Normal Encrypted File (.ppke) Recovery
Configuration
bak.toml：
[restore_encryption]
private_key_file = "/tmp/key/ppk.key"
private_key_passphrase_env = "PPKPKPSW"
allow_prompt = true
PreCheckout
Perform application data or database backup pre-checks
ppk decrypt --input /private/tmp/backup/peppykeep/test_717_file/test_717_file-bak_20260717_142437.ppke --extract --output-dir /private/tmp/backup/peppykeep/test_717_file/717jm --config-home ~/.peppykeep/conf
Or enter password manually
ppk decrypt --input /private/tmp/backup/peppykeep/test_717_file/test_717_file-bak_20260717_142437.ppke --extract --output-dir /private/tmp/backup/peppykeep/test_717_file/717jm --prompt-for-private-key-passphrase --config-home ~/.peppykeep/conf
When the pre-test is successful, the output is as follows:
=== Dry Run ===
Action : decrypt
Input : /tmp
Output : /tmp
PrivKey : <configured restore_encryption.private_key_file>
Prompt : false
Next : Re-run with --apply to execute.
Recover
Perform application data or database backups
ppk decrypt --input /private/tmp/backup/peppykeep/test_717_file/test_717_file-bak_20260717_142437.ppke --extract --output-dir /private/tmp/backup/peppykeep/test_717_file/717jm --apply --config-home ~/.peppykeep/conf
Or enter password manually
ppk decrypt --input /private/tmp/backup/peppykeep/test_717_file/test_717_file-bak_20260717_142437.ppke --extract --output-dir /private/tmp/backup/peppykeep/test_717_file/717jm --prompt-for-private-key-passphrase --apply --config-home ~/.peppykeep/conf
When the pre-test is successful, the output is as follows:
=== Completed ===
Action : decrypt
Input : /private/tmp/backup/peppykeep/test_717_file/test_717_file-bak_20260717_142437.ppke
Output : /private/tmp/backup/peppykeep/test_717_file/717jm
PrivKey : /tmp/key/ppk.key
Status : Command completed successfully.