From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) by lore.proxmox.com (Postfix) with ESMTPS id EB62E1FF195 for ; Wed, 03 Jun 2026 20:05:31 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id C84CC15B37; Wed, 3 Jun 2026 20:05:31 +0200 (CEST) From: Stoiko Ivanov To: pmg-devel@lists.proxmox.com Subject: [PATCH pve-common/pmg-api/pmg-docs/pmg-gui 00/15] fix #3226: add support for encrypted backups Date: Wed, 3 Jun 2026 20:03:02 +0200 Message-ID: <20260603180445.98770-1-s.ivanov@proxmox.com> X-Mailer: git-send-email 2.47.3 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1780509859253 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.087 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Message-ID-Hash: 3NXGMN7T45NH4N7YXO6N6PCWTD4PB5ZY X-Message-ID-Hash: 3NXGMN7T45NH4N7YXO6N6PCWTD4PB5ZY X-MailFrom: s.ivanov@proxmox.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox Mail Gateway development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: The following series adds support for adding an encryption-key to a pbs-remote used for pmg backups. It aims for feature-parity with the encryption settings and UX for pbs storages in pve. The code was mostly copied from pve-storage and pve-manager, with minimal adaptations. I did some end to end tests and played around a bit with the UI and CLI: * adding remotes with autogenerated keys * deleting/replacing/uploading encryption keys to an existing remote * adding a remote with provided master-pubkey, creating a backup and restoring it with proxmox-backup-client following the pbs-docs. More testing would be very much appreciated. pve-common: Stoiko Ivanov (2): pbs-client: autogen key: rename old one if existing pbs-client: add support for master public key src/PVE/PBSClient.pm | 62 +++++++++++++++++++++++++++++++++++++++++++- 1 file changed, 61 insertions(+), 1 deletion(-) pmg-api: Stoiko Ivanov (7): api: pbs remote: fix delete_password invocation fix #3226: pbs backup: remote: add encryption key support pbs: job: add encrypted state to snapshot listing pbs: job: add verification state to snapshot listing pmgbackup: add encypted and verification state to output api: pbs remote create/update: return parts of the configuration api: pmgbackup: add master-pubkey properties src/PMG/API2/PBS/Job.pm | 38 ++++++++-- src/PMG/API2/PBS/Remote.pm | 147 +++++++++++++++++++++++++++++++++++-- src/PMG/CLI/pmgbackup.pm | 24 +++++- src/PMG/PBSConfig.pm | 12 +++ 4 files changed, 204 insertions(+), 17 deletions(-) pmg-gui: Stoiko Ivanov (5): pbs: snapshotview: add missing gettext invocations utils: copy pbs helpers from pve-manager fix #3326: ui: pbs remote: add encryption tab to edit window ui: pbs remote: allow to downloading/print new encryption key ui: pbs snapshotview: add encryption and verification state js/PBSRemoteEdit.js | 466 ++++++++++++++++++++++++++++++++++++++++++ js/PBSSnapshotView.js | 25 ++- js/Utils.js | 44 ++++ 3 files changed, 529 insertions(+), 6 deletions(-) pmg-docs: Stoiko Ivanov (1): pmgbackup: minimally document support for encrypted backups pmgbackup.adoc | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) Summary over all repositories: 9 files changed, 810 insertions(+), 24 deletions(-) -- Generated by murpp 0.12.0