How to create a secure incremental offsite backup in Linux with Duplicity #linux #offsite #backup


If you maintain mission-critical data on your server, you probably want to back them up on a remote site for disaster recovery. For any type of offsite backup, you need to consider encryption in order to avoid any unauthorized access to the backup. In addition, it is important to use incremental backup, as opposed to full backup, to save time, disk storage and bandwidth costs incurred in ongoing backup activities.

Duplicity is an encrypted incremental backup tool in Linux. Duplicity uses librsync to generate bandwidth/space-efficient incremental archives. It also uses GnuPG to encrypt and/or sign backup archives to prevent unauthorized data access and tampering.

In this tutorial, I will describe how to create a secure incremental offsite backup in Linux with Duplicity .

Install Duplicity on Linux

To install Duplicity on Debian, Ubuntu or Mint:

$ sudo apt-get install duplicity python-paramiko

To install Duplicity on CentOS or RHEL, first enable EPEL repository. and run:

$ sudo yum install duplicity python-paramiko

To install Duplicity on Fedora:

$ sudo yum install duplicity python-paramiko

Create a Secure Incremental Remote Backup via SCP

To create a secure and incremental backup of a local folder (e.g.

/Downloads), and transfer it to a remote SSH server via SCP, use the following command. Note that before proceeding, you must enable password-less SSH login to the remote SSH server first.

When you create a remote backup of given data for the first time, Duplicity will create a full backup, and ask you to set an initial GnuPG passphrase for encryption. Subsequent runs of Duplicity will create incremental backups, and you need to provide the same GnuPG passphrase created during the first run.

Create a Secure Incremental Remote Backup in Non-interactive Mode

If you do not want to be prompted to enter a passphrase, you can set PASSPHRASE environment variable, prior to running Duplicity as follows.

If you do not want to pass a plain-text passphrase in the command-line, you can create the following backup script. To be more secure, make the script readable to you only.

Create an Incremental Remote Backup Without Encryption

If you do not need a secure backup, you can disable encryption as follows.

Verify the Integrity of a Remote Backup

For critical data, it is probably a good idea to verify that a remote backup was successful. You can check whether or not the local and remote volumes are in sync, by using the following command.

Note that when using “verify” option, you need to reverse the order of local and remote folders; specify the remote folder first.

Restore a Remote Backup

In order to restore a remote backup locally, run the following commnad:

To successfully restore a remote backup, the specified restore destination directory (e.g. Downloads_restored) must not exist locally beforehand.

Create a Secure Incremental Remote Backup via FTP

Besides SCP, Duplicity also supports several other protocols including FTP.

To use FTP in Duplicity, use the following format:

For non-interactive runs, specify the FTP password in FTP_PASSWORD environment variable:

Duplicity Troubleshooting Tips

If you encounter the following error, this means that you did not install SSH2 protocol library for python.

To fix this error, install the following.

On Ubuntu, Debian or Mint:

$ sudo apt-get install python-paramiko

On Fedora, CentOS or RHEL:

$ sudo yum install python-paramiko

If you encounter the following error, it is because you did not set up password-less ssh login to a remote backup server. Make sure that you do, and retry.

Subscribe to Xmodulo

Do you want to receive Linux FAQs, detailed tutorials and tips published at Xmodulo? Enter your email address below, and we will deliver our Linux posts straight to your email box, for free. Delivery powered by Google Feedburner.

Support Xmodulo

Did you find this tutorial helpful? Then please be generous and support Xmodulo!

Dan Nanni is the founder and also a regular contributor of He is a Linux/FOSS enthusiast who loves to get his hands dirty with his Linux box. He likes to procrastinate when he is supposed to be busy and productive. When he is otherwise free, he likes to watch movies and shop for the coolest gadgets.

Oracle Database Support, Maintenance – Upgrade Help #oracle #database #support, #oracle #support, #oracle #maintenance, #oracle


Rimini Street Support for Oracle Database

Comprehensive Oracle Database Expertise

Rimini Street supports Oracle Database in conjunction with applications from Oracle and SAP; we also support Oracle Database standalone.

According to Forrester 1 the top challenges Oracle Database clients face are:

  • Improving DB performance and availability
  • Lack of people resources
  • Security
  • Upgrades
  • Budgets

Rimini Street provides Oracle Database support clients around the world, in implementations ranging from a single server to large, complex environments with nearly 600 global database servers, and ranging from small data storage requirements to as much as 45TB of storage.

Oracle Database Support and Maintenance Program Features

  • Named, Regional Primary Support Engineer
  • 24/7 Support with Guaranteed 15 Minute or Less Response Time for Critical Issues
  • Application Repository Fixes
  • Documentation-Only Fixes
  • Configuration Support
  • Operational Support
  • Performance Tuning
  • Vendor Neutral Security Guidance

No Costly, Forced Upgrades

With Rimini Street you can remain on your current, stable releases for a minimum of 15 years without any required upgrades while retaining the right to upgrade on a time line that suits your business needs and budget. Learn more .

Our program for Oracle Database licensees includes support for:

  • Active Data Guard
  • In-Memory Database Cache
  • Advanced Compression
  • OLAP
  • Advanced Security
  • Partitioning
  • Application Express
  • Performance Tuning
  • Database Diagnostics Configuration
  • Provisioning Patch Automation Pack
  • Data Masking
  • Real Application Clusters (RAC)
  • Database Vault
  • Enterprise Manager
  • SQL*Plus, SQL*Loader, Developer
  • GoldenGate
  • Warehouse Builder

Additional Premium Database Support Maintenance Features

Rimini Street also provides configuration support tailored to your specific deployment; performance tuning support for maximum throughput; security, interoperability and upgrade advice and support; and support for Oracle Database virtualization reducing time to resolution.

Combined Database and Application Support Enables Additional Savings and Integrated Support

Oracle Database licensees switching their annual support to Rimini Street reap the same 50 percent savings in annual support fees that is enjoyed by clients utilizing Rimini Street for their enterprise application software support. Licensees who use Rimini Street for combined support of their Oracle Database and Oracle or SAP enterprise applications will also benefit from an integrated service offering with deeper interoperability and configuration support between the database and application with a single-source provider.

Rimini Street experts are standing by to answer your Oracle Database support and maintenance questions.

1 Forrester, The Steadily Growing Database Market Is Increasing Enterprises Choices, June 7, 2013