Trouble reading hardware encrypted tape volume with bextract

[Benedict Ecker]

Hello everybody,

I am trying to extract everything from a tape volume, which I encrypted prior with Bareos, so the encryption key for the volume is stored in the database.

Mounting the volume in the storage daemon works fine. However when I want to extract from the volume with bextract, I get the following error: "17-Sep-2024 13:36:44.793637 bextract (8): lib/crypto_cache.cc:53-0 Could not open crypto cache file. /var/lib/bareos/bareos-sd.9103.cryptoc ERR=Datei oder Verzeichnis nicht gefunden"

Can someone give me a hint as to what is the problem here? It's something small probably.

Thanks in advance.

Cheers!

[Andreas Rogge]

Hi Benedict,

when using one of the storage tools directly (i.e. anything without the
director being involved) you'll need a populated crypto-cache file.
The tool already told you where it expects the file, you just have to
populate it using bscrypto.

Best Regards,
Andreas

Am 17.09.24 um 13:44 schrieb Benedict Ecker:

> --
> You received this message because you are subscribed to the Google
> Groups "bareos-users" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to bareos-users...@googlegroups.com
> <mailto:bareos-users...@googlegroups.com>.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/bareos-users/0ba2c445-6692-417c-ae14-36da1f8f8506n%40googlegroups.com <https://groups.google.com/d/msgid/bareos-users/0ba2c445-6692-417c-ae14-36da1f8f8506n%40googlegroups.com?utm_medium=email&utm_source=footer>.

--
Andreas Rogge andrea...@bareos.com
Bareos GmbH & Co. KG Phone: +49 221-630693-86
http://www.bareos.com

Sitz der Gesellschaft: Köln | Amtsgericht Köln: HRA 29646
Komplementär: Bareos Verwaltungs-GmbH
Geschäftsführer: Stephan Dühr, Jörg Steffens, Philipp Storz

[Benedict Ecker]

Hi Andreas,

Thanks for the quick reply!

I am not sure I understand how to correctly use bscrypto to generate and populate my crypto cache file. Maybe you can help out a little further.

When I run the program with bscrypto -p /var/lib/bareos-sd.9103.cryptoc it asks me to enter cache entries. But those are entries, which I don't know.

When I mount the tape in the storage daemon, the cryptoc file is automatically created and populated with the correct key. Do I need to mount every encrypted tape, so that the file is populated correctly?

Any help is apreciated.

Best Regards,

Benedict

[Benedict Ecker]

Hi Andreas,

Thanks for the quick reply!

That already cleared some things up for me.

But I am not sure I completely understand, how I am supposed to populate the cryptoc file.

When I run bscrypto -p /var/lib/bareos-sd.9103.cryptoc the program asks me to enter cache entries. But I don't know the keys, since they are in the database.

When I mount an encrypted volume, the storage daemon creates the cache file with the respective key already in the cache file. Is the way to go to mount every single encrypted tape and fill the cache file from there?

Any help is apreciated.

Best Regards,

Benedict

Andreas Rogge schrieb am Dienstag, 17. September 2024 um 13:55:10 UTC+2: