[GH-ISSUE #209] Sign bastion backup files #55

New issue

Closed

opened 2026-05-07 00:18:12 +02:00 by BreizhHardware · 2 comments

BreizhHardware commented

2026-05-07 00:18:12 +02:00

Owner

Originally created by @ghost on GitHub (Jun 28, 2021).
Original GitHub issue: https://github.com/ovh/the-bastion/issues/209

We are using the script osh-backup-acl-keys.sh to backup the configuration to a remote system. Although the backup files are encrypted, they are not signed. It would be useful to have them signed the same way as the session recordings (ttyrec) are by default when syncing them to a remote system.

Originally created by @ghost on GitHub (Jun 28, 2021). Original GitHub issue: https://github.com/ovh/the-bastion/issues/209 We are using the script osh-backup-acl-keys.sh to backup the configuration to a remote system. Although the backup files are encrypted, they are not signed. It would be useful to have them signed the same way as the session recordings (ttyrec) are by default when syncing them to a remote system.

BreizhHardware

2026-05-07 00:18:12 +02:00

closed this issue
added the
enhancement
label

BreizhHardware commented

2026-05-07 00:18:13 +02:00

Author

Owner

@speed47 commented on GitHub (Jun 28, 2021):

Hello,

The ttyrec files are encrypted with the admins gpg keys, and signed with the bastion's gpg key, but you're right, backups are not signed. This should be easy to add! Thanks for the suggestion.

@speed47 commented on GitHub (Jun 28, 2021): Hello, The ttyrec files are encrypted with the admins gpg keys, and signed with the bastion's gpg key, but you're right, backups are not signed. This should be easy to add! Thanks for the suggestion.

BreizhHardware commented

2026-05-07 00:18:14 +02:00

Author

Owner

@speed47 commented on GitHub (Oct 20, 2021):

Implemented in v3.05.01

@speed47 commented on GitHub (Oct 20, 2021): Implemented in v3.05.01

BreizhHardware referenced this issue

2026-05-07 00:19:46 +02:00

[PR #55] [MERGED] feat: add interactiveModeByDefault option #199