Skip to content

[stable26] fix: occ encryption:decrypt-all handles maintenance mode and disables… #10390

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
max-nextcloud merged 1 commit into from
May 16, 2023
Merged

[stable26] fix: occ encryption:decrypt-all handles maintenance mode and disables… #10390

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 9 additions & 7 deletions admin_manual/configuration_files/encryption_configuration.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -274,17 +274,19 @@ Disabling encryption
--------------------

You may disable encryption only with ``occ``. Make sure you have backups of all
encryption keys, including users'. Put your Nextcloud server into
maintenance mode, and then disable your encryption module with these commands::
encryption keys, including users'.
Disable your encryption module with this command::

occ maintenance:mode --on
occ encryption:disable
occ encryption:decrypt-all

Take it out of maintenance mode when you are finished::
It will put your server into maintenance mode and back.
It also takes care of disabling encryption when all files have been decrypted.
If the command is aborted some files have been decrypted and others are still encrypted.
In this case the command will keep the encryption turned on
and Nextcloud can handle this situation fine.
You can proceed decrypting the remaining files by calling the command again
once the problems that caused the abortion have been resolved.

occ maintenance:mode --off

.. warning:: Disabling encryption without decrypting all the files will lead to decryption errors in the future as this state causes unpredictable behaviors.
.. note:: The ``occ encryption:decrypt-all`` can take a lot of time. You can run one user at a time like so: ``occ encryption:decrypt-all <user-id>``.

Expand Down