duplicity

Backup a directory to remote location

$ duplicity [/path/to/source] [sftp://user@host/backup]

$ duplicity --full-if-older-than [30D] [/path/to/source] [file:///backup/destination]

$ duplicity restore [sftp://user@host/backup] [/path/to/restore]

$ duplicity restore --file-to-restore [relative/path/file] [backup_url] [/path/to/restore]

$ duplicity list-current-files [backup_url]

$ duplicity verify [backup_url] [/path/to/source]

$ duplicity remove-older-than [60D] [backup_url]

$ duplicity --encrypt-key [KEY_ID] [/source] [destination]

duplicity [options] source destination

duplicity is a backup tool that creates encrypted, bandwidth-efficient backups. It uses librsync to produce incremental archives that only contain changed parts of files, and GnuPG for encryption and signing.
Backups can be stored locally or on various remote backends including SFTP, S3, Google Cloud Storage, Azure, WebDAV, and many others. The combination of encryption and incremental transfers makes duplicity suitable for remote/cloud backups over untrusted networks.
A full backup is periodically created, with subsequent incremental backups storing only changes. This allows point-in-time recovery while minimizing storage and bandwidth usage.

full

Force a full backup.

Force incremental backup.

Restore from backup.

Verify backup integrity.

List files in current backup.

Delete old backup sets.

Keep only n full backups.

Full backup if last one is older than time.

GPG key for encryption.

GPG key for signing.

Disable encryption.

Include files matching pattern.

Exclude files matching pattern.

Restore specific file.

Restore from specific time.

GPG passphrase required for encrypted backups (use PASSPHRASE env var for scripting). First backup is always full and may take time. Restoring individual files requires downloading multiple increments. Backend credentials may need configuration.

duplicity was created by Ben Escoto in 2002 as an encrypted backup solution. It combined rsync's efficient delta-transfer algorithm with GnuPG encryption. The project has been maintained by various contributors and expanded to support numerous cloud storage backends. It remains a popular choice for secure, automated backups.

rdiff-backup(1), rsync(1), gpg(1), restic(1)