Hi Olivier,
thanks for your hint which is better than my approach.
I did somthing like:
/usr/bin/pg_dumpall --username=postgres | bzip2 > /var/lib/postgresql/backup/"`date +%d-%m-%Y_%H:%M:%S`-"backup_all.sql.bz2
To use encryption: [DRAFT]
tar -czf - ttt | openssl enc -e -aes-256-cbc -pass pass:test -out ttt.tgz
openssl enc -d -aes-256-cbc -pass pass:test -in ttt.tgz | tar xz
As mentioned obove it makes no sense to store the PW in the script.
On the fly encryption would be very nice,
best,
Anton
Von: Olivier Gautherot <ogautherot@xxxxxxxxxxxxx>
Gesendet: Donnerstag, 23. Juli 2020 08:50
An: Dischner, Anton <Anton.Dischner@xxxxxxxxxxxxxxxxxxx>
Cc: pgsql-admin <pgsql-admin@xxxxxxxxxxxxxx>
Betreff: Re: Encryption in pg_dump
Hi Anton,
Hi,
i had to do this on the fly compression 30 years ago in Oracle.
You had to use a pipe construct to do this.
Oracle was not able to do this as it is concept in Unix/Linux.
I am looking for an on the fly compression for a year now for PG
I didnt't dig very deep as i spent most of the time with MySQL/MariaDB.
Do you mean for dumps? Pg_dump supports it natively with gzip, see option -Z. You can always recompress later (that's what I did for a project at my last job).
So i guess this is really a FAQ.
If you have a solution please share,
best,
Anton
-----Ursprüngliche Nachricht-----
Von: Bruce Momjian <bruce@xxxxxxxxxx>
Gesendet: Mittwoch, 22. Juli 2020 20:56
An: Paul Förster <paul.foerster@xxxxxxxxx>
Cc: vinod kale <vinod16895@xxxxxxxxx>;
pgsql-admin@xxxxxxxxxxxxxx
Betreff: Re: Encryption in pg_dump
On Mon, Jul 20, 2020 at 03:24:16PM +0200, Paul Förster wrote:
> Hi Vinod,
>
> > On 20. Jul, 2020, at 14:40, vinod kale <vinod16895@xxxxxxxxx> wrote:
> >
> > Hello Team,
> >
> > I am using postgresql 10.8 version in our prod environment. We take dump backup on daily basis of full database. And this dump backup creates in human readable format.
> > My requirement is backup should creates in encrypted format at the time of pg_dump running.
> > Is there any way or any option available in pg_dump that will creates the backup in encrypted format or any tool available for same.
>
> sorry, no way. The only way you have is to pipe the output of pg_dump through some encryption tool. pg_dump does not offer to create encrypted dumps directly using some command line option.
Does anyone know why we are getting so many requests for encrypting dumps all of a sudden?
July 20
CAD7GeHRZ3tu8y9VG_0juVK3RQq6r+t6HciguEz_C8Eh85Hmq3A@xxxxxxxxxxxxxx
July 10 CALLD-SGTbu0HCW8NGVg+ycC8PKn9opcbN7aw4CvLj3OVC-hw=Q@xxxxxxxxxxxxxx
July 8
CAFiui6G0sgLoURsK61vmiPR1Amd7PQt82cvgdmZ7+ukdsbV1QQ@xxxxxxxxxxxxxx
--
Bruce Momjian <bruce@xxxxxxxxxx>
https://momjian.us
EnterpriseDB https://enterprisedb.com
The usefulness of a cup is in its emptiness, Bruce Lee
