With server side encryption, how to decrypt file from cli

I am running Nextcloud AIO v9.1.0 docker and have server side encryption and use the built-in borg backup.

I know how to restore a borg backup through NC but that isn’t what I want to do.

I have been using it as a backup solution but now am moving to a different backup solution because over time some files from my laptop have vanished. It is my hope that they exist somewhere in the previous backups.

If I didnt use server-side encryption, then decrypting them from my laptop would be easy; just mount the repositories and copy all the files and structure to where I want them so I can go through everything.

Unforetunately when I do the borg mount or borg extract, the extracted files are still encrypted. I am trying to find the command I can use to double-decrypt.

I asked chatgpt and it said to use: borg extract --list /mnt/borg/borg/borg::20240119_202838-nextcloud-aio /mnt/bmount/nextcloud_aio_volumes/nextcloud_aio_nextcloud_data/mike/files/Notes/Daily/ --stdout | borg extract --/home/mike/temp/

This sounded logical but doesnt work; I am missing something.
What I expected was it to first ask for my borg encryptionkey passphrase then ask for my nextcloud user password for the 2nd decryption, but it didn’t.

Anyone have any suggestions?

thanks

Mike

Hi @mstrauss22,

Did you know this tool:

nextcloud/encryption-recovery-tools - server-side-encryption

That would be for the decryption after the borg part got extracted and decrypted.

I hope that helps.


Much and good luck,
ernolf

1 Like