is very serious, since it means users have no reliable way to know whether their backups are corrupt.
This problem (and the one in #1471) seem to manifest only after Qubes has been running for a long time (several days) without a host reboot. In fact, I've noticed for a long time now (across several Qubes versions) that Qubes tends to become somewhat unstable after going too long without a host reboot, so perhaps this is one symptom of that (but one of the more serious ones).
C: coreP: majorPriority: major. Between "default" and "critical" in severity.T: bugType: bug report. A problem or defect resulting in unintended behavior in something that exists.
What I did and what happened:
Create a backup with
qvm-backup
.Verify the backup via Qubes Manager (restore with "verify only" option).
Qubes Manager reports verification successful.
Upload a copy of the backup tarball to a cloud storage service.
A day later, download the backup tarball from the cloud storage service.
Use
md5sum
to check that the hash of the downloaded tarball matches the hash of the original, local backup tarball. They match.Attempt to verify the downloaded backup tarball via Qubes Manager.
Verification fails with the following error message:
Attempt to verify the original backup tarball via Qubes Manager. It also fails with the same error message.
Reboot dom0.
Re-attempt verification again three times, with the same failure each time.
Given the sequence of events, the most likely explanation seems to be that the original backup was corrupt, and Qubes Manager (or
qvm-backup-restore
) erroneously reported that verification was successful. If so, this is very serious, since it means users have no reliable way to know whether their backups are corrupt.Related issue: #1471
The text was updated successfully, but these errors were encountered: