It's possible to restore dom0 backup to a different appVM?

Hi there.

Let’s say I don’t want to restore dom0 full home backup, but only a directory.

It’s too big and I don’t want go back to this unbalanced disk slicing…

But with qubes bck tool isn’t possible change it in this way.

So what if I restore dom0 backup in another qube and pick from there what I need than dispose it?

Do You think it’s possible?

I’ve tried suggested way “ Emergency backup recovery (v4) — Qubes OS Documentation ” , but fails the password check (but in the qubes backup tool it works perfectly!).

Thanks a lot.

Cheers.

I always manually copy dom0 /home alongside full backup.

Do you have a backup already that you want to restore, or is this a “for the future” question?

If its the latter then in dom0:

tar cvzf dom0-home.tar.gz /home
qvm-copy-to-vm sys-usb dom0-home.tar.gz

Copy the .tar.gz to a usb stick. Then when you need it, from dom0:

qvm-run --pass-io sys-usb 'cat /path/to/dom0-home.tar.gz' > dom0-home.tar.gz
tar xvzf dom0-home.tar.gz

Hi there.

I’ve a backup of a full dom0 and I need only to restore some custom scripts from it.

Nothing exportable by hand… :frowning:

Thanks anyway.

Cheers.

1 Like

as said…

That’s your best option. Are you sure it’s just a passphrase issue?

Oups, I didn’t read all your post.

Ideas:

  • check your keyboard layout (verify by typing your passphrase in a clear text area)
  • verify your backup passphase with qvm-backup (aka Restore Backup) in dom0 (only the first steps without restoring : choose your backup file, fill the passphrase then the tool lists the backup content)
  • verify your backup passphrase, if you allowed it, your backup passphrase is here :
user@dom0:~$ grep ^passphrase /etc/qubes/backup/qubes-manager-backup.conf
1 Like

Hi there.

Probably is changed something in the procedure?

I don’t know… Anyway I’ve correctly restored from same backup other VMs.

And checked it now with same pwd… only differences I can see is scrypt version…

Otherwise I don’t know what else it can be.

Cheers…

Hi there.

Yeah, in the reported procedure, the step: <<read -r backup_pass>> write it in clear, so I’m sure it’s the same pwd I use in Restore Backup to open the same archive…

Cheers…

Are you constructing the correct low-level scrypt password from that high-level backup password? E.g. to decrypt the chunk dom0-home/foo.012.enc, the scrypt password would be BACKUP-ID!dom0-home/foo.012!BACKUP-PASSWORD

1 Like

Hi there.

I’m stuck in previous step: 6. Verify and decrypt, decompress, and extract the qubes.xml file.

It fails, with the reported wrong password…

Cheers…

Similarly, for that one the scrypt password would be BACKUP-ID!qubes.xml.000!BACKUP-PASSWORD

Note that there is a .000 suffix, but no .enc.

1 Like

Hi there.

It’s almost good to say… now it worked!!!

:partying_face:

But I’ve changed fedora version this time (it’s 43 instead of 42); I don’t know if it’s really important…

Anyway, thanks a lot!

Cheers!

2 Likes