I’m trying to recover data from a Qubes Backup without the Qubes Restore function, i.e. I want to get into my backup information as if I were using a Linux machine, without Qubes.
I’m following the instructions on Emergency Backup Recovery, but I am stuck on step 1, the part where it says:
Now that you have the decrypted qubes.xml.000 file, search for the backup-path property inside of it. With the backup-path, extract only the files necessary for your VM (vmX).
[user@restore ~]$ tar -i -xvf qubes-backup-2015-06-05T123456 \
backup-header backup-header.hmac vmX/
For me, I get an error (my target VM is called realestate):
user@restore-play:~$ tar -i -xvf qubes-backup-2023-05-10T164002 \ backup-header backup-header.hmac realestate/
tar: backup-header: Not found in archive
tar: realestate: Not found in archive
tar: Exiting with failure status due to previous errors
I don’t understand
if the instructions say "search for the backup-path property " in qubes.xml.000, why do the terminal instructions not mention either backup-path or qubes.xml.000?
why doesn’t tar find backup-header? I am sure I am typing things correctly and previous steps worked okay - its already extracted a file name backup-header to the host directory in an earlier step.
why can’t tar find realestate? I know its in the archive!
(admission: I don’t understand all of the terminal commands, e.g. what does \ and / do here?)
The \ character is only meant to be entered if the command is typed in as-is broken over two lines, in which case it bridges the two lines. If you’re typing in one line instead, omit that \ so as not to make the shell pass the subsequent space character to tar (which causes it to look for a file named <SPACE>backup-header).
And instead of the actual VM name like realestate there’s an anonymized vmN form that must be used, where N is some number like 123 which can be looked up in qubes.xml.