Release: 2.0.9.107 (Canary) 2024-09-11

[ts678]

Some of this needs developer input, but here are some comments to try to cover some points.

@Taomyn

No idea how old the files are, I’d have to connect directly to the Wasabi S3 bucket to see.

Maybe this refers to the below, or some similar S3 client to access bucket over network?

Using Wasabi Explorer for Windows with Wasabi

Other ways may be:

Wasabi Console Features which looks like it can sort by chosen column and even search.

Viewing the log files of a backup job, so <job> → Show log → Remote then click on list.

@Taomyn

every copy I’ve tried does the same nor can I open it in DB Browser

Copy as in Explorer copy? Neither that nor DB Browser for SQLite know Duplicati versioning. Possibly some other message came. If so, what? I’d guess the file was still open in Duplicati. Checking Task Manager for unexpected Duplicati is a way to see if something is still running.
The Performance tab can also start Resource Monitor whose CPU tab has Search Handles.

@Taomyn

after trying to upgrade to this version from an earlier beta

Did you stop the older Duplicati first? If not, I’ve seen Duplicati detect this, but I wasn’t testing upgrade from an earlier Beta. I was testing a Canary-to-Canary. At least I got all my files now.

@Taomyn

amended the service to use the new parameters for password

This is starting to seem a popular way to do it, but it records the password in many local spots, being somewhat equivalent to Linux /etc/default/duplicati which is readable by all users.

@kenkendk

By also requiring a password, this prevents local privilege escalation attacks as well.

but the idea has a big gap in it when anybody on the machine is permitted to get the password. There’s certainly a bit more work to it though, and ultimately local malware usually finds a path:

@kenkendk

Generally, a ransomware attack will escalate privileges until it has root/administrator privieleges.

so I’m still not very happy with the design and documentation on how to set up the new scheme.

@Taomyn

The database has version 8 but the largest supported version is 6.

The jump to 7 looks like 2.0.9.102 when authentication changed. It added the TokenFamily table.

@Taomyn

earliest was from February this year, including the one it backed up, and none of them work.

Same message? Same numbers? February seems like it should have been version 6. 2.0.8.1.

duplicati/duplicati/blob/78ea50c8335772f2684ff39f8e44c22d2836322b/Duplicati/Server/Database/Database schema/Schema.sql#L157

@Taomyn

When I try to use DB Browser to access the database, it tells me that the file is not a database file

Which tool can open encrypted DB

Does anyone know a tool that can open the encrypted Duplicati database file? My “standard” Browser Tool Database Browser ELT-tools.com does not support encrypted SQLite. And DB Browser for SQLite http://sqlitebrowser.org/ asks for password but does not open the database. [image] [image]

Above 2018 post shows a similar error and explains how the database was encrypted, so is not compatible with normal tools. Duplicati Server and TrayIcon on Windows could change that with

--unencrypted-database
Disables database encryption.

@Taomyn

yet the other two files from backup jobs both open just fine.

Databases for specific jobs are not encrypted. Things like credentials are in the server database.

@Taomyn

I’ve even checked against the equivalent database on other machines and they all open.

2.0.9.x Duplicati don’t use the old whole-database encryption. They may encrypt individual fields.
Since you can open these, you can check the Version table to see if DB version is newer (7 or 8).

I’m not going to get into certificates, as I don’t use them and the web server got replaced anyway.