Bug 2020268

Summary: [17.0] Enable encrypted backups
Product: Red Hat OpenStack Reporter: Juan Larriba <jlarriba>
Component: tripleo-ansibleAssignee: Fernando Díaz <fdiazbra>
Status: CLOSED ERRATA QA Contact: Sree <skovili>
Severity: low Docs Contact:
Priority: low    
Version: 17.0 (Wallaby)CC: fdiazbra, kgilliga, skovili
Target Milestone: gaKeywords: Triaged
Target Release: 17.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: tripleo-ansible-3.3.1-0.20220407002051.0bc2994.el9ost Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 2020312 (view as bug list) Environment:
Last Closed: 2022-09-21 12:17:17 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2020312, 2020549    

Description Juan Larriba 2021-11-04 13:54:45 UTC
As stated in #1907967, ReaR supports encrypted backups by setting up the variables BACKUP_PROG_CRYPT_ENABLED and BACKUP_PROG_CRYPT_KEY.

Those keys should be configurable by the ansible automation.

Comment 4 Fernando Díaz 2022-07-08 09:49:20 UTC
For decrypt the backup file it is required to run the command: 

dd if=backup.tar.gz | /usr/bin/openssl des3 -d -k "1234" | tar -C /ctl_plane_backups/undercloud-0/ -xzvf - '*.conf'

In this case the backup.tar.gz file is located in the folder /ctl_plane_backups/undercloud-0/ and the encryption key is "1234"

Comment 10 errata-xmlrpc 2022-09-21 12:17:17 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Release of components for Red Hat OpenStack Platform 17.0 (Wallaby)), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2022:6543