支持OSS托管加密

2026-08-16 22:38:31 +08:00
parent 7b7d23c743
commit eb06ec3c5f
6 changed files with 20 additions and 19 deletions
@@ -153,13 +153,18 @@ backup_decrypt_file() {
  unset passphrase
 }

-backup_oss_upload_kms() {
+backup_oss_upload() {
  local source="$1"
  local destination="$2"
  local kms_key_id
-  kms_key_id="$(backup_require_env BACKUP_KMS_KEY_ID)"
-  ossutil cp "${source}" "${destination}" \
-    --encryption KMS --kms-master-key-id "${kms_key_id}"
+  kms_key_id="$(backup_env_value BACKUP_KMS_KEY_ID)"
+  if [[ -n "${kms_key_id}" ]]; then
+    ossutil cp "${source}" "${destination}" \
+      --encryption KMS --kms-master-key-id "${kms_key_id}"
+    return
+  fi
+  # 未配置 KMS 时依赖 Bucket 已启用的 OSS 托管服务器端加密；备份载荷仍会先经过客户端加密。
+  ossutil cp "${source}" "${destination}"
 }

 backup_validate_oss_uri() {