This guide sets up Duplicity for encrypted incremental backups using GPG.
duplicity and gnupgsudo apt-get update
sudo apt-get install -y duplicity gnupg
gpg --full-generate-key
gpg --list-secret-keys --keyid-format LONG
Record the key ID for encryption operations.
export PASSPHRASE='change-me'
duplicity --encrypt-key YOUR_GPG_KEY /etc scp://backup@backup-host//srv/backups/server01
duplicity collection-status scp://backup@backup-host//srv/backups/server01
duplicity verify scp://backup@backup-host//srv/backups/server01 /etc
mkdir -p /tmp/duplicity-restore-test
duplicity restore scp://backup@backup-host//srv/backups/server01 /tmp/duplicity-restore-test
duplicity remove-older-than 90D --force scp://backup@backup-host//srv/backups/server01