Local keyring backups

[bertob]

When the keyring gets corrupted that can have really bad consequences, as we've seen during the recent migration. It'd be good to minimize the chances of completely losing the keyring. Since it's not much data, I wonder if we could just make a new copy every time something changes, or something similar? That way even if the active keyring file is corrupted you always have the older keyring files.

[bilelmoussaoui]

For migration, we stopped removing previous keyrings and left that to the user instead, we just stamp successfully migrated keyrings so we don't re migrate them.

When it comes to creating backups, yes we definitely need a mechanism for that. Although, unfortunately, we don't have a proper backup solution on Linux except various little apps that we can't really hook into their backup schedule or something like that.

I don't have any ideas today on how to do it properly but hopefully someome would come up with a proper idea.

[justpav05]

Hello everyone.

A question: why don't we implement key export to PEM or a similar file format via the CLI? For instance, as an archive, into a folder, or simply as a set of individual files?

[bilelmoussaoui]

That is a possibility, but we want something that would be automatically done for users, ideally.

[justpav05]

It depends on what you mean by "automatic"