multiple repos with same ID

[blueray453]

I have a script to backup the same data to two separate HDD. Both repo has the same password.

backup_to_dada() {
    backupToDada() {
        uuid="$1"
        label="$2"
        if findmnt --source UUID="$uuid" --source PARTLABEL="$label" --mountpoint /media/ismail/"$label" --types ext4 --noheadings &> /dev/null; then
            printf $'\033[31m\nBackup To %s Dada_Backup Using Borg\n\033[0m' $label
            export BORG_CACHE_DIR=/media/ismail/$label/Dada_Cache
            # BORG_RELOCATED_REPO_ACCESS_IS_OK=yes
            export BORG_PASSPHRASE='MY_SECRET_PASSWORD';

            borg --progress --show-rc create --stats /media/ismail/$label/Dada_Backup::{hostname}-{now:%Y-%m-%d_%H:%M:%S} /home/ismail/Desktop/Dada;

            borg list --short /media/ismail/"$label"/Dada_Backup
        fi
    }
    export -f backupToDada
    # parallel -j2 backupToDada ::: "${uuids[@]}" :::+ "${labels[@]}"

    backupToDada 15b71478-f755-4b22-b0ff-c938bd077bc6 WDPurple8TB2025
    backupToDada 309689b5-ea5c-4175-84c7-192631553eab WDPurple8TB
}

It is giving error:

Cache, or information obtained from the security directory is newer than repository - this is either an attack or unsafe (multiple repos with same ID)
terminating with error status, rc 2
Cache, or information obtained from the security directory is newer than repository - this is either an attack or unsafe (multiple repos with same ID)

I have checked https://borgbackup.readthedocs.io/en/stable/faq.html#this-is-either-an-attack-or-unsafe-warning

Not understanding how to solve this problem, as those are separate repo and have separate id (checked with borg config . id).

[ThomasWaldmann]

Good that you use 2 separately initialized borg repos with different repo ids. Not sure why you get that error message - maybe something got messed up while developing your script?

About the cache dir: you should better NOT put the cache dir in the same media as the repository, because the cache is not encrypted.

[blueray453]

Can any valuable information be extracted from the cache?

[ThomasWaldmann]

That depends on what is considered "valuable".

But if you look at the recent fingerprinting attacks on the content-defined chunkers, sometimes even a little bit of information can be used in bad ways.

So just don't keep the borg cache at untrusted places, it is not intended to be kept there.