Emergency

Does innobackupex support both encryption, compression and stream in parallel

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Does innobackupex support both encryption, compression and stream in parallel

    Hello,

    I am trying to stream the encrypted backup data to a remote host with the following command but not working. Did I miss something ?

    /usr/bin/innobackupex --encrypt=AES256 --encrypt-key-file=keyfile --stream=xbstream --user=root --password=$mysqlPwd --no-timestamp --include="$TARGETDB" --extra-lsndir=$MYCURRENTBASEDIR ./ | ssh $remoteHost "xbstream -x -C /tmp/backup/"
    ....
    140611 20:47:01 innobackupex: Connecting to MySQL server with DSN 'dbi:mysql:;mysql_read_default_group=xtrabackup' as 'root' (using password: YES).
    140611 20:47:01 innobackupex: Connected to MySQL server
    140611 20:47:01 innobackupex: Executing a version check against the server...
    140611 20:47:01 innobackupex: Done.
    IMPORTANT: Please check that the backup run completes successfully.
    At the end of a successful backup run innobackupex
    prints "completed OK!".

    innobackupex: Using mysql server version 5.5.32-MariaDB-log

    innobackupex: Created backup directory ./
    xbcrypt:encrypt: unable to set libgcrypt cipher key - User defined source 1 : Invalid key length
    innobackupex: 'xbstream -c | xbcrypt --encrypt-algo=AES256 --encrypt-key-file=keyfile' returned with exit code 1.
    innobackupex: Error: Failed to stream '/../../../var/tmp/backup-my.cnf': 1 at /usr/bin/innobackupex line 4758.


    Thanks,
    Last edited by ooaung; 06-12-2014, 06:51 PM.

  • #2
    Resolved. The issue is in my keyfile.

    Comment


    • #3
      Hi,

      i am also facing the same problem, can you tell me how did you resolve the issue.

      I am trying to create enc file like this.

      openssl enc -aes-256-cbc -k secret123sec_8dv4j89t4jit4u89t7 -P -md sha1 | grep key | cut -d'=' -f2 > DB_ENC_STR

      Comment


      • #4
        just to put this here as it was the fix to my issue and first link on google

        https://www.percona.com/doc/percona-...obackupex.html

        Depending on the text editor used for making the KEYFILE, text file in some cases can contain the CRLF and this will cause the key size to grow and thus making it invalid. Suggested way to do this would be to create the file with: echo -n "A1EDC73815467C083B0869508406637E" > /data/backups/keyfile

        Comment


        • #5
          Hi,
          Thank you so much for this topic.
          I have a question about exporting the encryption key file.
          The error that I have:
          encryption: unable to set libgcrypt cipher key - User defined source 1 : Invalid key length
          When I checked, I understoot that it's a problem with the encryption_key file that I exported.
          For example, in my script when I replace:
          "--encrypt-key-file=${encryptionkeyfile}"
          by: "--encrypt-key-=78JKDSKJ78DSKJB37823BUIKDSKJ32HJ"
          it works
          I would like to know how can I export the key file
          I saw somewhere that text file in some cases can contain the CRLF.
          Even when I used:
          echo -n "A1EDC73815467C083B0869508406637E" > /data/backups/encryption_key
          It's not work.
          Some help please!!

          Comment

          Working...
          X