FWIW, I’ve had Duplicati (Stable) 2.4 GUI working in Omarchy Linux for over a week with zero issues so far.
FWIW, I had my AI agent create 2 separate backups in Duplicati, 1 to a second internal drive, and a 2nd to a NAS, backing up /home/ & /etc/ on this local machine. I ran them, then had the AI agent review the logs and add filters for all the warnings. I then had the agent create a text file reflecting the configuration and restoration if I experienced a drive failure.
ws02 Duplicati job: full /home plus /etc for Omarchy reinstall after disk failure
Job name: ws02 config → SSD
Destination: File, folder /mnt/Backup/Backups/ws02-config
(second job: /mnt/Backup2/Backups/ws02-config on the NAS)
Encryption: AES — store the passphrase in KeePass (needed after a reinstall)
Retention: 1W:1D, 4W:1W, 12M:1M
Schedule: Daily
Do NOT enable {DefaultExcludes} or {OperatingSystem}. Both exclude /etc.
Source folders (add these)
/home
/etc
Filters (exclude)
{CacheFiles}
{TemporaryFiles}
{SystemFiles}
*/.local/share/Trash/
/.config/chromium//Cache/
/.config/chromium//Code Cache/
/.config/chromium//GPUCache/
*/.config/Signal/Cache/
*/.config/Signal/Code Cache/
/.config/Duplicati/.sqlite-wal
/.config/Duplicati/.sqlite-shm
/.config/Duplicati/.sqlite
/etc/cups/
/etc/ufw/
/etc/credstore/
/etc/credstore.encrypted/
/etc/cryptsetup-keys.d/
/etc/sudoers.d/
/etc/NetworkManager/system-connections/
/etc/polkit-1/rules.d/
/etc/openvpn/
/etc/cni/
/etc/fwupd/fwupd.conf
/etc/default/useradd
/etc/audit/plugins.d/
/etc/ssl/private/
/etc/pacman.d/gnupg/
/etc/shadow
/etc/gshadow
/etc/shadow-
/etc/gshadow-
/etc/.pwd.lock
/etc/sudoers
/etc/libaudit.conf
/etc/crypttab
Keep Duplicati-server.sqlite (job definitions).
The remaining Duplicati *.sqlite files are local indexes and rebuild from the destination.
{CacheFiles} already skips ~/.cache (~3.4G) and Duplicati control_dir_v2.
The /etc paths above are excluded on both jobs (ws02 config → SSD and
ws02 config → NAS). Duplicati runs as carl, so anything under /etc that
is root-only (shadow, sudoers, crypttab, gnupg private keys, ssl/private,
fwupd.conf, etc.) is excluded to avoid permission-denied warnings.
CUPS and NetworkManager files are still staged under
Documents/ws02-restore/etc-restricted/.
Before the first run (needs sudo)
Duplicati runs as carl and cannot read NetworkManager connections or CUPS
printer files. Copy them into Documents so they are included with /home:
sudo cp -a “/etc/NetworkManager/system-connections/.”
/home/carl/Documents/ws02-restore/etc-restricted/NetworkManager/system-connections/
sudo cp -a /etc/cups/printers.conf /etc/cups/classes.conf
/home/carl/Documents/ws02-restore/etc-restricted/cups/ 2>/dev/null
sudo cp -a /etc/cups/ppd/.
/home/carl/Documents/ws02-restore/etc-restricted/cups/ppd/
sudo chown -R carl:carl /home/carl/Documents/ws02-restore/etc-restricted
Re-run that copy if you change network or printers.
Readable inventories are already in:
/home/carl/Documents/ws02-restore/
What this covers
All of /home (configs, Documents, Downloads, browsers, KeePass, Duplicati,
keyring, GPG, Signal, Proton Bridge, etc.) and /etc except files carl cannot
read. Those restricted files are staged under Documents/ws02-restore/.
Do not restore these wholesale after reinstall
/etc/fstab (full file) — root/home/boot UUIDs change; keep as a recipe
/etc/default/limine — cryptdevice PARTUUID is machine-specific
/etc/machine-id
/etc/mkinitcpio.conf*
/boot
/etc/pacman.d/gnupg
~/.cache (excluded from the backup)