With restic you can pipe to stdin, so I use mysqldump and pipe it to restic:

mysqldump --defaults-file=/root/backup_scripts/.my.cnf --databases db-name | restic backup --stdin --stdin-filename db-name.sql

The .my.cnf looks like this:

[mysqldump]
user=db-user
password="databasepassword"

FYI: if you run freebsd you are not affected: https://lists.freebsd.org/archives/freebsd-security/2024-March/000248.html

Took me a while to find out so I thought I’d share.

You can’t dedup/compress restic repos at fs level due to the encryption.

Nice thing is you get those even with „dumb“ targets that can‘t do those for you.

Restic is my tool of choice for deduplicated encrypted verifiable compressed incremental backups.

I use restic.

I use wasabi s3, I back up to that using restic.