Backing up a folder from a VeraCrypt volume brings up errors since Restic v17.0

Getting Help
1

Hello,

since version v17.0 I get error messages when backing up folders/files that are located on a VeraCrypt volume:

error: incomplete metadata for d:\Testfolder: get named security info failed with: Access is denied.
error: incomplete metadata for \\?\d:\Testfolder\Testfile.txt: get named security info failed with: Access is denied.

Since v17.1 the files are saved, but the error messages remain.

This is an excerpt from the v17.1 debug log file (I still have the complete version of the log and could provide more information):

2024/09/12 09:01:17 archiver/archiver.go:715    archiver.resolveRelativeTargets 1   targets before resolving: [d:\Testfolder]
2024/09/12 09:01:17 archiver/scanner.go:76  archiver.(*Scanner).Scan    53  start scan for [d:\Testfolder]
2024/09/12 09:01:17 archiver/archiver.go:742    archiver.resolveRelativeTargets 1   targets after resolving: [d:\Testfolder]
2024/09/12 09:01:17 archiver/archiver.go:715    archiver.resolveRelativeTargets 53  targets before resolving: [d:\Testfolder]
2024/09/12 09:01:17 archiver/tree.go:274    archiver.NewTree    1   targets: [d:\Testfolder]
2024/09/12 09:01:17 archiver/archiver.go:742    archiver.resolveRelativeTargets 53  targets after resolving: [d:\Testfolder]
2024/09/12 09:01:17 archiver/scanner.go:83  archiver.(*Scanner).Scan    53  clean targets [d:\Testfolder]
2024/09/12 09:01:17 archiver/tree.go:292    archiver.NewTree    1   before unroll:
/d, root "d:\\", path "", meta "d:\\"
    /Testfolder, root "", path "d:\\Testfolder", meta ""

2024/09/12 09:01:17 archiver/tree.go:274    archiver.NewTree    53  targets: [d:\Testfolder]
2024/09/12 09:01:17 archiver/tree.go:292    archiver.NewTree    53  before unroll:
/d, root "d:\\", path "", meta "d:\\"
    /Testfolder, root "", path "d:\\Testfolder", meta ""

2024/09/12 09:01:17 archiver/tree.go:298    archiver.NewTree    53  result:
/d, root "d:\\", path "", meta "d:\\"
    /Testfolder, root "", path "d:\\Testfolder", meta ""

2024/09/12 09:01:17 archiver/tree.go:298    archiver.NewTree    1   result:
/d, root "d:\\", path "", meta "d:\\"
    /Testfolder, root "", path "d:\\Testfolder", meta ""

2024/09/12 09:01:17 archiver/file_saver.go:40   archiver.NewFileSaver   58  new file saver with 2 file workers and 8 blob workers
2024/09/12 09:01:17 archiver/archiver.go:829    archiver.(*Archiver).Snapshot.func1.1   58  starting snapshot
2024/09/12 09:01:17 archiver/scanner.go:97  archiver.(*Scanner).Scan    53  result: {Files:1 Dirs:1 Others:0 Bytes:11}
2024/09/12 09:01:17 archiver/archiver.go:649    archiver.(*Archiver).saveTree   58  / (1 nodes), parent <nil>
2024/09/12 09:01:17 archiver/archiver.go:637    archiver.(*Archiver).saveTree   58  /d, dir node data loaded from d:\
2024/09/12 09:01:17 restic/node_windows.go:112  restic.(*Node).fillExtendedAttributes   58  fillExtendedAttributes(d:\) []
2024/09/12 09:01:17 archiver/archiver.go:649    archiver.(*Archiver).saveTree   58  /d (1 nodes), parent <nil>
2024/09/12 09:01:17 archiver/archiver.go:421    archiver.(*Archiver).save   58  /d/Testfolder target "d:\\Testfolder", previous <nil>
2024/09/12 09:01:17 archiver/archiver.go:528    archiver.(*Archiver).save   58    d:\Testfolder dir
2024/09/12 09:01:17 archiver/archiver.go:301    archiver.(*Archiver).saveDir    58  /d/Testfolder d:\Testfolder
2024/09/12 09:01:17 fs/sd_windows.go:326    fs.adjustPrivileges 58  Not all requested privileges were fully set: [17]. AdjustTokenPrivileges returned warning: Not all privileges or groups referenced are assigned to the caller.
2024/09/12 09:01:17 restic/node_windows.go:112  restic.(*Node).fillExtendedAttributes   58  fillExtendedAttributes(d:\Testfolder) []
2024/09/12 09:01:17 archiver/archiver.go:206    archiver.(*Archiver).error  58  item d:\Testfolder: error was filtered by handler, before: "incomplete metadata for d:\\Testfolder: get named security info failed with: Access is denied.", after: <nil>
2024/09/12 09:01:17 archiver/archiver.go:421    archiver.(*Archiver).save   58  /d/Testfolder/Testfile.txt target "d:\\Testfolder\\Testfile.txt", previous <nil>
2024/09/12 09:01:17 archiver/archiver.go:450    archiver.(*Archiver).save   58    d:\Testfolder\Testfile.txt regular file
2024/09/12 09:01:17 archiver/file_saver.go:157  archiver.(*FileSaver).saveFile  67  /d/Testfolder/Testfile.txt
2024/09/12 09:01:17 archiver/archiver.go:566    archiver.(*Archiver).save   58  return after 0.000
2024/09/12 09:01:17 archiver/archiver.go:566    archiver.(*Archiver).save   58  return after 0.007
2024/09/12 09:01:17 restic/node_windows.go:112  restic.(*Node).fillExtendedAttributes   67  fillExtendedAttributes(\\?\d:\Testfolder\Testfile.txt) []
2024/09/12 09:01:17 archiver/archiver.go:206    archiver.(*Archiver).error  67  item \\?\d:\Testfolder\Testfile.txt: error was filtered by handler, before: "incomplete metadata for \\\\?\\d:\\Testfolder\\Testfile.txt: get named security info failed with: Access is denied.", after: <nil>
2

That issue is tracked in "get named security info failed with: Access is denied" on an ExFAT volume, on Windows 10/11 · Issue #5003 · restic/restic · GitHub . I unfortunately can’t reproduce it so I don’t know why Access is denied is returned and whether we can just silence the warning or not.

How are you running restic? Anything special about your user account?

3

Hi Michael, thanks for your reply.

I digged some more and finally found the ‘reason’ for my issue.
My container is mounted with “/mountoption rm” which means it is mounted as a removable drive.

So if you mount a VeraCrypt container with that option too, you should be able to reproduce the issue.

Hope that helps.

Kind regards Axel

4

Are there any findings on this yet?