From a3e19e621774a4b47e29a95518f8c6e13786829e Mon Sep 17 00:00:00 2001 From: Max Date: Mon, 15 May 2023 13:05:40 +0200 Subject: [PATCH] fix: occ encryption:decrypt-all handles maintenance mode and disables encryption When the command is started in maintenance mode it will even err out. Also one should not disable encryption without decrypting all files first. Signed-off-by: Max --- .../encryption_configuration.rst | 16 +++++++++------- 1 file changed, 9 insertions(+), 7 deletions(-) diff --git a/admin_manual/configuration_files/encryption_configuration.rst b/admin_manual/configuration_files/encryption_configuration.rst index c394ae2ef..5af22c8ae 100644 --- a/admin_manual/configuration_files/encryption_configuration.rst +++ b/admin_manual/configuration_files/encryption_configuration.rst @@ -262,17 +262,19 @@ Disabling encryption -------------------- You may disable encryption only with ``occ``. Make sure you have backups of all -encryption keys, including users'. Put your Nextcloud server into -maintenance mode, and then disable your encryption module with these commands:: +encryption keys, including users'. +Disable your encryption module with this command:: - occ maintenance:mode --on - occ encryption:disable occ encryption:decrypt-all -Take it out of maintenance mode when you are finished:: +It will put your server into maintenance mode and back. +It also takes care of disabling encryption when all files have been decrypted. +If the command is aborted some files have been decrypted and others are still encrypted. +In this case the command will keep the encryption turned on +and Nextcloud can handle this situation fine. +You can proceed decrypting the remaining files by calling the command again +once the problems that caused the abortion have been resolved. - occ maintenance:mode --off - .. warning:: Disabling encryption without decrypting all the files will lead to decryption errors in the future as this state causes unpredictable behaviors. .. note:: The ``occ encryption:decrypt-all`` can take a lot of time. You can run one user at a time like so: ``occ encryption:decrypt-all ``.