diff options
author | Thomas Waldmann <tw@waldmann-edv.de> | 2023-08-30 03:49:47 +0200 |
---|---|---|
committer | Thomas Waldmann <tw@waldmann-edv.de> | 2023-08-30 03:49:47 +0200 |
commit | 509a5fd71cee4b0205c19ccc31484cfbd9488b7c (patch) | |
tree | 01dc00873b8cf19336d2883206d8f7d079522a27 /docs/man/borg-upgrade.1 | |
parent | ed1ab84cc746d247575a32aa7d78561e39b6e437 (diff) |
build_usage / build_man1.2.5
Diffstat (limited to 'docs/man/borg-upgrade.1')
-rw-r--r-- | docs/man/borg-upgrade.1 | 22 |
1 files changed, 21 insertions, 1 deletions
diff --git a/docs/man/borg-upgrade.1 b/docs/man/borg-upgrade.1 index 9f01dde8e..175ee9494 100644 --- a/docs/man/borg-upgrade.1 +++ b/docs/man/borg-upgrade.1 @@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]] .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]] .in \\n[rst2man-indent\\n[rst2man-indent-level]]u .. -.TH "BORG-UPGRADE" 1 "2023-08-29" "" "borg backup tool" +.TH "BORG-UPGRADE" 1 "2023-08-30" "" "borg backup tool" .SH NAME borg-upgrade \- upgrade a repository from a previous version .SH SYNOPSIS @@ -53,6 +53,23 @@ except when noted otherwise in the changelog .UNINDENT .SS Borg 1.x.y upgrades .sp +Archive TAM authentication: +.sp +Use \fBborg upgrade \-\-archives\-tam REPO\fP to add archive TAMs to all +archives that are not TAM authenticated yet. +This is a convenient method to just trust all archives present \- if +an archive does not have TAM authentication yet, a TAM will be added. +Archives created by old borg versions < 1.0.9 do not have TAMs. +Archives created by newer borg version should have TAMs already. +If you have a high risk environment, you should not just run this, +but first verify that the archives are authentic and not malicious +(== have good content, have a good timestamp). +Borg 1.2.5+ needs all archives to be TAM authenticated for safety reasons. +.sp +This upgrade needs to be done once per repository. +.sp +Manifest TAM authentication: +.sp Use \fBborg upgrade \-\-tam REPO\fP to require manifest authentication introduced with Borg 1.0.9 to address security issues. This means that modifying the repository after doing this with a version prior @@ -148,6 +165,9 @@ Enable manifest authentication (in key and cache) (Borg 1.0.9 and later). .TP .B \-\-disable\-tam Disable manifest authentication (in key and cache). +.TP +.B \-\-archives\-tam +add TAM authentication for all archives. .UNINDENT .SH EXAMPLES .INDENT 0.0 |