{"action":"opened","issue":{"url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/1577","labels_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/1577/labels{/name}","comments_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/1577/comments","events_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/1577/events","html_url":"https://github.com/QubesOS/qubes-issues/issues/1577","id":124736221,"number":1577,"title":"Backup: verification succeeds then fails on the same backup after reboot","user":{"login":"axon-qubes","id":10417133,"avatar_url":"https://avatars.githubusercontent.com/u/10417133?v=3","gravatar_id":"","url":"https://api.github.com/users/axon-qubes","html_url":"https://github.com/axon-qubes","followers_url":"https://api.github.com/users/axon-qubes/followers","following_url":"https://api.github.com/users/axon-qubes/following{/other_user}","gists_url":"https://api.github.com/users/axon-qubes/gists{/gist_id}","starred_url":"https://api.github.com/users/axon-qubes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/axon-qubes/subscriptions","organizations_url":"https://api.github.com/users/axon-qubes/orgs","repos_url":"https://api.github.com/users/axon-qubes/repos","events_url":"https://api.github.com/users/axon-qubes/events{/privacy}","received_events_url":"https://api.github.com/users/axon-qubes/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-01-04T10:49:17Z","updated_at":"2016-01-04T10:49:17Z","closed_at":null,"body":"What I did and what happened:\r\n\r\n1. Create a backup with `qvm-backup`.\r\n\r\n2. Verify the backup via Qubes Manager (restore with \"verify only\" option).\r\n\r\n3. Qubes Manager reports verification successful.\r\n\r\n4. Upload a copy of the backup tarball to a cloud storage service.\r\n\r\n5. A day later, download the backup tarball from the cloud storage service.\r\n\r\n6. Use `md5sum` to check that the hash of the downloaded tarball matches the hash of the original, local backup tarball. They match.\r\n\r\n7. Attempt to verify the downloaded backup tarball via Qubes Manager.\r\n\r\n8. Verification **fails** with the following error message:\r\n\r\n        ERROR: ERROR: invalid hmac for file /var/tmp/restore_[...]:\r\n        [...]\r\n        Is the passphrase correct?\r\n        Partially restored files left in /var/tmp/restore_*, investigate them and/or clean them up\r\n\r\n9. Attempt to verify the *original* backup tarball via Qubes Manager. It *also* fails with the same error message.\r\n\r\n10. Reboot dom0.\r\n\r\n11. Re-attempt verification again three times, with the same failure each time.\r\n\r\nGiven the sequence of events, the most likely explanation seems to be that the original backup was corrupt, and Qubes Manager (or `qvm-backup-restore`) erroneously reported that verification was successful. If so, this is very serious, since it means users have no reliable way to know whether their backups are corrupt.\r\n\r\nRelated issue: #1471 "}}