Change key mode

[skruppy]

It would be great to be able to change an existing repo from keyfile to repokey mode (and vice versa).

[ThomasWaldmann]

Yes. And also from (deprecated) passphrase to repokey mode, which is already covered in #97.

[textshell]

from looking into this because of a question on irc.

Changing the key borg loads from a keyfile to a repokey only needs to move the data over to the repo with save_key and change the type field of the manifest crypto envelope.

But AESKeyBase checks the type of each chunk it decrypts and would bail there. Which leaves rewriting the whole repository or declaring all AES legacy based types to be equivalent. From just thinking about it for a few seconds i don‘t see any real harm from that.

[ThomasWaldmann]

see also #2153.

[ThomasWaldmann]

superseded by #2153.

[psy-q]

I realize this is closed, but is there an interface to use this, similar to borg key migrate-to-repokey? I don't understand how the linked MRs make htis possible and it seems like a useful feature.

Never mind, I see this might be part of Borg 2.0.