Commands / kosa8 snapshot import
kosa8 snapshot import
Import an encrypted snapshot bundle written by snapshot export
Usage
kosa8 import FILE
Reads a bundle (FILE, or - for stdin), authenticating every part as it arrives. The snapshot stays encrypted at rest here, and restores as any other. This machine must hold the KEK the bundle was encrypted under; if it does not, the import stops at the key, before reading the rest.
A chunked bundle (snapshot export --incremental) is recognized by its
header. Its signature is checked (--trust pins the signer), every chunk is
checked against its digest, and the chunks it leaves out are taken from
local snapshots of the same sandbox or those named with --base. If any are
missing it says how many and imports nothing; chunks read are kept, so a
second import — once the base is found — does not start over. --dry-run
checks all of that and writes nothing.
Options
| Flag | Type | What it does | Default |
|---|---|---|---|
--base | stringArray | a local snapshot to take the chunks a chunked bundle leaves out from (repeatable) | [] |
--dry-run | bool | check a chunked bundle completely and write nothing | — |
--id | string | import under this snapshot id instead of the one it was exported with | — |
--trust | string | require a chunked bundle to be signed by this Ed25519 public key (file or base64) | — |