database restore on mariadb throws ERROR at line 1: ASCII '\0' appeared in the statement

[usma0118]

I have tried restoring a backup taken from mariadb server, and tried restoring it into new db on same server. it's throwing error:

ERROR at line 1: ASCII '\0' appeared in the statement, but this is not allowed unless option --binary-mode is enabled and mysql is run in non-interactive mode. Set --binary-mode to 1 if ASCII '\0' is expected.

File is encrypted and compressed.

filename: mariadb_mydb_mariadb.default.svc.cluster.local_20240811-132308.sql.zst.gpg

Any ideas?

[tiredofit]

Hmm - I can't quite remember if I built in decryption routines into the restore script. You would do best to decrypt it manually. I'll take a peek tomorrow to refresh my memory on this..

[usma0118]

Maybe I am naive… I should be able to use
gpg --output filename --decrypt file.gpg to decrypt?

Since I am using passphrase only (symmetric)?

I can see encryption code snippet here:

docker-db-backup/install/assets/functions/10-db-backup

Line 1312 in 90f53a7

echo "${backup_job_encrypt_passphrase}" | silent run_as_user ${play_fair} gpg --batch --home ${encrypt_tmp_dir} --yes --passphrase-fd 0 -c "${temporary_directory}"/"${backup_job_filename}"

at moment, i am getting gpg: decryption failed: Bad session key

[tiredofit]

Interesting. gpg --output <output> --decrypt <your backup> should give you a passphrase prompt. The snippet you posted above is the correct encryption routine..

[usma0118]

Tested on two different containers with same encryption key.

Without encryption: back is created and restorable.

With gpg encryption and passphrase: unable to decrypt.

[usma0118]

from container, i have used your snippet and encrypted/decrypted a test file successfully with said encryption key

[usma0118]

Root cause: #362