AW: Encryption in pg_dump

Hi Olivier,

thanks for your hint which is better than my approach.

I did somthing like:

/usr/bin/pg_dumpall --username=postgres | bzip2 > /var/lib/postgresql/backup/"`date +%d-%m-%Y_%H:%M:%S`-"backup_all.sql.bz2

To use encryption: [DRAFT]

tar -czf - ttt | openssl enc -e -aes-256-cbc -pass pass:test -out ttt.tgz
openssl enc -d -aes-256-cbc -pass pass:test -in ttt.tgz | tar xz

As mentioned obove it makes no sense to store the PW in the script.

On the fly encryption would be very nice,

best,

Anton

Von: Olivier Gautherot <ogautherot(at)gautherot(dot)net>
Gesendet: Donnerstag, 23. Juli 2020 08:50
An: Dischner, Anton <Anton(dot)Dischner(at)med(dot)uni-muenchen(dot)de>
Cc: pgsql-admin <pgsql-admin(at)postgresql(dot)org>
Betreff: Re: Encryption in pg_dump

Hi Anton,
Le jeu. 23 juil. 2020 à 08:32, Dischner, Anton <Anton(dot)Dischner(at)med(dot)uni-muenchen(dot)de<mailto:Anton(dot)Dischner(at)med(dot)uni-muenchen(dot)de>> a écrit :
Hi,

i had to do this on the fly compression 30 years ago in Oracle.
You had to use a pipe construct to do this.
Oracle was not able to do this as it is concept in Unix/Linux.

I am looking for an on the fly compression for a year now for PG
I didnt't dig very deep as i spent most of the time with MySQL/MariaDB.

Do you mean for dumps? Pg_dump supports it natively with gzip, see option -Z. You can always recompress later (that's what I did for a project at my last job).

So i guess this is really a FAQ.

If you have a solution please share,

best,

Anton

-----Ursprüngliche Nachricht-----
Von: Bruce Momjian <bruce(at)momjian(dot)us<mailto:bruce(at)momjian(dot)us>>
Gesendet: Mittwoch, 22. Juli 2020 20:56
An: Paul Förster <paul(dot)foerster(at)gmail(dot)com<mailto:paul(dot)foerster(at)gmail(dot)com>>
Cc: vinod kale <vinod16895(at)gmail(dot)com<mailto:vinod16895(at)gmail(dot)com>>; pgsql-admin(at)postgresql(dot)org<mailto:pgsql-admin(at)postgresql(dot)org>
Betreff: Re: Encryption in pg_dump

On Mon, Jul 20, 2020 at 03:24:16PM +0200, Paul Förster wrote:
> Hi Vinod,
>
> > On 20. Jul, 2020, at 14:40, vinod kale <vinod16895(at)gmail(dot)com<mailto:vinod16895(at)gmail(dot)com>> wrote:
> >
> > Hello Team,
> >
> > I am using postgresql 10.8 version in our prod environment. We take dump backup on daily basis of full database. And this dump backup creates in human readable format.
> > My requirement is backup should creates in encrypted format at the time of pg_dump running.
> > Is there any way or any option available in pg_dump that will creates the backup in encrypted format or any tool available for same.
>
> sorry, no way. The only way you have is to pipe the output of pg_dump through some encryption tool. pg_dump does not offer to create encrypted dumps directly using some command line option.

Does anyone know why we are getting so many requests for encrypting dumps all of a sudden?

July 20 CAD7GeHRZ3tu8y9VG_0juVK3RQq6r+t6HciguEz_C8Eh85Hmq3A(at)mail(dot)gmail(dot)com<mailto:CAD7GeHRZ3tu8y9VG_0juVK3RQq6r%2Bt6HciguEz_C8Eh85Hmq3A(at)mail(dot)gmail(dot)com>
July 10 CALLD-SGTbu0HCW8NGVg+ycC8PKn9opcbN7aw4CvLj3OVC-hw=Q(at)mail(dot)gmail(dot)com<mailto:Q(at)mail(dot)gmail(dot)com>
July 8 CAFiui6G0sgLoURsK61vmiPR1Amd7PQt82cvgdmZ7+ukdsbV1QQ(at)mail(dot)gmail(dot)com<mailto:CAFiui6G0sgLoURsK61vmiPR1Amd7PQt82cvgdmZ7%2BukdsbV1QQ(at)mail(dot)gmail(dot)com>

--
Bruce Momjian <bruce(at)momjian(dot)us<mailto:bruce(at)momjian(dot)us>> https://momjian.us
EnterpriseDB https://enterprisedb.com

The usefulness of a cup is in its emptiness, Bruce Lee