doc: Reword parts of the text, replace rclone with rest-server

The intent here is to make the text more consistent in its use of different concepts involved in explaining the idea and setup that is explained, and to make it easier to follow. We're also replacing rclone with rest-server, not because we dislike rclone but in order to keep the text to the basic tooling and the main restic eco- system. Finally we also remove the previous tip at the end about keeping the SSH tunnel up, as it will be during the time the SSH session is running (in which the user is expected to run the restic commands).
use rclone for rest server instead of docker
2026-09-14 16:27:59 +00:00 · 2026-02-18 22:19:56 +01:00 · 2026-01-17 16:29:26 +01:00 · 2025-09-25 13:35:40 +02:00 · 2025-09-11 16:07:50 +02:00
654 changed files with 11537 additions and 20019 deletions
@@ -1,25 +0,0 @@
-[codespell]
-
-# Ref: https://github.com/codespell-project/codespell#using-a-config-file
-# Skip historical content (CHANGELOG, release notes archive), auto-generated
-# man pages (which contain troff macros like \(bu that look like typos), and
-# files we don't want to modify (go.sum, css with vendor prefixes).
-skip = .git*,.gitignore,.gitattributes,go.sum,*.css,.codespellrc,CHANGELOG.md,changelog,*.1
-check-hidden = true
-
-# Protect URLs from corrections (URLs may contain words flagged as typos and
-# must not be changed); also ignore camelCase/PascalCase identifiers like
-# AtLeast which are valid Go identifiers, not typos.
-ignore-regex = https?://\S+|\b[a-z]+[A-Z]\w*\b|\b[A-Z][a-z]+[A-Z]\w*\b
-
-ignore-words-list =
-  # variable name short for "serialized", also matches [uU]ser glob pattern
-  ser,
-  # German word "ist" appearing in test data string
-  ist,
-  # intentional truncated test string in format truncation tests
-  fo,
-  # CLI flag name (--iinclude, case-insensitive include)
-  iinclude,
-  # intentional in fake test path /doesnt/exist
-  doesnt
@@ -1,12 +0,0 @@
-# Actual layer caching is impossible due to .git, but
-# that must be included for provenance reasons.  These ignores
-# are strictly for hygienic build.
-*
-!/*.go
-!/go.*
-!/cmd/*
-!/docker/entrypoint.sh
-!/internal/*
-!/helpers/*
-!/VERSION
-!/.git/
@@ -36,7 +36,7 @@ Please always follow these steps:
 - Format all commit messages in the same style as [the other commits in the repository](https://github.com/restic/restic/blob/master/CONTRIBUTING.md#git-commits).
 -->

- [ ] I have added tests for all code changes, see [writing tests](https://restic.readthedocs.io/en/stable/090_participating.html#writing-tests)
+- [ ] I have added tests for all code changes.
 - [ ] I have added documentation for relevant changes (in the manual).
 - [ ] There's a new file in `changelog/unreleased/` that describes the changes for our users (see [template](https://github.com/restic/restic/blob/master/changelog/TEMPLATE)).
 - [ ] I'm done! This pull request is ready for review.
@@ -5,10 +5,6 @@ updates:
    directory: "/" # Location of package manifests
    schedule:
      interval: "monthly"
-    groups:
-      golang-x-deps:
-        patterns:
-          - "golang.org/x/*"

  # Dependencies listed in .github/workflows/*.yml
  - package-ecosystem: "github-actions"
@@ -1,27 +0,0 @@
-# Codespell configuration is within .codespellrc
---
-name: Codespell
-
-on:
-  # run checks on push to master, but not when other branches are pushed to
-  push:
-    branches:
-      - master
-
-  # run checks for all pull requests
-  pull_request:
-  merge_group:
-
-permissions:
-  contents: read
-
-jobs:
-  codespell:
-    name: Check for spelling errors
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-      - name: Codespell
-        uses: codespell-project/actions-codespell@8f01853be192eb0f849a5c7d721450e7a467c579  # v2.2
@@ -26,10 +26,10 @@ jobs:

    steps:
      - name: Checkout repository
-        uses: actions/checkout@v7
+        uses: actions/checkout@v5

      - name: Log in to the Container registry
-        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f
+        uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
@@ -37,7 +37,7 @@ jobs:

      - name: Extract metadata (tags, labels) for Docker
        id: meta
-        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf
+        uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
        with:
          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
          tags: |
@@ -47,10 +47,10 @@ jobs:
            type=semver,pattern={{major}}.{{minor}}

      - name: Set up QEMU
-        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a
+        uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3

      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
+        uses: docker/setup-buildx-action@2b51285047da1547ffb1b2203d8be4c0af6b1f20

      - name: Ensure consistent binaries
        run: |
@@ -61,7 +61,7 @@ jobs:

      - name: Build and push Docker image
        id: build-and-push
-        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294
+        uses: docker/build-push-action@15560696de535e4014efeff63c48f16952e52dd1
        with:
          push: true
          context: .
@@ -1,13 +0,0 @@
-name: size-label
-on: pull_request_target
-jobs:
-  size-label:
-    permissions:
-      contents: read
-      pull-requests: write
-    runs-on: ubuntu-latest
-    steps:
-      - name: size-label
-        uses: "pascalgn/size-label-action@56b489b027932ec0cf60438a1a5f1a19c8fc71ff" # v0.5.7
-        env:
-          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
@@ -13,7 +13,7 @@ permissions:
  contents: read

 env:
-  latest_go: "1.26.x"
+  latest_go: "1.24.x"
  GO111MODULE: on

 jobs:
@@ -23,29 +23,29 @@ jobs:
        # list of jobs to run:
        include:
          - job_name: Windows
-            go: 1.26.x
+            go: 1.24.x
            os: windows-latest

          - job_name: macOS
-            go: 1.26.x
+            go: 1.24.x
            os: macOS-latest
            test_fuse: false

          - job_name: Linux
-            go: 1.26.x
+            go: 1.24.x
            os: ubuntu-latest
            test_cloud_backends: true
            test_fuse: true
            check_changelog: true

          - job_name: Linux (race)
-            go: 1.26.x
+            go: 1.24.x
            os: ubuntu-latest
            test_fuse: true
            test_opts: "-race"

          - job_name: Linux
-            go: 1.25.x
+            go: 1.23.x
            os: ubuntu-latest
            test_fuse: true

@@ -57,10 +57,10 @@ jobs:

    steps:
      - name: Check out code
-        uses: actions/checkout@v7
+        uses: actions/checkout@v5

      - name: Set up Go ${{ matrix.go }}
-        uses: actions/setup-go@v7
+        uses: actions/setup-go@v5
        with:
          go-version: ${{ matrix.go }}

@@ -137,14 +137,12 @@ jobs:
          go run build.go

      - name: Minimal test
-        timeout-minutes: 3
        run: |
          ./restic init
          ./restic backup .
        env:
          RESTIC_REPOSITORY: ../testrepo
          RESTIC_PASSWORD: password
-          RESTIC_DEBUG_STACKTRACE_SIGINT: "true"

      - name: Run local Tests
        env:
@@ -222,10 +220,10 @@ jobs:

    steps:
      - name: Check out code
-        uses: actions/checkout@v7
+        uses: actions/checkout@v5

      - name: Set up Go ${{ env.latest_go }}
-        uses: actions/setup-go@v7
+        uses: actions/setup-go@v5
        with:
          go-version: ${{ env.latest_go }}

@@ -244,18 +242,18 @@ jobs:
      checks: write
    steps:
      - name: Check out code
-        uses: actions/checkout@v7
+        uses: actions/checkout@v5

      - name: Set up Go ${{ env.latest_go }}
-        uses: actions/setup-go@v7
+        uses: actions/setup-go@v5
        with:
          go-version: ${{ env.latest_go }}

      - name: golangci-lint
-        uses: golangci/golangci-lint-action@v9
+        uses: golangci/golangci-lint-action@v6
        with:
          # Required: the version of golangci-lint is required and must be specified without patch version: we always use the latest patch version.
-          version: v2.12
+          version: v1.64.8
          args: --verbose --timeout 5m

        # only run golangci-lint for pull requests, otherwise ALL hints get
@@ -280,7 +278,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Decide whether the needed jobs succeeded or failed
-        uses: re-actors/alls-green@b5b5b37504aa4183270bd3d855c52a67f212be35
+        uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe
        with:
          jobs: ${{ toJSON(needs) }}

@@ -289,11 +287,11 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Check out code
-        uses: actions/checkout@v7
+        uses: actions/checkout@v5

      - name: Docker meta
        id: meta
-        uses: docker/metadata-action@v6
+        uses: docker/metadata-action@v5
        with:
          # list of Docker images to use as base name for tags
          images: |
@@ -309,14 +307,14 @@ jobs:
            type=sha

      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v4
+        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@v3

      - name: Build and push
        id: docker_build
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@v6
        with:
          push: false
          context: .
@@ -1,101 +1,70 @@
-version: "2"
+# This is the configuration for golangci-lint for the restic project.
+#
+# A sample config with all settings is here:
+# https://github.com/golangci/golangci-lint/blob/master/.golangci.example.yml
+
 linters:
  # only enable the linters listed below
-  default: none
+  disable-all: true
  enable:
-    - asciicheck
-    # ensure that http response bodies are closed
-    - bodyclose
-    # restrict imports from other restic packages for internal/backend (cache exempt)
-    - depguard
-    - copyloopvar
    # make sure all errors returned by functions are handled
    - errcheck
+
+    # show how code can be simplified
+    - gosimple
+
+    # make sure code is formatted
+    - gofmt
+
    # examine code and report suspicious constructs, such as Printf calls whose
    # arguments do not align with the format string
    - govet
-    # consistent imports
-    - importas
-    # detect when assignments to existing variables are not used
-    - ineffassign
-    - nolintlint
+
    # make sure names and comments are used according to the conventions
    - revive
+
+    # detect when assignments to existing variables are not used
+    - ineffassign
+
    # run static analysis and find errors
    - staticcheck
+
    # find unused variables, functions, structs, types, etc.
    - unused
-  settings:
-    depguard:
-      rules:
-        # Prevent backend packages from importing the internal/restic package to keep the architectural layers intact.
-        backend-imports:
-          files:
-            - "**/internal/backend/**"
-            - "!**/internal/backend/test/**"
-            - "!**/*_test.go"
-          deny:
-            - pkg: "github.com/restic/restic/internal/restic"
-              desc: "internal/restic should not be imported to keep the architectural layers intact"
-            - pkg: "github.com/restic/restic/internal/repository"
-              desc: "internal/repository should not be imported to keep the architectural layers intact"
-        repository-internals:
-          files:
-            - "**"
-            - "!**/internal/repository/**"
-          deny:
-            - pkg: "github.com/restic/restic/internal/repository/"
-              desc: "packages below internal/repository should not be imported to not depend on repository internals"
-    importas:
-      alias:
-        - pkg: github.com/restic/restic/internal/test
-          alias: rtest
-    staticcheck:
-      checks:
-        # default
-        - "all"
-        - "-ST1000"
-        - "-ST1003"
-        - "-ST1016"
-        - "-ST1020"
-        - "-ST1021"
-        - "-ST1022"
-        # extra disables
-        - "-QF1008" # don't warn about specifying name of embedded field on access
-  exclusions:
-    rules:
-      # revive: ignore unused parameters in tests
-      - path: (_test\.go|testing\.go|backend/.*/tests\.go)
-        text: "unused-parameter:"
-      # revive: do not warn about missing comments for exported stuff
-      - path: (.+)\.go$
-        text: exported (function|method|var|type|const) .* should have comment or be unexported
-      # revive: ignore constants in all caps
-      - path: (.+)\.go$
-        text: don't use ALL_CAPS in Go names; use CamelCase
-      # revive: lots of packages don't have such a comment
-      - path: (.+)\.go$
-        text: "package-comments: should have a package comment"
-      # staticcheck: there's no easy way to replace these packages
-      - path: (.+)\.go$
-        text: 'SA1019: "golang.org/x/crypto/poly1305" is deprecated'
-      - path: (.+)\.go$
-        text: 'SA1019: "golang.org/x/crypto/openpgp" is deprecated'
-      - path: (.+)\.go$
-        text: "redefines-builtin-id:"
-      # revive: collection of helpers to implement a backend, more descriptive names would be too repetitive
-      - path: internal/backend/util/.*.go$
-        text: "var-naming: avoid meaningless package names"
-    paths:
-      - third_party$
-      - builtin$
-      - examples$
-formatters:
-  enable:
-    # make sure code is formatted
-    - gofmt
-  exclusions:
-    paths:
-      - third_party$
-      - builtin$
-      - examples$
+
+    # parse and typecheck code
+    - typecheck
+
+    # ensure that http response bodies are closed
+    - bodyclose
+
+    - importas
+
+issues:
+  # don't use the default exclude rules, this hides (among others) ignored
+  # errors from Close() calls
+  exclude-use-default: false
+
+  # list of things to not warn about
+  exclude:
+    # revive: do not warn about missing comments for exported stuff
+    - exported (function|method|var|type|const) .* should have comment or be unexported
+    # revive: ignore constants in all caps
+    - don't use ALL_CAPS in Go names; use CamelCase
+    # revive: lots of packages don't have such a comment
+    - "package-comments: should have a package comment"
+    # staticcheck: there's no easy way to replace these packages
+    - "SA1019: \"golang.org/x/crypto/poly1305\" is deprecated"
+    - "SA1019: \"golang.org/x/crypto/openpgp\" is deprecated"
+    - "redefines-builtin-id:"
+
+  exclude-rules:
+    # revive: ignore unused parameters in tests
+    - path: (_test\.go|testing\.go|backend/.*/tests\.go)
+      text: "unused-parameter:"
+
+linters-settings:
+  importas:
+    alias:
+      - pkg: github.com/restic/restic/internal/test
+        alias: rtest
@@ -1,8 +1,5 @@
 # Table of Contents

-* [Changelog for 0.19.1](#changelog-for-restic-0191-2026-07-05)
-* [Changelog for 0.19.0](#changelog-for-restic-0190-2026-06-09)
-* [Changelog for 0.18.1](#changelog-for-restic-0181-2025-09-21)
 * [Changelog for 0.18.0](#changelog-for-restic-0180-2025-03-27)
 * [Changelog for 0.17.3](#changelog-for-restic-0173-2024-11-08)
 * [Changelog for 0.17.2](#changelog-for-restic-0172-2024-10-27)
@@ -42,727 +39,6 @@
 * [Changelog for 0.6.0](#changelog-for-restic-060-2017-05-29)


-# Changelog for restic 0.19.1 (2026-07-05)
-The following sections list the changes in restic 0.19.1 relevant to
-restic users. The changes are ordered by importance.
-
-## Summary
-
- * Fix #5234: Prevent mounting over the repository directory
- * Fix #5667: Skip inaccessible `backup` source paths
- * Fix #5722: Update `mount` latest symlink after snapshot reload
- * Fix #21866: Hide `stats` progress bar in JSON mode
- * Fix #21869: Restore old behavior of `snapshots --latest <n>` without `--group-by`
- * Fix #21876: Show timezone location in `snapshots` output
- * Fix #21879: Prevent crash in mountpoint validation if mountpoint is inaccessible
- * Fix #21895: Remove read-only files via the SFTP backend on Windows servers
- * Fix #21899: Make `backup` respect excludes for duplicate directory entries
-
-## Details
-
- * Bugfix #5234: Prevent mounting over the repository directory
-
-   Using a local repository directory as the `mount` target — or a path that
-   contains it, or that it contains — caused the FUSE server to read its own
-   backend files through the new mount, deadlocking the kernel and requiring a long
-   reboot to recover.
-
-   Restic now resolves both paths and refuses any such overlap with a clear error
-   before mounting.
-
-   https://github.com/restic/restic/issues/5234
-   https://github.com/restic/restic/pull/5348
-
- * Bugfix #5667: Skip inaccessible `backup` source paths
-
-   The `backup` command only skipped source paths that did not exist. A path that
-   could not be accessed for another reason, such as a malformed path on Windows,
-   was kept and produced an empty snapshot. Restic now skips any such path and
-   aborts if none remain.
-
-   https://github.com/restic/restic/issues/5667
-   https://github.com/restic/restic/pull/21852
-
- * Bugfix #5722: Update `mount` latest symlink after snapshot reload
-
-   When `restic mount` was kept running while new snapshots were created, the new
-   snapshots appeared in the mountpoint, but the `latest` symlink could still point
-   to the previously latest snapshot. Restic now invalidates the cached snapshot
-   directory entries after a snapshot reload so that `latest` points to the newest
-   snapshot.
-
-   https://github.com/restic/restic/issues/5722
-   https://github.com/restic/restic/pull/21873
-
- * Bugfix #21866: Hide `stats` progress bar in JSON mode
-
-   Since restic 0.19.0, the `stats` command shows a progress bar. This progress bar
-   was unintentionally displayed also when using the `--json` option, mixing
-   regular text output with JSON. This is now fixed.
-
-   https://github.com/restic/restic/issues/21866
-   https://github.com/restic/restic/pull/21871
-
- * Bugfix #21869: Restore old behavior of `snapshots --latest <n>` without `--group-by`
-
-   Restic 0.19.0 accidentally changed the behavior of `snapshots --latest <n>` to
-   no longer group snapshots by host and paths by default.
-
-   The `snapshots --latest <n>` command now again uses the old behavior of grouping
-   by host and paths when `--group-by` is not specified. However, when specifying
-   `--group-by` the output is still grouped as requested, as in restic 0.19.0.
-
-   https://github.com/restic/restic/issues/21869
-   https://github.com/restic/restic/pull/21875
-
- * Bugfix #21876: Show timezone location in `snapshots` output
-
-   With restic 0.19.0, the `snapshots` command printed the current timezone when
-   listing snapshots. However, that timezone label might change during the year,
-   for example with daylight saving time. Restic now prints a more consistent and
-   shorter version of the text.
-
-   https://github.com/restic/restic/pull/21876
-   https://forum.restic.net/t/possible-bug-in-timezone-naming/10867
-
- * Bugfix #21879: Prevent crash in mountpoint validation if mountpoint is inaccessible
-
-   Since restic 0.19.0, the `mount` command validates a mountpoint before loading
-   the repository. If restic was unable to stat the mountpoint, this would result
-   in a crash. This has now been fixed to correctly return an error instead.
-
-   https://github.com/restic/restic/pull/21879
-
- * Bugfix #21895: Remove read-only files via the SFTP backend on Windows servers
-
-   Since restic 0.19.0, repository files on the SFTP backend are marked read-only
-   after save. On Windows SFTP servers, removing them failed with a permission
-   error. The SFTP backend now clears the read-only flag before removing the file.
-
-   https://github.com/restic/restic/issues/21895
-   https://github.com/restic/restic/pull/21897
-
- * Bugfix #21899: Make `backup` respect excludes for duplicate directory entries
-
-   Since restic 0.19.0, backing up a directory with duplicate directory entries
-   always produced "Warning: at least one source file could not be read", even when
-   those files were excluded. This has now been fixed.
-
-   https://github.com/restic/restic/issues/21899
-   https://github.com/restic/restic/pull/21900
-
-
-# Changelog for restic 0.19.0 (2026-06-09)
-The following sections list the changes in restic 0.19.0 relevant to
-restic users. The changes are ordered by importance.
-
-## Summary
-
- * Fix #2034: Support serving a `restic mount` of a Windows system via Samba
- * Fix #4447: Use mode 0700 for repository directories created over SFTP
- * Fix #4467: Exit with code 3 when some `backup` source paths do not exist
- * Fix #4759: Error out when environment variables hold invalid values
- * Fix #5233: Return exit code 3 when failing to remove snapshots
- * Fix #5258: Exit with code 130 on SIGINT
- * Fix #5280: Reject impossible `find` time bounds immediately
- * Fix #5280: Make `find --pack` list blobs for tree packs
- * Fix #5354: Allow `rclone` and `sftp` backends when running in background
- * Fix #5427: Correctly restore ACL inheritance state on Windows
- * Fix #5477: Password prompt was sometimes not shown for `backup -v`
- * Fix #5487: Mark repository files read-only when using the SFTP backend
- * Fix #5586: Correctly handle `snapshots --group-by` with `--latest`
- * Fix #5595: Avoid spurious `chmod` errors on certain file backends
- * Fix #5683: Prevent `backup --stdin-from-command` from hanging
- * Fix #5757: Respect `--user` and `--host` in `key passwd`
- * Fix #21820: Correct handling of duplicate index entries
- * Fix #21820: Correctly handle pack files missing from the index
- * Chg #5293: Prune small packfiles more aggressively
- * Chg #5767: Prevent excluding paths explicitly passed to `backup`
- * Chg #21791: Update dependencies and require Go 1.25 or newer
- * Enh #3326: Limit `check` to snapshots selected by filters
- * Enh #3572: Support restoring ownership by name on UNIX systems
- * Enh #3738: Optional GitHub token for `self-update` API requests
- * Enh #4278: Support include filters in the `rewrite` command
- * Enh #4728: Support zstd compression levels `fastest` and `better`
- * Enh #4868: Include repository ID in the filesystem name used by `mount`
- * Enh #5175: Add status counters to `copy` in verbose text output
- * Enh #5352: Support excluding cloud-backed files on macOS
- * Enh #5383: Reduce progress bar refresh rates to decrease energy usage
- * Enh #5424: Enable Windows filesystem privileges before file access
- * Enh #5440: Make `--host` override environment variable `RESTIC_HOST`
- * Enh #5448: Support configuring `nice` and `ionice` in the Docker image
- * Enh #5453: Copy multiple snapshots in batches
- * Enh #5523: Add Open Container Initiative labels to release Docker image
- * Enh #5531: Reduce Azure storage costs by optimizing uploads
- * Enh #5562: Rewrite only changed status lines each frame
- * Enh #5588: Show timezone context in `snapshots` output
- * Enh #5610: Reduce `check`, `copy`, `diff` and `stats` memory usage
- * Enh #5689: Show more detailed progress for `stats`
- * Enh #5713: Significantly speed up index loading
- * Enh #5718: Stricter and earlier validation of the `mount` point
-
-## Details
-
- * Bugfix #2034: Support serving a `restic mount` of a Windows system via Samba
-
-   A repository mounted using `restic mount` on a POSIX system could not use Samba
-   to serve files from backups of Windows systems, while backups of non-Windows
-   systems could be served successfully. This has now been fixed.
-
-   https://github.com/restic/restic/issues/2034
-   https://github.com/restic/restic/issues/4382
-   https://github.com/restic/restic/pull/21784
-
- * Bugfix #4447: Use mode 0700 for repository directories created over SFTP
-
-   When creating a repository over SFTP, restic created the repository directories
-   with the SFTP server's default permissions, often 0755, rather than the 0700
-   permissions it uses for local repositories.
-
-   Restic now creates these directories with 0700 permissions.
-
-   https://github.com/restic/restic/issues/4447
-   https://github.com/restic/restic/pull/21817
-
- * Bugfix #4467: Exit with code 3 when some `backup` source paths do not exist
-
-   Restic used to exit with code 0 when a top-level backup source path was missing,
-   and exited with code 3 only when a child path under an existing source did not
-   exist. Scripts that relied on the exit code could therefore treat an incomplete
-   backup as success.
-
-   Restic now exits with code 3 when any backup source path does not exist.
-
-   https://github.com/restic/restic/issues/4467
-   https://github.com/restic/restic/pull/5347
-
- * Bugfix #4759: Error out when environment variables hold invalid values
-
-   If the environment variables `RESTIC_COMPRESSION`, `RESTIC_PACK_SIZE`, or
-   `RESTIC_READ_CONCURRENCY` could not be parsed, restic used to ignore them.
-   Restic now fails with an error unless the same setting is overridden on the
-   command line.
-
-   https://github.com/restic/restic/issues/4759
-   https://github.com/restic/restic/pull/5592
-   https://github.com/restic/restic/pull/5700
-
- * Bugfix #5233: Return exit code 3 when failing to remove snapshots
-
-   Previously, the `forget` command returned exit code 0 when it failed to remove
-   one or more snapshots. This was misleading to scripts.
-
-   The `forget` command now instead returns exit code 3 when failing to remove one
-   or more snapshots.
-
-   https://github.com/restic/restic/issues/5233
-   https://github.com/restic/restic/pull/5322
-
- * Bugfix #5258: Exit with code 130 on SIGINT
-
-   Restic used to return exit code 1 on SIGINT. It now returns 130, the usual
-   convention for a process stopped by Ctrl-C.
-
-   https://github.com/restic/restic/issues/5258
-   https://github.com/restic/restic/pull/5363
-
- * Bugfix #5280: Reject impossible `find` time bounds immediately
-
-   The `find` command now fails with an error when both `--oldest` and `--newest`
-   are set and `--oldest` is later than `--newest`.
-
-   https://github.com/restic/restic/issues/5280
-   https://github.com/restic/restic/pull/5310
-
- * Bugfix #5280: Make `find --pack` list blobs for tree packs
-
-   The `find --pack <tree-pack>` command now also reports blobs for packs that only
-   contain tree blobs.
-
-   https://github.com/restic/restic/issues/5280
-   https://github.com/restic/restic/pull/5664
-
- * Bugfix #5354: Allow `rclone` and `sftp` backends when running in background
-
-   Previously, starting restic in the background could result in unexpected
-   behavior when using the `rclone` or `sftp` backends. For example, `restic -r
-   rclone:./example --insecure-no-password init &` could cause the calling `bash`
-   shell to exit unexpectedly.
-
-   This has now been fixed.
-
-   https://github.com/restic/restic/issues/5354
-   https://github.com/restic/restic/pull/5358
-   https://github.com/restic/restic/pull/5493
-   https://github.com/restic/restic/pull/5494
-
- * Bugfix #5427: Correctly restore ACL inheritance state on Windows
-
-   Since security descriptor backups were added in restic 0.17.0, Access Control
-   Entry inheritance was not restored correctly on Windows; restored permissions
-   were always marked as explicit (not inherited) even when they were inherited
-   from a parent folder.
-
-   The inheritance flags are now correctly applied when restoring the security
-   descriptor, preserving the original permission structure.
-
-   https://github.com/restic/restic/issues/5427
-   https://github.com/restic/restic/pull/5465
-
- * Bugfix #5477: Password prompt was sometimes not shown for `backup -v`
-
-   The repository password prompt could be hidden when running the `backup -v`
-   command. This has now been fixed.
-
-   https://github.com/restic/restic/issues/5477
-   https://github.com/restic/restic/pull/5554
-
- * Bugfix #5487: Mark repository files read-only when using the SFTP backend
-
-   Files created through the SFTP backend previously stayed writable. New files now
-   get read-only permissions where the server supports `chmod`.
-
-   https://github.com/restic/restic/issues/5487
-   https://github.com/restic/restic/pull/5497
-
- * Bugfix #5586: Correctly handle `snapshots --group-by` with `--latest`
-
-   For the `snapshots` command, `--latest` did not interact correctly with a
-   non-default `--group-by` value. This combination now behaves as intended.
-
-   https://github.com/restic/restic/issues/5586
-   https://github.com/restic/restic/pull/5601
-
- * Bugfix #5595: Avoid spurious `chmod` errors on certain file backends
-
-   On filesystems that do not support `chmod` (for example CIFS or FUSE-mounted
-   WebDAV), restic since version 0.18.0 failed to remove stale locks, throwing the
-   error `chmod ...: operation not supported`. This has now been fixed.
-
-   https://github.com/restic/restic/issues/5595
-   https://github.com/restic/restic/pull/5596
-
- * Bugfix #5683: Prevent `backup --stdin-from-command` from hanging
-
-   When using `--stdin-from-command`, the `backup` command could hang until
-   manually cancelled if the backup stopped before all subprocess output was
-   consumed, for example after a failed upload to the repository. This has now been
-   fixed.
-
-   https://github.com/restic/restic/issues/5683
-   https://github.com/restic/restic/pull/21829
-
- * Bugfix #5757: Respect `--user` and `--host` in `key passwd`
-
-   The `key passwd` command previously ignored the `--user` and `--host` options
-   and always stored the new key with the current user and host name. These options
-   are now honored.
-
-   https://github.com/restic/restic/issues/5757
-   https://github.com/restic/restic/pull/21781
-
- * Bugfix #21820: Correct handling of duplicate index entries
-
-   Before restic 0.10.0, a bug could, in very rare cases, split information about a
-   pack file across multiple index files.
-
-   Since restic 0.17.0, any operation that rewrites the index (like `prune` or
-   `repair packs`) could lose part of that information, resulting in errors in
-   later `check` or `prune` runs. This can be fixed by running `repair packs`, and
-   only repositories using repository format version 1 might be affected.
-
-   Split pack index entries are no longer lost during index rewrites. The `check`
-   command now reports these cases as errors that can be fixed using the `repair
-   packs` command. On older restic versions, running `repair index` twice also
-   fixes the problem.
-
-   https://github.com/restic/restic/issues/21820
-   https://github.com/restic/restic/pull/21828
-
- * Bugfix #21820: Correctly handle pack files missing from the index
-
-   The `repair packs` command was unable to salvage blobs from a pack file if the
-   pack file was not contained in the index or the index entry was incomplete.
-
-   The command now uses information from both the index and the pack file header.
-
-   https://github.com/restic/restic/issues/21820
-   https://github.com/restic/restic/pull/21827
-
- * Change #5293: Prune small packfiles more aggressively
-
-   The `prune` command now repacks more small packfiles by default. The option
-   `--repack-small` is no longer needed and has been marked as deprecated. The
-   `--repack-smaller-than` option can still be used to further control repacking of
-   small pack files.
-
-   https://github.com/restic/restic/issues/5293
-   https://github.com/restic/restic/pull/21803
-
- * Change #5767: Prevent excluding paths explicitly passed to `backup`
-
-   When e.g. `restic backup --exclude-if-present .git /home/user/data` was run and
-   `/home/user/.git` existed, restic excluded the `data` directory from the
-   snapshot. The same applied to `--exclude-caches` or `--one-file-system`.
-
-   Similarly, `restic backup --exclude-larger-than 1M large-file.bin` produced an
-   empty snapshot when the file was larger than one megabyte.
-
-   The `backup` command now tracks which files and directories were specified on
-   the command line and does not apply excludes to those paths. Content inside a
-   backed-up directory is still filtered by excludes as before.
-
-   https://github.com/restic/restic/issues/5767
-   https://github.com/restic/restic/pull/21797
-
- * Change #21791: Update dependencies and require Go 1.25 or newer
-
-   Dependencies have been updated. Building restic now requires Go 1.25 or newer.
-   The Windows build with Go 1.26 was also fixed.
-
-   https://github.com/restic/restic/issues/21791
-   https://github.com/restic/restic/pull/5619
-   https://github.com/restic/restic/pull/21796
-
- * Enhancement #3326: Limit `check` to snapshots selected by filters
-
-   The `check` command can now restrict pack verification to snapshots chosen with
-   the usual snapshot filters (`--tag`, `--host`, `--path`, or explicit snapshot
-   IDs on the command line).
-
-   https://github.com/restic/restic/issues/3326
-   https://github.com/restic/restic/pull/5469
-   https://github.com/restic/restic/pull/5644
-
- * Enhancement #3572: Support restoring ownership by name on UNIX systems
-
-   The `restore` command used to restore file ownership on UNIX systems by UID and
-   GID. It now supports restoring ownership by user and group name with
-   `--ownership-by-name`, so that snapshots can be restored on systems where
-   numeric IDs do not match those on the backup host.
-
-   Note: POSIX ACLs are still restored by numeric value; this change does not add
-   ACL-by-name support.
-
-   https://github.com/restic/restic/issues/3572
-   https://github.com/restic/restic/pull/5449
-
- * Enhancement #3738: Optional GitHub token for `self-update` API requests
-
-   The `self-update` command used only unauthenticated GitHub API requests when
-   checking for releases. Shared IP addresses could hit the GitHub rate limit,
-   resulting in a 403 Forbidden error and preventing updates.
-
-   Unauthenticated requests remain the default, but authenticated requests are now
-   possible. Set the environment variable `GITHUB_ACCESS_TOKEN` to a GitHub
-   [personal access token](https://github.com/settings/tokens) to avoid rate-limit
-   failures.
-
-   https://github.com/restic/restic/issues/3738
-   https://github.com/restic/restic/pull/5568
-
- * Enhancement #4278: Support include filters in the `rewrite` command
-
-   The `rewrite` command now accepts the same include filter options as the
-   `restore` command (`--include`, `--include-file`, `--iinclude`,
-   `--iinclude-file`, and short `-i`). Include and exclude filter options are
-   mutually exclusive.
-
-   https://github.com/restic/restic/issues/4278
-   https://github.com/restic/restic/pull/5191
-
- * Enhancement #4728: Support zstd compression levels `fastest` and `better`
-
-   Restic now supports the zstd compression modes `fastest` and `better`. Set the
-   environment variable `RESTIC_COMPRESSION` to `fastest` or `better`, or pass the
-   same values with the `--compression` option.
-
-   https://github.com/restic/restic/issues/4728
-   https://github.com/restic/restic/pull/5321
-
- * Enhancement #4868: Include repository ID in the filesystem name used by `mount`
-
-   The filesystem exposed by the `mount` command now includes the repository ID in
-   its name. The ID is printed when opening a repository or can be read with
-   `restic cat config`.
-
-   ```
-   $ df ./test-mount/
-   Filesystem        1K-blocks  Used Available Use% Mounted on
-   restic:d3b07384d1         0     0         0    - /mnt/my-restic-repo
-   ```
-
-   https://github.com/restic/restic/issues/4868
-   https://github.com/restic/restic/pull/5243
-
- * Enhancement #5175: Add status counters to `copy` in verbose text output
-
-   The `copy` command now prints additional counters in text mode when `--verbose`
-   is set: blobs to copy, their on-disk size, and the number of pack files read
-   from the source repository.
-
-   https://github.com/restic/restic/issues/5175
-   https://github.com/restic/restic/pull/5319
-
- * Enhancement #5352: Support excluding cloud-backed files on macOS
-
-   Previously, restic treated cloud-backed files (such as files stored on iCloud)
-   like normal local files, forcing a full download of placeholders and other
-   "meant to be cloud only" content during backups.
-
-   The `backup` command now supports `--exclude-cloud-files` (previously only
-   available on Windows) to skip those files on supported macOS versions. From
-   Sonoma (macOS 14.0) onward the option can prevent unwanted downloads. Older
-   macOS versions will still download the files during a backup run.
-
-   https://github.com/restic/restic/issues/5352
-   https://github.com/restic/restic/pull/5370
-
- * Enhancement #5383: Reduce progress bar refresh rates to decrease energy usage
-
-   Progress bars were previously updated at 60 frames per second, which could cause
-   high CPU or GPU usage in some terminal emulators.
-
-   The refresh rate is now 10 FPS to conserve energy. For some terminal emulators,
-   the lower rate is also necessary to allow selecting text in the terminal.
-
-   https://github.com/restic/restic/issues/5383
-   https://github.com/restic/restic/pull/5551
-   https://github.com/restic/restic/pull/5626
-
- * Enhancement #5424: Enable Windows filesystem privileges before file access
-
-   Restic used to enable some Windows filesystem privileges only while reading or
-   writing security descriptors. Extended attributes could therefore be read before
-   enabling the backup privilege, possibly resulting in missed data or errors.
-
-   Restic now enables the relevant filesystem privileges before any file access.
-
-   https://github.com/restic/restic/pull/5424
-
- * Enhancement #5440: Make `--host` override environment variable `RESTIC_HOST`
-
-   Previously, when the environment variable `RESTIC_HOST` was set, snapshot
-   listings and other operations were always filtered to that host.
-
-   Passing `--host` as an empty string (`--host=""` or `--host=`) now overrides
-   `RESTIC_HOST` and shows snapshots from all hosts.
-
-   The same override applies to other commands that support snapshot filters,
-   including `snapshots`, `forget`, `find`, `stats`, `copy`, `tag`, `repair
-   snapshots`, `rewrite`, `mount`, `restore`, `dump`, and `ls`.
-
-   https://github.com/restic/restic/issues/5440
-   https://github.com/restic/restic/pull/5541
-
- * Enhancement #5448: Support configuring `nice` and `ionice` in the Docker image
-
-   The container entrypoint now reads optional scheduling hints from the
-   environment:
-
-   - The environment variable `NICE` sets the process nice value (see `man nice`).
-
-   - The environment variable `IONICE_CLASS` selects the I/O scheduling class (see
-   `man ionice`). Real-time classes need the `SYS_NICE` capability added to the
-   container.
-
-   - The environment variable `IONICE_PRIORITY` sets the priority within
-   `IONICE_CLASS` and has no effect unless `IONICE_CLASS` is set; it defaults to
-   `4` (neutral priority).
-
-   For further details, please see:
-   https://restic.readthedocs.io/en/stable/020_installation.html#docker-container
-
-   https://github.com/restic/restic/pull/5448
-
- * Enhancement #5453: Copy multiple snapshots in batches
-
-   The `copy` command used to copy snapshots one at a time, even when doing so
-   produced pack files smaller than the target pack size. This led to many small
-   files when copying small incremental snapshots.
-
-   The `copy` command now copies multiple snapshots together so that small pack
-   files are avoided where possible.
-
-   https://github.com/restic/restic/issues/5453
-   https://github.com/restic/restic/pull/5472
-
- * Enhancement #5523: Add Open Container Initiative labels to release Docker image
-
-   The release Docker image now includes OCI-style image annotation labels, which
-   helps external tooling identify the image.
-
-   https://github.com/restic/restic/pull/5523
-
- * Enhancement #5531: Reduce Azure storage costs by optimizing uploads
-
-   Restic previously used Azure PutBlock and PutBlockList for every upload, which
-   cost two storage transactions per file and roughly doubled transaction charges
-   for repositories with many pack files.
-
-   Files up to 256 MiB now use PutBlob, requiring only a single transaction per
-   file and cutting typical transaction costs by about half. Larger blobs still use
-   block uploads as required by Azure.
-
-   https://github.com/restic/restic/issues/5531
-   https://github.com/restic/restic/pull/5544
-
- * Enhancement #5562: Rewrite only changed status lines each frame
-
-   The status bar rewrote every line on each frame whenever any content changed,
-   which made selecting text impossible in some terminal emulators even when most
-   lines were unchanged.
-
-   Now only lines that actually change are rewritten on each update.
-
-   https://github.com/restic/restic/issues/5562
-   https://github.com/restic/restic/pull/5648
-
- * Enhancement #5588: Show timezone context in `snapshots` output
-
-   The `snapshots` command now prints which timezone is used for displayed
-   timestamps. Snapshots may have been created in different timezones but are shown
-   in the local timezone, so a footer line (for example, timestamps shown in CET)
-   clarifies the display context when comparing snapshots from several sources.
-
-   https://github.com/restic/restic/pull/5588
-
- * Enhancement #5610: Reduce `check`, `copy`, `diff` and `stats` memory usage
-
-   The `check`, `copy`, `diff` and `stats` commands now use less memory when
-   handling large snapshots.
-
-   https://github.com/restic/restic/pull/5610
-
- * Enhancement #5689: Show more detailed progress for `stats`
-
-   The `stats` command used to show progress only while loading the index. During
-   the scan it printed only `scanning...` with no further updates. It now reports
-   how many snapshots, files, and blobs have been processed so far.
-
-   https://github.com/restic/restic/issues/5689
-   https://github.com/restic/restic/pull/5705
-
- * Enhancement #5713: Significantly speed up index loading
-
-   Loading the index for a large repository is now significantly faster. Also, the
-   `mount` command now loads the index once at startup and then only loads new
-   index files as they appear. It also loads snapshots before printing that the
-   repository is being served.
-
-   https://github.com/restic/restic/pull/5713
-   https://github.com/restic/restic/pull/5720
-
- * Enhancement #5718: Stricter and earlier validation of the `mount` point
-
-   The `mount` command previously accepted invalid mount points, resulting in an
-   error after loading the repository. The specified mount point must now refer to
-   a directory that the current user can access and write to, and this check is
-   performed before opening the repository.
-
-   https://github.com/restic/restic/pull/5718
-
-
-# Changelog for restic 0.18.1 (2025-09-21)
-The following sections list the changes in restic 0.18.1 relevant to
-restic users. The changes are ordered by importance.
-
-## Summary
-
- * Fix #5324: Correctly handle `backup --stdin-filename` with directory paths
- * Fix #5325: Accept `RESTIC_HOST` environment variable in `forget` command
- * Fix #5342: Ignore "chmod not supported" errors when writing files
- * Fix #5344: Ignore `EOPNOTSUPP` errors for extended attributes
- * Fix #5421: Fix rare crash if directory is removed during backup
- * Fix #5429: Stop retrying uploads when rest-server runs out of space
- * Fix #5467: Improve handling of download retries in `check` command
-
-## Details
-
- * Bugfix #5324: Correctly handle `backup --stdin-filename` with directory paths
-
-   In restic 0.18.0, the `backup` command failed if a filename that includes at
-   least a directory was passed to `--stdin-filename`. For example,
-   `--stdin-filename /foo/bar` resulted in the following error:
-
-   ```
-   Fatal: unable to save snapshot: open /foo: no such file or directory
-   ```
-
-   This has now been fixed.
-
-   https://github.com/restic/restic/issues/5324
-   https://github.com/restic/restic/pull/5356
-
- * Bugfix #5325: Accept `RESTIC_HOST` environment variable in `forget` command
-
-   The `forget` command did not use the host name from the `RESTIC_HOST`
-   environment variable when filtering snapshots. This has now been fixed.
-
-   https://github.com/restic/restic/issues/5325
-   https://github.com/restic/restic/pull/5327
-
- * Bugfix #5342: Ignore "chmod not supported" errors when writing files
-
-   Restic 0.18.0 introduced a bug that caused `chmod xxx: operation not supported`
-   errors to appear when writing to a local file repository that did not support
-   chmod (like CIFS or WebDAV mounted via FUSE). Restic now ignores those errors.
-
-   https://github.com/restic/restic/issues/5342
-
- * Bugfix #5344: Ignore `EOPNOTSUPP` errors for extended attributes
-
-   Restic 0.18.0 added extended attribute support for NetBSD 10+, but not all
-   NetBSD filesystems support extended attributes. Other BSD systems can likewise
-   return `EOPNOTSUPP`, so restic now ignores these errors.
-
-   https://github.com/restic/restic/issues/5344
-
- * Bugfix #5421: Fix rare crash if directory is removed during backup
-
-   In restic 0.18.0, the `backup` command could crash if a directory was removed
-   between reading its metadata and listing its directory content. This has now
-   been fixed.
-
-   https://github.com/restic/restic/pull/5421
-
- * Bugfix #5429: Stop retrying uploads when rest-server runs out of space
-
-   When rest-server returns a `507 Insufficient Storage` error, it indicates that
-   no more storage capacity is available. Restic now correctly stops retrying
-   uploads in this case.
-
-   https://github.com/restic/restic/issues/5429
-   https://github.com/restic/restic/pull/5452
-
- * Bugfix #5467: Improve handling of download retries in `check` command
-
-   In very rare cases, the `check` command could unnecessarily report repository
-   damage if the backend returned incomplete, corrupted data on the first download
-   try which is afterwards resolved by a download retry.
-
-   This could result in an error output like the following:
-
-   ```
-   Load(<data/34567890ab>, 33918928, 0) returned error, retrying after 871.35598ms: readFull: unexpected EOF
-   Load(<data/34567890ab>, 33918928, 0) operation successful after 1 retries
-   check successful on second attempt, original error pack 34567890ab[...] contains 6 errors: [blob 12345678[...]: decrypting blob <data/12345678> from 34567890 failed: ciphertext verification failed ...]
-   [...]
-   Fatal: repository contains errors
-   ```
-
-   This fix only applies to a very specific case where the log shows `operation
-   successful after 1 retries` followed by a `check successful on second attempt,
-   original error` that only reports `ciphertext verification failed` errors in the
-   pack file. If any other errors are reported in the pack file, then the
-   repository still has to be considered as damaged.
-
-   Now, only the check result of the last download retry is reported as intended.
-
-   https://github.com/restic/restic/issues/5467
-   https://github.com/restic/restic/pull/5495
-
-
 # Changelog for restic 0.18.0 (2025-03-27)
 The following sections list the changes in restic 0.18.0 relevant to
 restic users. The changes are ordered by importance.
@@ -1330,9 +606,8 @@ restic users. The changes are ordered by importance.
   correctly.

   Specifying volume names is now handled correctly. To restore snapshots created
-   before this bugfix, use the <snapshot>:<subfolder> syntax. For example, to
-   restore a snapshot with ID `12345678` that backed up `C:`, use the following
-   command:
+   before this bugfix, use the <snapshot>:<subpath> syntax. For example, to restore
+   a snapshot with ID `12345678` that backed up `C:`, use the following command:

   ```
   restic restore 12345678:/C/C:./ --target output/folder
@@ -202,9 +202,6 @@ we'll be glad to assist. Having a PR with failing integration tests is nothing
 to be ashamed of. In contrast, that happens regularly for all of us. That's
 what the tests are there for.

-More details of how to structure tests can be found here at
-[writing tests](https://restic.readthedocs.io/en/stable/090_participating.html#writing-tests).
-
 Git Commits
 -----------

@@ -93,7 +93,7 @@ release. Instructions on how to do that are contained in the

 ## News

-You can follow the restic project on Mastodon [@restic](https://fosstodon.org/@restic) or subscribe to
+You can follow the restic project on Mastodon [@resticbackup](https://fosstodon.org/@restic) or subscribe to
 the [project blog](https://restic.net/blog/).

 ## License
@@ -1 +1 @@
-0.19.1-dev
+0.18.0-dev
@@ -36,6 +36,7 @@
 // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

 //go:build ignore_build_go
+// +build ignore_build_go

 package main

@@ -59,7 +60,7 @@ var config = Config{
 	// see https://github.com/googleapis/google-cloud-go/issues/11448
 	DefaultBuildTags: []string{"selfupdate", "disable_grpc_modules"}, // specify build tags which are always used
 	Tests:            []string{"./..."},                              // tests to run
-	MinVersion:       GoVersion{Major: 1, Minor: 25, Patch: 0},       // minimum Go version supported
+	MinVersion:       GoVersion{Major: 1, Minor: 23, Patch: 0},       // minimum Go version supported
 }

 // Config configures the build.
@@ -6,7 +6,7 @@ resulting snapshot would result in an error. Note that using `C:\`
 as backup target worked correctly.

 Specifying volume names is now handled correctly. To restore snapshots
-created before this bugfix, use the <snapshot>:<subfolder> syntax. For
+created before this bugfix, use the <snapshot>:<subpath> syntax. For
 example, to restore a snapshot with ID `12345678` that backed up `C:`,
 use the following command:

@@ -1,7 +0,0 @@
-Bugfix: Ignore `EOPNOTSUPP` errors for extended attributes
-
-Restic 0.18.0 added extended attribute support for NetBSD 10+, but not all
-NetBSD filesystems support extended attributes. Other BSD systems can
-likewise return `EOPNOTSUPP`, so restic now ignores these errors.
-
-https://github.com/restic/restic/issues/5344
@@ -1,8 +0,0 @@
-Bugfix: Stop retrying uploads when rest-server runs out of space
-
-When rest-server returns a `507 Insufficient Storage` error, it indicates
-that no more storage capacity is available. Restic now correctly stops
-retrying uploads in this case.
-
-https://github.com/restic/restic/issues/5429
-https://github.com/restic/restic/pull/5452
@@ -1,27 +0,0 @@
-Bugfix: Improve handling of download retries in `check` command
-
-In very rare cases, the `check` command could unnecessarily report repository
-damage if the backend returned incomplete, corrupted data on the first download
-try which is afterwards resolved by a download retry.
-
-This could result in an error output like the following:
-
-```
-Load(<data/34567890ab>, 33918928, 0) returned error, retrying after 871.35598ms: readFull: unexpected EOF
-Load(<data/34567890ab>, 33918928, 0) operation successful after 1 retries
-check successful on second attempt, original error pack 34567890ab[...] contains 6 errors: [blob 12345678[...]: decrypting blob <data/12345678> from 34567890 failed: ciphertext verification failed ...]
-[...]
-Fatal: repository contains errors
-```
-
-This fix only applies to a very specific case where the log shows
-`operation successful after 1 retries` followed by a
-`check successful on second attempt, original error` that only reports
-`ciphertext verification failed` errors in the pack file. If any other errors
-are reported in the pack file, then the repository still has to be considered
-as damaged.
-
-Now, only the check result of the last download retry is reported as intended.
-
-https://github.com/restic/restic/issues/5467
-https://github.com/restic/restic/pull/5495
@@ -1,17 +0,0 @@
-Bugfix: Correct handling of duplicate index entries
-
-Before restic 0.10.0, a bug could, in very rare cases, split information
-about a pack file across multiple index files.
-
-Since restic 0.17.0, any operation that rewrites the index (like `prune`
-or `repair packs`) could lose part of that information, resulting in errors
-in later `check` or `prune` runs. This can be fixed by running `repair packs`,
-and only repositories using repository format version 1 might be affected.
-
-Split pack index entries are no longer lost during index rewrites. The
-`check` command now reports these cases as errors that can be fixed using
-the `repair packs` command. On older restic versions, running `repair index`
-twice also fixes the problem.
-
-https://github.com/restic/restic/issues/21820
-https://github.com/restic/restic/pull/21828
@@ -1,9 +0,0 @@
-Enhancement: Limit `check` to snapshots selected by filters
-
-The `check` command can now restrict pack verification to snapshots chosen with
-the usual snapshot filters (`--tag`, `--host`, `--path`, or explicit snapshot
-IDs on the command line).
-
-https://github.com/restic/restic/issues/3326
-https://github.com/restic/restic/pull/5469
-https://github.com/restic/restic/pull/5644
@@ -1,12 +0,0 @@
-Enhancement: Support restoring ownership by name on UNIX systems
-
-The `restore` command used to restore file ownership on UNIX systems by UID
-and GID. It now supports restoring ownership by user and group name with
-`--ownership-by-name`, so that snapshots can be restored on systems where
-numeric IDs do not match those on the backup host.
-
-Note: POSIX ACLs are still restored by numeric value; this change does not
-add ACL-by-name support.
-
-https://github.com/restic/restic/issues/3572
-https://github.com/restic/restic/pull/5449
@@ -1,13 +0,0 @@
-Enhancement: Optional GitHub token for `self-update` API requests
-
-The `self-update` command used only unauthenticated GitHub API requests when
-checking for releases. Shared IP addresses could hit the GitHub rate limit,
-resulting in a 403 Forbidden error and preventing updates.
-
-Unauthenticated requests remain the default, but authenticated requests are now
-possible. Set the environment variable `GITHUB_ACCESS_TOKEN` to a GitHub
-[personal access token](https://github.com/settings/tokens) to avoid rate-limit
-failures.
-
-https://github.com/restic/restic/issues/3738
-https://github.com/restic/restic/pull/5568
@@ -1,8 +0,0 @@
-Enhancement: Support include filters in the `rewrite` command
-
-The `rewrite` command now accepts the same include filter options as the `restore`
-command (`--include`, `--include-file`, `--iinclude`, `--iinclude-file`, and
-short `-i`). Include and exclude filter options are mutually exclusive.
-
-https://github.com/restic/restic/issues/4278
-https://github.com/restic/restic/pull/5191
@@ -1,10 +0,0 @@
-Bugfix: Use mode 0700 for repository directories created over SFTP
-
-When creating a repository over SFTP, restic created the repository directories
-with the SFTP server's default permissions, often 0755, rather than the 0700
-permissions it uses for local repositories.
-
-Restic now creates these directories with 0700 permissions.
-
-https://github.com/restic/restic/issues/4447
-https://github.com/restic/restic/pull/21817
@@ -1,11 +0,0 @@
-Bugfix: Exit with code 3 when some `backup` source paths do not exist
-
-Restic used to exit with code 0 when a top-level backup source path was
-missing, and exited with code 3 only when a child path under an existing
-source did not exist. Scripts that relied on the exit code could therefore
-treat an incomplete backup as success.
-
-Restic now exits with code 3 when any backup source path does not exist.
-
-https://github.com/restic/restic/issues/4467
-https://github.com/restic/restic/pull/5347
@@ -1,10 +0,0 @@
-Bugfix: Error out when environment variables hold invalid values
-
-If the environment variables `RESTIC_COMPRESSION`, `RESTIC_PACK_SIZE`, or
-`RESTIC_READ_CONCURRENCY` could not be parsed, restic used to ignore them.
-Restic now fails with an error unless the same setting is overridden on the
-command line.
-
-https://github.com/restic/restic/issues/4759
-https://github.com/restic/restic/pull/5592
-https://github.com/restic/restic/pull/5700
@@ -1,14 +0,0 @@
-Enhancement: Include repository ID in the filesystem name used by `mount`
-
-The filesystem exposed by the `mount` command now includes the repository ID
-in its name. The ID is printed when opening a repository or can be read with
-`restic cat config`.
-
-```
-$ df ./test-mount/
-Filesystem        1K-blocks  Used Available Use% Mounted on
-restic:d3b07384d1         0     0         0    - /mnt/my-restic-repo
-```
-
-https://github.com/restic/restic/issues/4868
-https://github.com/restic/restic/pull/5243
@@ -1,10 +0,0 @@
-Bugfix: Return exit code 3 when failing to remove snapshots
-
-Previously, the `forget` command returned exit code 0 when it failed
-to remove one or more snapshots. This was misleading to scripts.
-
-The `forget` command now instead returns exit code 3 when failing to
-remove one or more snapshots.
-
-https://github.com/restic/restic/issues/5233
-https://github.com/restic/restic/pull/5322
@@ -1,7 +0,0 @@
-Bugfix: Exit with code 130 on SIGINT
-
-Restic used to return exit code 1 on SIGINT. It now returns 130, the usual
-convention for a process stopped by Ctrl-C.
-
-https://github.com/restic/restic/issues/5258
-https://github.com/restic/restic/pull/5363
@@ -1,7 +0,0 @@
-Bugfix: Reject impossible `find` time bounds immediately
-
-The `find` command now fails with an error when both `--oldest`
-and `--newest` are set and `--oldest` is later than `--newest`.
-
-https://github.com/restic/restic/issues/5280
-https://github.com/restic/restic/pull/5310
@@ -1,9 +0,0 @@
-Change: Prune small packfiles more aggressively
-
-The `prune` command now repacks more small packfiles by default. The option
-`--repack-small` is no longer needed and has been marked as deprecated. The
-`--repack-smaller-than` option can still be used to further control repacking
-of small pack files.
-
-https://github.com/restic/restic/issues/5293
-https://github.com/restic/restic/pull/21803
@@ -1,13 +0,0 @@
-Enhancement: Support excluding cloud-backed files on macOS
-
-Previously, restic treated cloud-backed files (such as files stored on iCloud)
-like normal local files, forcing a full download of placeholders and other
-"meant to be cloud only" content during backups.
-
-The `backup` command now supports `--exclude-cloud-files` (previously only
-available on Windows) to skip those files on supported macOS versions. From
-Sonoma (macOS 14.0) onward the option can prevent unwanted downloads. Older
-macOS versions will still download the files during a backup run.
-
-https://github.com/restic/restic/issues/5352
-https://github.com/restic/restic/pull/5370
@@ -1,13 +0,0 @@
-Bugfix: Allow `rclone` and `sftp` backends when running in background
-
-Previously, starting restic in the background could result in unexpected
-behavior when using the `rclone` or `sftp` backends. For example,
-`restic -r rclone:./example --insecure-no-password init &` could cause the
-calling `bash` shell to exit unexpectedly.
-
-This has now been fixed.
-
-https://github.com/restic/restic/issues/5354
-https://github.com/restic/restic/pull/5358
-https://github.com/restic/restic/pull/5493
-https://github.com/restic/restic/pull/5494
@@ -1,12 +0,0 @@
-Enhancement: Reduce progress bar refresh rates to decrease energy usage
-
-Progress bars were previously updated at 60 frames per second, which
-could cause high CPU or GPU usage in some terminal emulators.
-
-The refresh rate is now 10 FPS to conserve energy. For some terminal
-emulators, the lower rate is also necessary to allow selecting text
-in the terminal.
-
-https://github.com/restic/restic/issues/5383
-https://github.com/restic/restic/pull/5551
-https://github.com/restic/restic/pull/5626
@@ -1,14 +0,0 @@
-Enhancement: Make `--host` override environment variable `RESTIC_HOST`
-
-Previously, when the environment variable `RESTIC_HOST` was set, snapshot
-listings and other operations were always filtered to that host.
-
-Passing `--host` as an empty string (`--host=""` or `--host=`) now overrides
-`RESTIC_HOST` and shows snapshots from all hosts.
-
-The same override applies to other commands that support snapshot filters,
-including `snapshots`, `forget`, `find`, `stats`, `copy`, `tag`,
-`repair snapshots`, `rewrite`, `mount`, `restore`, `dump`, and `ls`.
-
-https://github.com/restic/restic/issues/5440
-https://github.com/restic/restic/pull/5541
@@ -1,11 +0,0 @@
-Enhancement: Copy multiple snapshots in batches
-
-The `copy` command used to copy snapshots one at a time, even when doing so
-produced pack files smaller than the target pack size. This led to many small
-files when copying small incremental snapshots.
-
-The `copy` command now copies multiple snapshots together so that small pack
-files are avoided where possible.
-
-https://github.com/restic/restic/issues/5453
-https://github.com/restic/restic/pull/5472
@@ -1,7 +0,0 @@
-Bugfix: Password prompt was sometimes not shown for `backup -v`
-
-The repository password prompt could be hidden when running the
-`backup -v` command. This has now been fixed.
-
-https://github.com/restic/restic/issues/5477
-https://github.com/restic/restic/pull/5554
@@ -1,7 +0,0 @@
-Bugfix: Mark repository files read-only when using the SFTP backend
-
-Files created through the SFTP backend previously stayed writable. New files now
-get read-only permissions where the server supports `chmod`.
-
-https://github.com/restic/restic/issues/5487
-https://github.com/restic/restic/pull/5497
@@ -1,12 +0,0 @@
-Enhancement: Reduce Azure storage costs by optimizing uploads
-
-Restic previously used Azure PutBlock and PutBlockList for every upload, which
-cost two storage transactions per file and roughly doubled transaction charges
-for repositories with many pack files.
-
-Files up to 256 MiB now use PutBlob, requiring only a single transaction per
-file and cutting typical transaction costs by about half. Larger blobs still
-use block uploads as required by Azure.
-
-https://github.com/restic/restic/issues/5531
-https://github.com/restic/restic/pull/5544
@@ -1,10 +0,0 @@
-Enhancement: Rewrite only changed status lines each frame
-
-The status bar rewrote every line on each frame whenever any content changed,
-which made selecting text impossible in some terminal emulators even when most
-lines were unchanged.
-
-Now only lines that actually change are rewritten on each update.
-
-https://github.com/restic/restic/issues/5562
-https://github.com/restic/restic/pull/5648
@@ -1,7 +0,0 @@
-Bugfix: Correctly handle `snapshots --group-by` with `--latest`
-
-For the `snapshots` command, `--latest` did not interact correctly with a
-non-default `--group-by` value. This combination now behaves as intended.
-
-https://github.com/restic/restic/issues/5586
-https://github.com/restic/restic/pull/5601
@@ -1,8 +0,0 @@
-Bugfix: Avoid spurious `chmod` errors on certain file backends
-
-On filesystems that do not support `chmod` (for example CIFS or FUSE-mounted
-WebDAV), restic since version 0.18.0 failed to remove stale locks, throwing
-the error `chmod ...: operation not supported`. This has now been fixed.
-
-https://github.com/restic/restic/issues/5595
-https://github.com/restic/restic/pull/5596
@@ -1,9 +0,0 @@
-Bugfix: Prevent `backup --stdin-from-command` from hanging
-
-When using `--stdin-from-command`, the `backup` command could hang until
-manually cancelled if the backup stopped before all subprocess output was
-consumed, for example after a failed upload to the repository. This has
-now been fixed.
-
-https://github.com/restic/restic/issues/5683
-https://github.com/restic/restic/pull/21829
@@ -1,8 +0,0 @@
-Enhancement: Show more detailed progress for `stats`
-
-The `stats` command used to show progress only while loading the index. During
-the scan it printed only `scanning...` with no further updates. It now reports
-how many snapshots, files, and blobs have been processed so far.
-
-https://github.com/restic/restic/issues/5689
-https://github.com/restic/restic/pull/5705
@@ -1,8 +0,0 @@
-Bugfix: Respect `--user` and `--host` in `key passwd`
-
-The `key passwd` command previously ignored the `--user` and
-`--host` options and always stored the new key with the current
-user and host name. These options are now honored.
-
-https://github.com/restic/restic/issues/5757
-https://github.com/restic/restic/pull/21781
@@ -1,15 +0,0 @@
-Change: Prevent excluding paths explicitly passed to `backup`
-
-When e.g. `restic backup --exclude-if-present .git /home/user/data` was run
-and `/home/user/.git` existed, restic excluded the `data` directory from the
-snapshot. The same applied to `--exclude-caches` or `--one-file-system`.
-
-Similarly, `restic backup --exclude-larger-than 1M large-file.bin` produced
-an empty snapshot when the file was larger than one megabyte.
-
-The `backup` command now tracks which files and directories were specified on
-the command line and does not apply excludes to those paths. Content inside a
-backed-up directory is still filtered by excludes as before.
-
-https://github.com/restic/restic/issues/5767
-https://github.com/restic/restic/pull/21797
@@ -1,9 +0,0 @@
-Bugfix: Support serving a `restic mount` of a Windows system via Samba
-
-A repository mounted using `restic mount` on a POSIX system could not use
-Samba to serve files from backups of Windows systems, while backups of
-non-Windows systems could be served successfully. This has now been fixed.
-
-https://github.com/restic/restic/issues/2034
-https://github.com/restic/restic/issues/4382
-https://github.com/restic/restic/pull/21784
@@ -1,8 +0,0 @@
-Change: Update dependencies and require Go 1.25 or newer
-
-Dependencies have been updated. Building restic now requires
-Go 1.25 or newer. The Windows build with Go 1.26 was also fixed.
-
-https://github.com/restic/restic/issues/21791
-https://github.com/restic/restic/pull/5619
-https://github.com/restic/restic/pull/21796
@@ -1,9 +0,0 @@
-Bugfix: Correctly handle pack files missing from the index
-
-The `repair packs` command was unable to salvage blobs from a pack file if
-the pack file was not contained in the index or the index entry was incomplete.
-
-The command now uses information from both the index and the pack file header.
-
-https://github.com/restic/restic/issues/21820
-https://github.com/restic/restic/pull/21827
@@ -1,8 +0,0 @@
-Enhancement: Add status counters to `copy` in verbose text output
-
-The `copy` command now prints additional counters in text mode when
-`--verbose` is set: blobs to copy, their on-disk size, and the number
-of pack files read from the source repository.
-
-https://github.com/restic/restic/issues/5175
-https://github.com/restic/restic/pull/5319
@@ -1,10 +0,0 @@
-Enhancement: Enable Windows filesystem privileges before file access
-
-Restic used to enable some Windows filesystem privileges only while reading
-or writing security descriptors. Extended attributes could therefore be read
-before enabling the backup privilege, possibly resulting in missed data or
-errors.
-
-Restic now enables the relevant filesystem privileges before any file access.
-
-https://github.com/restic/restic/pull/5424
@@ -1,19 +0,0 @@
-Enhancement: Support configuring `nice` and `ionice` in the Docker image
-
-The container entrypoint now reads optional scheduling hints from the
-environment:
-
- The environment variable `NICE` sets the process nice value (see `man nice`).
-
- The environment variable `IONICE_CLASS` selects the I/O scheduling class (see
-`man ionice`). Real-time classes need the `SYS_NICE` capability added to the
-container.
-
- The environment variable `IONICE_PRIORITY` sets the priority within
-`IONICE_CLASS` and has no effect unless `IONICE_CLASS` is set; it defaults to
-`4` (neutral priority).
-
-For further details, please see:
-https://restic.readthedocs.io/en/stable/020_installation.html#docker-container
-
-https://github.com/restic/restic/pull/5448
@@ -1,12 +0,0 @@
-Bugfix: Correctly restore ACL inheritance state on Windows
-
-Since security descriptor backups were added in restic 0.17.0, Access Control
-Entry inheritance was not restored correctly on Windows; restored permissions
-were always marked as explicit (not inherited) even when they were inherited
-from a parent folder.
-
-The inheritance flags are now correctly applied when restoring the security
-descriptor, preserving the original permission structure.
-
-https://github.com/restic/restic/issues/5427
-https://github.com/restic/restic/pull/5465
@@ -1,6 +0,0 @@
-Enhancement: Add Open Container Initiative labels to release Docker image
-
-The release Docker image now includes OCI-style image annotation labels,
-which helps external tooling identify the image.
-
-https://github.com/restic/restic/pull/5523
@@ -1,9 +0,0 @@
-Enhancement: Show timezone context in `snapshots` output
-
-The `snapshots` command now prints which timezone is used for displayed
-timestamps. Snapshots may have been created in different timezones but are
-shown in the local timezone, so a footer line (for example, timestamps shown in
-CET) clarifies the display context when comparing snapshots from several
-sources.
-
-https://github.com/restic/restic/pull/5588
@@ -1,6 +0,0 @@
-Enhancement: Reduce `check`, `copy`, `diff` and `stats` memory usage
-
-The `check`, `copy`, `diff` and `stats` commands now use less memory
-when handling large snapshots.
-
-https://github.com/restic/restic/pull/5610
@@ -1,7 +0,0 @@
-Bugfix: Make `find --pack` list blobs for tree packs
-
-The `find --pack <tree-pack>` command now also reports
-blobs for packs that only contain tree blobs.
-
-https://github.com/restic/restic/issues/5280
-https://github.com/restic/restic/pull/5664
@@ -1,8 +0,0 @@
-Enhancement: Stricter and earlier validation of the `mount` point
-
-The `mount` command previously accepted invalid mount points, resulting in an
-error after loading the repository. The specified mount point must now refer to
-a directory that the current user can access and write to, and this check is
-performed before opening the repository.
-
-https://github.com/restic/restic/pull/5718
@@ -1,9 +0,0 @@
-Enhancement: Significantly speed up index loading
-
-Loading the index for a large repository is now significantly faster. Also,
-the `mount` command now loads the index once at startup and then only loads
-new index files as they appear. It also loads snapshots before printing that
-the repository is being served.
-
-https://github.com/restic/restic/pull/5713
-https://github.com/restic/restic/pull/5720
@@ -1,8 +0,0 @@
-Bugfix: Hide `stats` progress bar in JSON mode
-
-Since restic 0.19.0, the `stats` command shows a progress bar. This
-progress bar was unintentionally displayed also when using the `--json`
-option, mixing regular text output with JSON. This is now fixed.
-
-https://github.com/restic/restic/issues/21866
-https://github.com/restic/restic/pull/21871
@@ -1,12 +0,0 @@
-Bugfix: Restore old behavior of `snapshots --latest <n>` without `--group-by`
-
-Restic 0.19.0 accidentally changed the behavior of `snapshots --latest <n>`
-to no longer group snapshots by host and paths by default.
-
-The `snapshots --latest <n>` command now again uses the old behavior of
-grouping by host and paths when `--group-by` is not specified. However, when
-specifying `--group-by` the output is still grouped as requested, as in restic
-0.19.0.
-
-https://github.com/restic/restic/issues/21869
-https://github.com/restic/restic/pull/21875
@@ -1,9 +0,0 @@
-Bugfix: Remove read-only files via the SFTP backend on Windows servers
-
-Since restic 0.19.0, repository files on the SFTP backend are marked
-read-only after save. On Windows SFTP servers, removing them failed
-with a permission error. The SFTP backend now clears the read-only flag
-before removing the file.
-
-https://github.com/restic/restic/issues/21895
-https://github.com/restic/restic/pull/21897
@@ -1,8 +0,0 @@
-Bugfix: Make `backup` respect excludes for duplicate directory entries
-
-Since restic 0.19.0, backing up a directory with duplicate directory
-entries always produced "Warning: at least one source file could not be
-read", even when those files were excluded. This has now been fixed.
-
-https://github.com/restic/restic/issues/21899
-https://github.com/restic/restic/pull/21900
@@ -1,12 +0,0 @@
-Bugfix: Prevent mounting over the repository directory
-
-Using a local repository directory as the `mount` target — or a path
-that contains it, or that it contains — caused the FUSE server to
-read its own backend files through the new mount, deadlocking the
-kernel and requiring a long reboot to recover.
-
-Restic now resolves both paths and refuses any such overlap with a
-clear error before mounting.
-
-https://github.com/restic/restic/issues/5234
-https://github.com/restic/restic/pull/5348
@@ -1,9 +0,0 @@
-Bugfix: Skip inaccessible `backup` source paths
-
-The `backup` command only skipped source paths that did not exist. A path that
-could not be accessed for another reason, such as a malformed path on Windows,
-was kept and produced an empty snapshot. Restic now skips any such path and
-aborts if none remain.
-
-https://github.com/restic/restic/issues/5667
-https://github.com/restic/restic/pull/21852
@@ -1,10 +0,0 @@
-Bugfix: Update `mount` latest symlink after snapshot reload
-
-When `restic mount` was kept running while new snapshots were
-created, the new snapshots appeared in the mountpoint, but the `latest`
-symlink could still point to the previously latest snapshot. Restic now
-invalidates the cached snapshot directory entries after a snapshot reload so
-that `latest` points to the newest snapshot.
-
-https://github.com/restic/restic/issues/5722
-https://github.com/restic/restic/pull/21873
@@ -1,9 +0,0 @@
-Bugfix: Show timezone location in `snapshots` output
-
-With restic 0.19.0, the `snapshots` command printed the current timezone when
-listing snapshots. However, that timezone label might change during the year,
-for example with daylight saving time. Restic now prints a more consistent and
-shorter version of the text.
-
-https://github.com/restic/restic/pull/21876
-https://forum.restic.net/t/possible-bug-in-timezone-naming/10867
@@ -1,7 +0,0 @@
-Bugfix: Prevent crash in mountpoint validation if mountpoint is inaccessible
-
-Since restic 0.19.0, the `mount` command validates a mountpoint before loading
-the repository. If restic was unable to stat the mountpoint, this would result
-in a crash. This has now been fixed to correctly return an error instead.
-
-https://github.com/restic/restic/pull/21879
@@ -1,20 +1,14 @@
 # The first line must start with Bugfix:, Enhancement: or Change:,
-# including the colon. 'Change:' is for breaking changes only.
-# Documentation-only changes do not get a changelog entry.
-# Include the affected command in the summary if relevant.
-#
-# Use present tense and the imperative mood. Remove lines starting
-# with '#' from this template.
-Enhancement: Allow custom bar in the `foo` command
+# including the colon. Use present tense and the imperative mood. Remove
+# lines starting with '#' from this template.
+Enhancement: Allow custom bar in the foo command

 # Describe the problem in the past tense, the new behavior in the present
 # tense. Mention the affected commands, backends, operating systems, etc.
 # If the problem description just says that a feature was missing, then
-# only explain the new behavior. Aim for a short and concise description.
+# only explain the new behavior.
+# Focus on user-facing behavior, not the implementation.
 # Use "Restic now ..." instead of "We have changed ...".
-#
-# Focus on user-facing behavior, not the implementation. The description should
-# be understandable for a regular user without knowledge of the implementation.

 Restic foo always used the system-wide bar when deciding how to frob an
 item in the `baz` backend. It now permits selecting the bar with `--bar`
@@ -1,7 +0,0 @@
-Enhancement: show excluded items during backup in verbose mode
-
-`restic backup -vv` now shows excluded items in verbose mode. Both text and JSON
-output are supported.
-
-https://github.com/restic/restic/issues/21870
-https://github.com/restic/restic/pull/21887
@@ -1,11 +0,0 @@
-Enhancement: `restic repair snapshots --forget` removes broken snapshots
-
-In the past restic had no command to remove broken snapshot files.
-
-`restic repair snapshots --forget` can now remove broken snapshot files,
-which have been found previously by `restic check` or by earlier error messages from restic commands.
-
-For example, `restic repair snapshots --forget 1d204771` will remove a broken snapshot file with id `1d204771`.
-
-https://github.com/restic/restic/issues/21892
-https://github.com/restic/restic/pull/21907
@@ -1,7 +0,0 @@
-Enhancement: Add JSON support to prune
-
-Restic `prune` now also supports the `--json` option and gives all
-statistics in JSON format.
-
-https://github.com/restic/restic/issues/3129
-https://github.com/restic/restic/pull/5239
@@ -1,8 +0,0 @@
-Enhancement: Add warmup support for check command on S3 backend
-
-Like the other cold storage features, warmup support for the `check` command
-remains experimental and gated behind the "s3-restore" feature flag.
-
-https://github.com/restic/restic/pull/5248
-https://github.com/restic/restic/issues/3202
-https://github.com/restic/restic/issues/2504
@@ -1,8 +1,7 @@
-Enhancement: Support zstd compression levels `fastest` and `better`
+Enhancement: Added support for zstd compression levels `fastest` and `better`

 Restic now supports the zstd compression modes `fastest` and `better`. Set the
-environment variable `RESTIC_COMPRESSION` to `fastest` or `better`, or pass the
-same values with the `--compression` option.
+environment variable `RESTIC_COMPRESSION` to `fastest` or `better` to use these
+compression levels. This can also be set with the `--compression` flag.

 https://github.com/restic/restic/issues/4728
-https://github.com/restic/restic/pull/5321
@@ -0,0 +1,14 @@
+Enhancement: Include repository id in filesystem name used by `mount`
+
+The filesystem created by restic's `mount` command now includes the repository
+id in the filesystem name. The repository id is printed by restic when opening
+a repository or can be looked up using `restic cat config`.
+
+```
+[restic-user@hostname restic]$ df ./test-mount/
+Filesystem        1K-blocks  Used Available Use% Mounted on
+restic:d3b07384d1         0     0         0    - /mnt/my-restic-repo
+```
+
+https://github.com/restic/restic/issues/4868
+https://github.com/restic/restic/pull/5243
@@ -0,0 +1,8 @@
+Bugfix: forget command returns exit code 3 on partial removal of snapshots
+
+The `forget` command now returns exit code 3 when it fails to remove one or
+more snapshots. Previously, it returned exit code 0, which could lead to
+confusion if the command was used in a script.
+
+https://github.com/restic/restic/issues/5233
+https://github.com/restic/restic/pull/5322
@@ -1,14 +1,14 @@
-Bugfix: Correctly handle `backup --stdin-filename` with directory paths
+Bugfix: Correctly handle `backup --stdin-filename` with directories

 In restic 0.18.0, the `backup` command failed if a filename that includes
-at least a directory was passed to `--stdin-filename`. For example,
+a least a directory was passed to `--stdin-filename`. For example,
 `--stdin-filename /foo/bar` resulted in the following error:

 ```
 Fatal: unable to save snapshot: open /foo: no such file or directory
 ```

-This has now been fixed.
+This has been fixed now.

 https://github.com/restic/restic/issues/5324
 https://github.com/restic/restic/pull/5356
@@ -1,7 +1,7 @@
-Bugfix: Accept `RESTIC_HOST` environment variable in `forget` command
+Bugfix: Correctly handle `RESTIC_HOST` in `forget` command

 The `forget` command did not use the host name from the `RESTIC_HOST`
-environment variable when filtering snapshots. This has now been fixed.
+environment variable. This has been fixed.

 https://github.com/restic/restic/issues/5325
 https://github.com/restic/restic/pull/5327
@@ -1,6 +1,6 @@
 Bugfix: Ignore "chmod not supported" errors when writing files

-Restic 0.18.0 introduced a bug that caused `chmod xxx: operation not supported`
+Restic 0.18.0 introduced a bug that caused "chmod xxx: operation not supported"
 errors to appear when writing to a local file repository that did not support
 chmod (like CIFS or WebDAV mounted via FUSE). Restic now ignores those errors.

@@ -0,0 +1,7 @@
+Bugfix: Ignore EOPNOTSUPP as an error for xattr
+
+Restic 0.18.0 added xattr support for NetBSD 10+, but not all NetBSD
+filesystems support xattrs.  Other BSD systems can likewise return
+EOPNOTSUPP, so restic now simply ignores EOPNOTSUPP errors for xattrs.
+
+https://github.com/restic/restic/issues/5344
@@ -0,0 +1,12 @@
+Bugfix: Allow use of rclone/sftp backend when running restic in background
+
+When starting restic in the background, this could result in unexpected behavior
+when using the rclone or sftp backend.
+
+For example running `restic -r rclone:./example --insecure-no-password init &`
+could cause the calling `bash` shell to exit unexpectedly.
+
+This has been fixed.
+
+https://github.com/restic/restic/issues/5354
+https://github.com/restic/restic/pull/5358
@@ -1,7 +0,0 @@
-Enhancement: Add command to list packfiles belonging to a snapshot
-
-This enhancement adds command `list packs snapshotID` to show the packfiles
-belonging to the given snapshot.
-
-https://github.com/restic/restic/issues/5372
-https://github.com/restic/restic/pull/5396
@@ -0,0 +1,8 @@
+Bugfix: do not retry if rest-server runs out of space
+
+Rest-server return error `507 Insufficient Storage` if no more storage
+capacity is available at the server. Restic now no longer retries uploads
+in this case.
+
+https://github.com/restic/restic/issues/5429
+https://github.com/restic/restic/pull/5452
@@ -1,7 +0,0 @@
-Enhancement: `restic repair packs` can handle missing packfiles
-
-Missing and damaged packfiles previously required separate approaches to fix a repository.
-Now, both cases can be handled by the `repair packs` command, which is now able to handle
-missing packfiles by removing them from the repository index.
-
-https://github.com/restic/restic/pull/21845
@@ -1,6 +0,0 @@
-Enhancement: `find --pack` can handle corrupted pack files
-
-`restic find --pack <id>` can now also report affected snapshot if a packfile
-is corrupted but still present in the repository index.
-
-https://github.com/restic/restic/pull/21883
@@ -1,8 +0,0 @@
-Enhancement: Reduce memory usage of the in-memory index
-
-Restic keeps an index of the repository contents in memory during most
-operations. This index now requires roughly 12% less memory, which is
-especially noticeable for large repositories with many snapshots, where
-a lot of index data has to be loaded.
-
-https://github.com/restic/restic/pull/21937
@@ -1,9 +0,0 @@
-Bugfix: Report an error instead of crashing on a truncated key or config file
-
-Restic crashed with a slice bounds panic when a repository contained a key
-file or a config file that was shorter than the encryption overhead, for
-example after an upload was interrupted. Since every command has to read a
-key file, the whole repository became unusable until the file was removed.
-Restic now reports that the file is too short instead.
-
-https://github.com/restic/restic/pull/21977
@@ -1,7 +0,0 @@
-Bugfix: Redact Swift backend password in debug log output
-
-Restic could write the OpenStack Swift backend password (OS_PASSWORD or
-ST_KEY) in clear text to the debug log when debug logging was enabled.
-The password is now redacted.
-
-https://github.com/restic/restic/pull/22007
@@ -1,7 +1,8 @@
 Bugfix: Fix rare crash if directory is removed during backup

-In restic 0.18.0, the `backup` command could crash if a directory was removed
-between reading its metadata and listing its directory content. This has now
-been fixed.
+In restic 0.18.0, the `backup` command could crash if a directory is removed
+inbetween reading its metadata and listing its directory content.
+
+This has been fixed.

 https://github.com/restic/restic/pull/5421
@@ -2,8 +2,6 @@ package main

 import (
 	"context"
-	"fmt"
-	"io"
 	"os"
 	"os/signal"
 	"syscall"
@@ -11,27 +9,26 @@ import (
 	"github.com/restic/restic/internal/debug"
 )

-func createGlobalContext(stderr io.Writer) context.Context {
+func createGlobalContext() context.Context {
 	ctx, cancel := context.WithCancel(context.Background())

 	ch := make(chan os.Signal, 1)
-	go cleanupHandler(ch, cancel, stderr)
+	go cleanupHandler(ch, cancel)
 	signal.Notify(ch, syscall.SIGINT, syscall.SIGTERM)

 	return ctx
 }

 // cleanupHandler handles the SIGINT and SIGTERM signals.
-func cleanupHandler(c <-chan os.Signal, cancel context.CancelFunc, stderr io.Writer) {
+func cleanupHandler(c <-chan os.Signal, cancel context.CancelFunc) {
 	s := <-c
 	debug.Log("signal %v received, cleaning up", s)
-	// ignore error as there's no good way to handle it
-	_, _ = fmt.Fprintf(stderr, "\rsignal %v received, cleaning up \n", s)
+	Warnf("%ssignal %v received, cleaning up\n", clearLine(0), s)

 	if val, _ := os.LookupEnv("RESTIC_DEBUG_STACKTRACE_SIGINT"); val != "" {
-		_, _ = stderr.Write([]byte("\n--- STACKTRACE START ---\n\n"))
-		_, _ = stderr.Write([]byte(debug.DumpStacktrace()))
-		_, _ = stderr.Write([]byte("\n--- STACKTRACE END ---\n"))
+		_, _ = os.Stderr.WriteString("\n--- STACKTRACE START ---\n\n")
+		_, _ = os.Stderr.WriteString(debug.DumpStacktrace())
+		_, _ = os.Stderr.WriteString("\n--- STACKTRACE END ---\n")
 	}

 	cancel()
@@ -10,7 +10,6 @@ import (
 	"path"
 	"path/filepath"
 	"runtime"
-	"slices"
 	"strconv"
 	"strings"
 	"time"
@@ -20,20 +19,19 @@ import (
 	"golang.org/x/sync/errgroup"

 	"github.com/restic/restic/internal/archiver"
-	"github.com/restic/restic/internal/data"
 	"github.com/restic/restic/internal/debug"
 	"github.com/restic/restic/internal/errors"
 	"github.com/restic/restic/internal/filter"
 	"github.com/restic/restic/internal/fs"
-	"github.com/restic/restic/internal/global"
 	"github.com/restic/restic/internal/repository"
 	"github.com/restic/restic/internal/restic"
 	"github.com/restic/restic/internal/textfile"
 	"github.com/restic/restic/internal/ui"
 	"github.com/restic/restic/internal/ui/backup"
+	"github.com/restic/restic/internal/ui/termstatus"
 )

-func newBackupCommand(globalOptions *global.Options) *cobra.Command {
+func newBackupCommand() *cobra.Command {
 	var opts BackupOptions

 	cmd := &cobra.Command{
@@ -53,13 +51,22 @@ Exit status is 10 if the repository does not exist.
 Exit status is 11 if the repository is already locked.
 Exit status is 12 if the password is incorrect.
 `,
-		PreRunE: func(_ *cobra.Command, _ []string) error {
-			return opts.Finalize()
+		PreRun: func(_ *cobra.Command, _ []string) {
+			if opts.Host == "" {
+				hostname, err := os.Hostname()
+				if err != nil {
+					debug.Log("os.Hostname() returned err: %v", err)
+					return
+				}
+				opts.Host = hostname
+			}
 		},
 		GroupID:           cmdGroupDefault,
 		DisableAutoGenTag: true,
 		RunE: func(cmd *cobra.Command, args []string) error {
-			return runBackup(cmd.Context(), opts, *globalOptions, globalOptions.Term, args)
+			term, cancel := setupTermstatus()
+			defer cancel()
+			return runBackup(cmd.Context(), opts, globalOptions, term, args)
 		},
 	}

@@ -72,7 +79,7 @@ type BackupOptions struct {
 	filter.ExcludePatternOptions

 	Parent            string
-	GroupBy           data.SnapshotGroupByOptions
+	GroupBy           restic.SnapshotGroupByOptions
 	Force             bool
 	ExcludeOtherFS    bool
 	ExcludeIfPresent  []string
@@ -82,7 +89,7 @@ type BackupOptions struct {
 	Stdin             bool
 	StdinFilename     string
 	StdinCommand      bool
-	Tags              data.TagLists
+	Tags              restic.TagLists
 	Host              string
 	FilesFrom         []string
 	FilesFromVerbatim []string
@@ -96,13 +103,11 @@ type BackupOptions struct {
 	ReadConcurrency   uint
 	NoScan            bool
 	SkipIfUnchanged   bool
-
-	readConcurrencyFlag *pflag.Flag
 }

 func (opts *BackupOptions) AddFlags(f *pflag.FlagSet) {
 	f.StringVar(&opts.Parent, "parent", "", "use this parent `snapshot` (default: latest snapshot in the group determined by --group-by and not newer than the timestamp determined by --time)")
-	opts.GroupBy = data.SnapshotGroupByOptions{Host: true, Path: true}
+	opts.GroupBy = restic.SnapshotGroupByOptions{Host: true, Path: true}
 	f.VarP(&opts.GroupBy, "group-by", "g", "`group` snapshots by host, paths and/or tags, separated by comma (disable grouping with '')")
 	f.BoolVarP(&opts.Force, "force", "f", false, `force re-reading the source files/directories (overrides the "parent" flag)`)

@@ -129,23 +134,19 @@ func (opts *BackupOptions) AddFlags(f *pflag.FlagSet) {
 	f.StringArrayVar(&opts.FilesFromRaw, "files-from-raw", nil, "read the files to backup from `file` (can be combined with file args; can be specified multiple times)")
 	f.StringVar(&opts.TimeStamp, "time", "", "`time` of the backup (ex. '2012-11-01 22:08:41') (default: now)")
 	f.BoolVar(&opts.WithAtime, "with-atime", false, "store the atime for all files and directories")
-	f.BoolVar(&opts.IgnoreInode, "ignore-inode", false, "ignore inode number and ctime changes when checking for modified files (default: $RESTIC_IGNORE_INODE or false)")
-	f.BoolVar(&opts.IgnoreCtime, "ignore-ctime", false, "ignore ctime changes when checking for modified files (default: $RESTIC_IGNORE_CTIME or false)")
+	f.BoolVar(&opts.IgnoreInode, "ignore-inode", false, "ignore inode number and ctime changes when checking for modified files")
+	f.BoolVar(&opts.IgnoreCtime, "ignore-ctime", false, "ignore ctime changes when checking for modified files")
 	f.BoolVarP(&opts.DryRun, "dry-run", "n", false, "do not upload or write any data, just show what would be done")
 	f.BoolVar(&opts.NoScan, "no-scan", false, "do not run scanner to estimate size of backup")
 	if runtime.GOOS == "windows" {
 		f.BoolVar(&opts.UseFsSnapshot, "use-fs-snapshot", false, "use filesystem snapshot where possible (currently only Windows VSS)")
-	}
-	if runtime.GOOS == "windows" || runtime.GOOS == "darwin" {
-		f.BoolVar(&opts.ExcludeCloudFiles, "exclude-cloud-files", false, "excludes online-only cloud files (such as OneDrive, iCloud drive, …)")
+		f.BoolVar(&opts.ExcludeCloudFiles, "exclude-cloud-files", false, "excludes online-only cloud files (such as OneDrive Files On-Demand)")
 	}
 	f.BoolVar(&opts.SkipIfUnchanged, "skip-if-unchanged", false, "skip snapshot creation if identical to parent snapshot")

-	opts.readConcurrencyFlag = f.Lookup("read-concurrency")
-
-	// parse read inode and ctime from env, on error the default value will be used
-	opts.IgnoreInode, _ = strconv.ParseBool(os.Getenv("RESTIC_IGNORE_INODE"))
-	opts.IgnoreCtime, _ = strconv.ParseBool(os.Getenv("RESTIC_IGNORE_CTIME"))
+	// parse read concurrency from env, on error the default value will be used
+	readConcurrency, _ := strconv.ParseUint(os.Getenv("RESTIC_READ_CONCURRENCY"), 10, 32)
+	opts.ReadConcurrency = uint(readConcurrency)

 	// parse host from env, if not exists or empty the default value will be used
 	if host := os.Getenv("RESTIC_HOST"); host != "" {
@@ -153,44 +154,18 @@ func (opts *BackupOptions) AddFlags(f *pflag.FlagSet) {
 	}
 }

-func (opts *BackupOptions) Finalize() error {
-	if envVal := os.Getenv("RESTIC_READ_CONCURRENCY"); envVal != "" && !opts.readConcurrencyFlag.Changed {
-		n, err := strconv.ParseUint(envVal, 10, 32)
-		if err != nil {
-			return errors.Fatalf("invalid value for RESTIC_READ_CONCURRENCY %q: %v", envVal, err)
-		}
-		opts.ReadConcurrency = uint(n)
-	}
-	if opts.Host == "" {
-		hostname, err := os.Hostname()
-		if err != nil {
-			debug.Log("os.Hostname() returned err: %v", err)
-			return nil
-		}
-		opts.Host = hostname
-	}
-	return nil
-}
-
 var backupFSTestHook func(fs fs.FS) fs.FS

 // ErrInvalidSourceData is used to report an incomplete backup
 var ErrInvalidSourceData = errors.New("at least one source file could not be read")

-// ErrNoSourceData is used to report that no source data was found
-var ErrNoSourceData = errors.Fatal("all source directories/files do not exist")
-
-// filterExisting returns the items that exist and can be accessed. It returns
-// ErrNoSourceData if none remain, or ErrInvalidSourceData if some were skipped.
-func filterExisting(items []string, warnf func(msg string, args ...any)) (result []string, err error) {
+// filterExisting returns a slice of all existing items, or an error if no
+// items exist at all.
+func filterExisting(items []string) (result []string, err error) {
 	for _, item := range items {
 		_, err := fs.Lstat(item)
-		if err != nil {
-			if errors.Is(err, os.ErrNotExist) {
-				warnf("%v does not exist, skipping\n", item)
-			} else {
-				warnf("%v cannot be accessed, skipping\n", item)
-			}
+		if errors.Is(err, os.ErrNotExist) {
+			Warnf("%v does not exist, skipping\n", item)
 			continue
 		}

@@ -198,12 +173,10 @@ func filterExisting(items []string, warnf func(msg string, args ...any)) (result
 	}

 	if len(result) == 0 {
-		return nil, ErrNoSourceData
-	} else if len(result) < len(items) {
-		return result, ErrInvalidSourceData
+		return nil, errors.Fatal("all source directories/files do not exist")
 	}

-	return result, nil
+	return
 }

 // readLines reads all lines from the named file and returns them as a
@@ -212,7 +185,7 @@ func filterExisting(items []string, warnf func(msg string, args ...any)) (result
 // If filename is empty, readPatternsFromFile returns an empty slice.
 // If filename is a dash (-), readPatternsFromFile will read the lines from the
 // standard input.
-func readLines(filename string, stdin io.ReadCloser) ([]string, error) {
+func readLines(filename string) ([]string, error) {
 	if filename == "" {
 		return nil, nil
 	}
@@ -223,7 +196,7 @@ func readLines(filename string, stdin io.ReadCloser) ([]string, error) {
 	)

 	if filename == "-" {
-		data, err = io.ReadAll(stdin)
+		data, err = io.ReadAll(os.Stdin)
 	} else {
 		data, err = textfile.Read(filename)
 	}
@@ -248,8 +221,8 @@ func readLines(filename string, stdin io.ReadCloser) ([]string, error) {
 // readFilenamesFromFileRaw reads a list of filenames from the given file,
 // or stdin if filename is "-". Each filename is terminated by a zero byte,
 // which is stripped off.
-func readFilenamesFromFileRaw(filename string, stdin io.ReadCloser) (names []string, err error) {
-	f := stdin
+func readFilenamesFromFileRaw(filename string) (names []string, err error) {
+	f := os.Stdin
 	if filename != "-" {
 		if f, err = os.Open(filename); err != nil {
 			return nil, err
@@ -298,15 +271,17 @@ func readFilenamesRaw(r io.Reader) (names []string, err error) {
 }

 // Check returns an error when an invalid combination of options was set.
-func (opts BackupOptions) Check(gopts global.Options, args []string) error {
-	if gopts.Password == "" && !gopts.InsecureNoPassword {
+func (opts BackupOptions) Check(gopts GlobalOptions, args []string) error {
+	if gopts.password == "" && !gopts.InsecureNoPassword {
 		if opts.Stdin {
 			return errors.Fatal("cannot read both password and data from stdin")
 		}

 		filesFrom := append(append(opts.FilesFrom, opts.FilesFromVerbatim...), opts.FilesFromRaw...)
-		if slices.Contains(filesFrom, "-") {
-			return errors.Fatal("unable to read password from stdin when data is to be read from stdin, use --password-file or $RESTIC_PASSWORD")
+		for _, filename := range filesFrom {
+			if filename == "-" {
+				return errors.Fatal("unable to read password from stdin when data is to be read from stdin, use --password-file or $RESTIC_PASSWORD")
+			}
 		}
 	}

@@ -331,7 +306,7 @@ func (opts BackupOptions) Check(gopts global.Options, args []string) error {

 // collectRejectByNameFuncs returns a list of all functions which may reject data
 // from being saved in a snapshot based on path only
-func collectRejectByNameFuncs(opts BackupOptions, repo *repository.Repository, warnf func(msg string, args ...any)) (fs []archiver.RejectByNameFunc, err error) {
+func collectRejectByNameFuncs(opts BackupOptions, repo *repository.Repository) (fs []archiver.RejectByNameFunc, err error) {
 	// exclude restic cache
 	if repo.Cache() != nil {
 		f, err := rejectResticCache(repo)
@@ -342,7 +317,7 @@ func collectRejectByNameFuncs(opts BackupOptions, repo *repository.Repository, w
 		fs = append(fs, f)
 	}

-	fsPatterns, err := opts.ExcludePatternOptions.CollectPatterns(warnf)
+	fsPatterns, err := opts.ExcludePatternOptions.CollectPatterns(Warnf)
 	if err != nil {
 		return nil, err
 	}
@@ -355,7 +330,7 @@ func collectRejectByNameFuncs(opts BackupOptions, repo *repository.Repository, w

 // collectRejectFuncs returns a list of all functions which may reject data
 // from being saved in a snapshot based on path and file info
-func collectRejectFuncs(opts BackupOptions, targets []string, fs fs.FS, warnf func(msg string, args ...any)) (funcs []archiver.RejectFunc, err error) {
+func collectRejectFuncs(opts BackupOptions, targets []string, fs fs.FS) (funcs []archiver.RejectFunc, err error) {
 	// allowed devices
 	if opts.ExcludeOtherFS && !opts.Stdin && !opts.StdinCommand {
 		f, err := archiver.RejectByDevice(targets, fs)
@@ -379,7 +354,10 @@ func collectRejectFuncs(opts BackupOptions, targets []string, fs fs.FS, warnf fu
 	}

 	if opts.ExcludeCloudFiles && !opts.Stdin && !opts.StdinCommand {
-		f, err := archiver.RejectCloudFiles(warnf)
+		if runtime.GOOS != "windows" {
+			return nil, errors.Fatalf("exclude-cloud-files is only supported on Windows")
+		}
+		f, err := archiver.RejectCloudFiles(Warnf)
 		if err != nil {
 			return nil, err
 		}
@@ -391,7 +369,7 @@ func collectRejectFuncs(opts BackupOptions, targets []string, fs fs.FS, warnf fu
 	}

 	for _, spec := range opts.ExcludeIfPresent {
-		f, err := archiver.RejectIfPresent(spec, warnf)
+		f, err := archiver.RejectIfPresent(spec, Warnf)
 		if err != nil {
 			return nil, err
 		}
@@ -403,13 +381,13 @@ func collectRejectFuncs(opts BackupOptions, targets []string, fs fs.FS, warnf fu
 }

 // collectTargets returns a list of target files/dirs from several sources.
-func collectTargets(opts BackupOptions, args []string, warnf func(msg string, args ...any), stdin io.ReadCloser) (targets []string, err error) {
+func collectTargets(opts BackupOptions, args []string) (targets []string, err error) {
 	if opts.Stdin || opts.StdinCommand {
 		return nil, nil
 	}

 	for _, file := range opts.FilesFrom {
-		fromfile, err := readLines(file, stdin)
+		fromfile, err := readLines(file)
 		if err != nil {
 			return nil, err
 		}
@@ -427,14 +405,14 @@ func collectTargets(opts BackupOptions, args []string, warnf func(msg string, ar
 				return nil, fmt.Errorf("pattern: %s: %w", line, err)
 			}
 			if len(expanded) == 0 {
-				warnf("pattern %q does not match any files, skipping\n", line)
+				Warnf("pattern %q does not match any files, skipping\n", line)
 			}
 			targets = append(targets, expanded...)
 		}
 	}

 	for _, file := range opts.FilesFromVerbatim {
-		fromfile, err := readLines(file, stdin)
+		fromfile, err := readLines(file)
 		if err != nil {
 			return nil, err
 		}
@@ -447,7 +425,7 @@ func collectTargets(opts BackupOptions, args []string, warnf func(msg string, ar
 	}

 	for _, file := range opts.FilesFromRaw {
-		fromfile, err := readFilenamesFromFileRaw(file, stdin)
+		fromfile, err := readFilenamesFromFileRaw(file)
 		if err != nil {
 			return nil, err
 		}
@@ -461,12 +439,17 @@ func collectTargets(opts BackupOptions, args []string, warnf func(msg string, ar
 		return nil, errors.Fatal("nothing to backup, please specify source files/dirs")
 	}

-	return filterExisting(targets, warnf)
+	targets, err = filterExisting(targets)
+	if err != nil {
+		return nil, err
+	}
+
+	return targets, nil
 }

 // parent returns the ID of the parent snapshot. If there is none, nil is
 // returned.
-func findParentSnapshot(ctx context.Context, repo restic.ListerLoaderUnpacked, opts BackupOptions, targets []string, timeStampLimit time.Time) (*data.Snapshot, error) {
+func findParentSnapshot(ctx context.Context, repo restic.ListerLoaderUnpacked, opts BackupOptions, targets []string, timeStampLimit time.Time) (*restic.Snapshot, error) {
 	if opts.Force {
 		return nil, nil
 	}
@@ -475,7 +458,7 @@ func findParentSnapshot(ctx context.Context, repo restic.ListerLoaderUnpacked, o
 	if snName == "" {
 		snName = "latest"
 	}
-	f := data.SnapshotFilter{TimestampLimit: timeStampLimit}
+	f := restic.SnapshotFilter{TimestampLimit: timeStampLimit}
 	if opts.GroupBy.Host {
 		f.Hosts = []string{opts.Host}
 	}
@@ -483,29 +466,23 @@ func findParentSnapshot(ctx context.Context, repo restic.ListerLoaderUnpacked, o
 		f.Paths = targets
 	}
 	if opts.GroupBy.Tag {
-		f.Tags = []data.TagList{opts.Tags.Flatten()}
+		f.Tags = []restic.TagList{opts.Tags.Flatten()}
 	}

 	sn, _, err := f.FindLatest(ctx, repo, repo, snName)
 	// Snapshot not found is ok if no explicit parent was set
-	if opts.Parent == "" && errors.Is(err, data.ErrNoSnapshotFound) {
+	if opts.Parent == "" && errors.Is(err, restic.ErrNoSnapshotFound) {
 		err = nil
 	}
 	return sn, err
 }

-func runBackup(ctx context.Context, opts BackupOptions, gopts global.Options, term ui.Terminal, args []string) error {
+func runBackup(ctx context.Context, opts BackupOptions, gopts GlobalOptions, term *termstatus.Terminal, args []string) error {
 	var vsscfg fs.VSSConfig
 	var err error

-	var printer backup.ProgressPrinter
-	if gopts.JSON {
-		printer = backup.NewJSONProgress(term, gopts.Verbosity)
-	} else {
-		printer = backup.NewTextProgress(term, gopts.Verbosity)
-	}
 	if runtime.GOOS == "windows" {
-		if vsscfg, err = fs.ParseVSSConfig(gopts.Extended); err != nil {
+		if vsscfg, err = fs.ParseVSSConfig(gopts.extended); err != nil {
 			return err
 		}
 	}
@@ -515,45 +492,47 @@ func runBackup(ctx context.Context, opts BackupOptions, gopts global.Options, te
 		return err
 	}

-	success := true
-	targets, err := collectTargets(opts, args, printer.E, term.InputRaw())
+	targets, err := collectTargets(opts, args)
 	if err != nil {
-		if errors.Is(err, ErrInvalidSourceData) {
-			success = false
-		} else {
-			return err
-		}
+		return err
 	}

 	timeStamp := time.Now()
 	backupStart := timeStamp
 	if opts.TimeStamp != "" {
-		timeStamp, err = time.ParseInLocation(global.TimeFormat, opts.TimeStamp, time.Local)
+		timeStamp, err = time.ParseInLocation(TimeFormat, opts.TimeStamp, time.Local)
 		if err != nil {
-			return errors.Fatalf("error in time option: %v", err)
+			return errors.Fatalf("error in time option: %v\n", err)
 		}
 	}

-	if gopts.Verbosity >= 2 && !gopts.JSON {
-		printer.P("open repository")
+	if gopts.verbosity >= 2 && !gopts.JSON {
+		Verbosef("open repository\n")
 	}

-	ctx, repo, unlock, err := openWithAppendLock(ctx, gopts, opts.DryRun, printer)
+	ctx, repo, unlock, err := openWithAppendLock(ctx, gopts, opts.DryRun)
 	if err != nil {
 		return err
 	}
 	defer unlock()

-	progressReporter := backup.NewProgress(printer, gopts.Quiet, gopts.JSON, term.CanUpdateStatus())
+	var progressPrinter backup.ProgressPrinter
+	if gopts.JSON {
+		progressPrinter = backup.NewJSONProgress(term, gopts.verbosity)
+	} else {
+		progressPrinter = backup.NewTextProgress(term, gopts.verbosity)
+	}
+	progressReporter := backup.NewProgress(progressPrinter,
+		calculateProgressInterval(!gopts.Quiet, gopts.JSON))
 	defer progressReporter.Done()

 	// rejectByNameFuncs collect functions that can reject items from the backup based on path only
-	rejectByNameFuncs, err := collectRejectByNameFuncs(opts, repo, printer.E)
+	rejectByNameFuncs, err := collectRejectByNameFuncs(opts, repo)
 	if err != nil {
 		return err
 	}

-	var parentSnapshot *data.Snapshot
+	var parentSnapshot *restic.Snapshot
 	if !opts.Stdin {
 		parentSnapshot, err = findParentSnapshot(ctx, repo, opts, targets, timeStamp)
 		if err != nil {
@@ -562,23 +541,24 @@ func runBackup(ctx context.Context, opts BackupOptions, gopts global.Options, te

 		if !gopts.JSON {
 			if parentSnapshot != nil {
-				printer.P("using parent snapshot %v\n", parentSnapshot.ID().Str())
+				progressPrinter.P("using parent snapshot %v\n", parentSnapshot.ID().Str())
 			} else {
-				printer.P("no parent snapshot found, will read all files\n")
+				progressPrinter.P("no parent snapshot found, will read all files\n")
 			}
 		}
 	}

 	if !gopts.JSON {
-		printer.V("load index files")
+		progressPrinter.V("load index files")
 	}

-	err = repo.LoadIndex(ctx, printer)
+	bar := newIndexTerminalProgress(gopts.Quiet, gopts.JSON, term)
+	err = repo.LoadIndex(ctx, bar)
 	if err != nil {
 		return err
 	}

-	targetFS := fs.NewLocal()
+	var targetFS fs.FS = fs.Local{}
 	if runtime.GOOS == "windows" && opts.UseFsSnapshot {
 		if err = fs.HasSufficientPrivilegesForVSS(); err != nil {
 			return err
@@ -588,9 +568,9 @@ func runBackup(ctx context.Context, opts BackupOptions, gopts global.Options, te
 			_ = progressReporter.Error(item, err)
 		}

-		messageHandler := func(msg string, args ...any) {
+		messageHandler := func(msg string, args ...interface{}) {
 			if !gopts.JSON {
-				printer.P(msg, args...)
+				progressPrinter.P(msg, args...)
 			}
 		}

@@ -601,12 +581,12 @@ func runBackup(ctx context.Context, opts BackupOptions, gopts global.Options, te

 	if opts.Stdin || opts.StdinCommand {
 		if !gopts.JSON {
-			printer.V("read data from stdin")
+			progressPrinter.V("read data from stdin")
 		}
 		filename := path.Join("/", opts.StdinFilename)
-		source := term.InputRaw()
+		var source io.ReadCloser = os.Stdin
 		if opts.StdinCommand {
-			source, err = fs.NewCommandReader(ctx, args, printer.E)
+			source, err = fs.NewCommandReader(ctx, args, globalOptions.stderr)
 			if err != nil {
 				return err
 			}
@@ -626,7 +606,7 @@ func runBackup(ctx context.Context, opts BackupOptions, gopts global.Options, te
 	}

 	// rejectFuncs collect functions that can reject items from the backup based on path and file info
-	rejectFuncs, err := collectRejectFuncs(opts, targets, targetFS, printer.E)
+	rejectFuncs, err := collectRejectFuncs(opts, targets, targetFS)
 	if err != nil {
 		return err
 	}
@@ -642,11 +622,11 @@ func runBackup(ctx context.Context, opts BackupOptions, gopts global.Options, te
 		sc := archiver.NewScanner(targetFS)
 		sc.SelectByName = selectByNameFilter
 		sc.Select = selectFilter
-		sc.Error = printer.ScannerError
+		sc.Error = progressPrinter.ScannerError
 		sc.Result = progressReporter.ReportTotal

 		if !gopts.JSON {
-			printer.V("start scan on %v", targets)
+			progressPrinter.V("start scan on %v", targets)
 		}
 		wg.Go(func() error { return sc.Scan(cancelCtx, targets) })
 	}
@@ -655,7 +635,7 @@ func runBackup(ctx context.Context, opts BackupOptions, gopts global.Options, te
 	arch.SelectByName = selectByNameFilter
 	arch.Select = selectFilter
 	arch.WithAtime = opts.WithAtime
-
+	success := true
 	arch.Error = func(item string, err error) error {
 		success = false
 		reterr := progressReporter.Error(item, err)
@@ -669,7 +649,6 @@ func runBackup(ctx context.Context, opts BackupOptions, gopts global.Options, te
 	arch.CompleteItem = progressReporter.CompleteItem
 	arch.StartFile = progressReporter.StartFile
 	arch.CompleteBlob = progressReporter.CompleteBlob
-	arch.ExcludedItem = progressReporter.ExcludedItem

 	if opts.IgnoreInode {
 		// --ignore-inode implies --ignore-ctime: on FUSE, the ctime is not
@@ -687,12 +666,12 @@ func runBackup(ctx context.Context, opts BackupOptions, gopts global.Options, te
 		Time:            timeStamp,
 		Hostname:        opts.Host,
 		ParentSnapshot:  parentSnapshot,
-		ProgramVersion:  "restic " + global.Version,
+		ProgramVersion:  "restic " + version,
 		SkipIfUnchanged: opts.SkipIfUnchanged,
 	}

 	if !gopts.JSON {
-		printer.V("start backup on %v", targets)
+		progressPrinter.V("start backup on %v", targets)
 	}
 	_, id, summary, err := arch.Snapshot(ctx, targets, snapshotOpts)

@@ -1,49 +1,35 @@
 package main

 import (
-	"bytes"
 	"context"
-	"encoding/json"
 	"fmt"
+	"io"
 	"os"
 	"path/filepath"
 	"runtime"
-	"slices"
-	"strings"
 	"testing"
 	"time"

-	"github.com/restic/restic/internal/data"
-	"github.com/restic/restic/internal/errors"
 	"github.com/restic/restic/internal/fs"
-	"github.com/restic/restic/internal/global"
-	"github.com/restic/restic/internal/repository"
 	"github.com/restic/restic/internal/restic"
 	rtest "github.com/restic/restic/internal/test"
-	"github.com/restic/restic/internal/ui/backup"
+	"github.com/restic/restic/internal/ui/termstatus"
 )

-func testRunBackupAssumeFailure(t testing.TB, dir string, target []string, opts BackupOptions, gopts global.Options) error {
-	return withTermStatus(t, gopts, func(ctx context.Context, gopts global.Options) error {
+func testRunBackupAssumeFailure(t testing.TB, dir string, target []string, opts BackupOptions, gopts GlobalOptions) error {
+	return withTermStatus(gopts, func(ctx context.Context, term *termstatus.Terminal) error {
 		t.Logf("backing up %v in %v", target, dir)
 		if dir != "" {
 			cleanup := rtest.Chdir(t, dir)
 			defer cleanup()
 		}

-		opts.GroupBy = data.SnapshotGroupByOptions{Host: true, Path: true}
-		return runBackup(ctx, opts, gopts, gopts.Term, target)
+		opts.GroupBy = restic.SnapshotGroupByOptions{Host: true, Path: true}
+		return runBackup(ctx, opts, gopts, term, target)
 	})
 }

-func testRunBackupOutput(t testing.TB, opts BackupOptions, gopts global.Options, target []string) ([]byte, error) {
-	buf, err := withCaptureStdout(t, gopts, func(ctx context.Context, gopts global.Options) error {
-		return runBackup(ctx, opts, gopts, gopts.Term, target)
-	})
-	return buf.Bytes(), err
-}
-
-func testRunBackup(t testing.TB, dir string, target []string, opts BackupOptions, gopts global.Options) {
+func testRunBackup(t testing.TB, dir string, target []string, opts BackupOptions, gopts GlobalOptions) {
 	err := testRunBackupAssumeFailure(t, dir, target, opts, gopts)
 	rtest.Assert(t, err == nil, "Error while backing up: %v", err)
 }
@@ -62,9 +48,6 @@ func testBackup(t *testing.T, useFsSnapshot bool) {
 	env, cleanup := withTestEnvironment(t)
 	defer cleanup()

-	// Use auto compression to ensure coverage in the integration tests
-	// All other tests use fastest compression for faster execution
-	env.gopts.Compression = repository.CompressionAuto
 	testSetupBackupData(t, env)
 	opts := BackupOptions{UseFsSnapshot: useFsSnapshot}

@@ -73,13 +56,13 @@ func testBackup(t *testing.T, useFsSnapshot bool) {
 	testListSnapshots(t, env.gopts, 1)

 	testRunCheck(t, env.gopts)
-	stat1 := dirStats(t, env.repo)
+	stat1 := dirStats(env.repo)

 	// second backup, implicit incremental
 	testRunBackup(t, "", []string{env.testdata}, opts, env.gopts)
 	snapshotIDs := testListSnapshots(t, env.gopts, 2)

-	stat2 := dirStats(t, env.repo)
+	stat2 := dirStats(env.repo)
 	if stat2.size > stat1.size+stat1.size/10 {
 		t.Error("repository size has grown by more than 10 percent")
 	}
@@ -91,7 +74,7 @@ func testBackup(t *testing.T, useFsSnapshot bool) {
 	testRunBackup(t, "", []string{env.testdata}, opts, env.gopts)
 	snapshotIDs = testListSnapshots(t, env.gopts, 3)

-	stat3 := dirStats(t, env.repo)
+	stat3 := dirStats(env.repo)
 	if stat3.size > stat1.size+stat1.size/10 {
 		t.Error("repository size has grown by more than 10 percent")
 	}
@@ -102,7 +85,7 @@ func testBackup(t *testing.T, useFsSnapshot bool) {
 		restoredir := filepath.Join(env.base, fmt.Sprintf("restore%d", i))
 		t.Logf("restoring snapshot %v to %v", snapshotID.Str(), restoredir)
 		testRunRestore(t, env.gopts, restoredir, snapshotID.String()+":"+toPathInSnapshot(filepath.Dir(env.testdata)))
-		diff := directoriesContentsDiff(t, env.testdata, filepath.Join(restoredir, "testdata"))
+		diff := directoriesContentsDiff(env.testdata, filepath.Join(restoredir, "testdata"))
 		rtest.Assert(t, diff == "", "directories are not equal: %v", diff)
 	}

@@ -155,7 +138,7 @@ func (f *vssDeleteOriginalFS) Lstat(name string) (*fs.ExtendedFileInfo, error) {
 		_, _ = f.FS.Lstat(name)
 		// nuke testdata
 		var err error
-		for range 3 {
+		for i := 0; i < 3; i++ {
 			// The CI sometimes runs into "The process cannot access the file because it is being used by another process" errors
 			// thus try a few times to remove the data
 			err = os.RemoveAll(f.testdata)
@@ -235,41 +218,41 @@ func TestDryRunBackup(t *testing.T) {
 	// dry run before first backup
 	testRunBackup(t, filepath.Dir(env.testdata), []string{"testdata"}, dryOpts, env.gopts)
 	snapshotIDs := testListSnapshots(t, env.gopts, 0)
-	packIDs := testRunList(t, env.gopts, "packs")
+	packIDs := testRunList(t, "packs", env.gopts)
 	rtest.Assert(t, len(packIDs) == 0,
 		"expected no data, got %v", snapshotIDs)
-	indexIDs := testRunList(t, env.gopts, "index")
+	indexIDs := testRunList(t, "index", env.gopts)
 	rtest.Assert(t, len(indexIDs) == 0,
 		"expected no index, got %v", snapshotIDs)

 	// first backup
 	testRunBackup(t, filepath.Dir(env.testdata), []string{"testdata"}, opts, env.gopts)
 	snapshotIDs = testListSnapshots(t, env.gopts, 1)
-	packIDs = testRunList(t, env.gopts, "packs")
-	indexIDs = testRunList(t, env.gopts, "index")
+	packIDs = testRunList(t, "packs", env.gopts)
+	indexIDs = testRunList(t, "index", env.gopts)

 	// dry run between backups
 	testRunBackup(t, filepath.Dir(env.testdata), []string{"testdata"}, dryOpts, env.gopts)
 	snapshotIDsAfter := testListSnapshots(t, env.gopts, 1)
 	rtest.Equals(t, snapshotIDs, snapshotIDsAfter)
-	dataIDsAfter := testRunList(t, env.gopts, "packs")
+	dataIDsAfter := testRunList(t, "packs", env.gopts)
 	rtest.Equals(t, packIDs, dataIDsAfter)
-	indexIDsAfter := testRunList(t, env.gopts, "index")
+	indexIDsAfter := testRunList(t, "index", env.gopts)
 	rtest.Equals(t, indexIDs, indexIDsAfter)

 	// second backup, implicit incremental
 	testRunBackup(t, filepath.Dir(env.testdata), []string{"testdata"}, opts, env.gopts)
 	snapshotIDs = testListSnapshots(t, env.gopts, 2)
-	packIDs = testRunList(t, env.gopts, "packs")
-	indexIDs = testRunList(t, env.gopts, "index")
+	packIDs = testRunList(t, "packs", env.gopts)
+	indexIDs = testRunList(t, "index", env.gopts)

 	// another dry run
 	testRunBackup(t, filepath.Dir(env.testdata), []string{"testdata"}, dryOpts, env.gopts)
 	snapshotIDsAfter = testListSnapshots(t, env.gopts, 2)
 	rtest.Equals(t, snapshotIDs, snapshotIDsAfter)
-	dataIDsAfter = testRunList(t, env.gopts, "packs")
+	dataIDsAfter = testRunList(t, "packs", env.gopts)
 	rtest.Equals(t, packIDs, dataIDsAfter)
-	indexIDsAfter = testRunList(t, env.gopts, "index")
+	indexIDsAfter = testRunList(t, "index", env.gopts)
 	rtest.Equals(t, indexIDs, indexIDsAfter)
 }

@@ -279,27 +262,22 @@ func TestBackupNonExistingFile(t *testing.T) {

 	testSetupBackupData(t, env)

-	p := filepath.Join(env.testdata, "0", "0", "9")
-	dirs := []string{
-		filepath.Join(p, "0"),
-		filepath.Join(p, "1"),
-		filepath.Join(p, "nonexisting"),
-		filepath.Join(p, "5"),
-	}
+	_ = withRestoreGlobalOptions(func() error {
+		globalOptions.stderr = io.Discard

-	opts := BackupOptions{}
+		p := filepath.Join(env.testdata, "0", "0", "9")
+		dirs := []string{
+			filepath.Join(p, "0"),
+			filepath.Join(p, "1"),
+			filepath.Join(p, "nonexisting"),
+			filepath.Join(p, "5"),
+		}

-	// mix of existing and non-existing files
-	err := testRunBackupAssumeFailure(t, "", dirs, opts, env.gopts)
-	rtest.Assert(t, err != nil, "expected error for non-existing file")
-	rtest.Assert(t, errors.Is(err, ErrInvalidSourceData), "expected ErrInvalidSourceData; got %v", err)
-	// only non-existing file
-	dirs = []string{
-		filepath.Join(p, "nonexisting"),
-	}
-	err = testRunBackupAssumeFailure(t, "", dirs, opts, env.gopts)
-	rtest.Assert(t, err != nil, "expected error for non-existing file")
-	rtest.Assert(t, errors.Is(err, ErrNoSourceData), "expected ErrNoSourceData; got %v", err)
+		opts := BackupOptions{}
+
+		testRunBackup(t, "", dirs, opts, env.gopts)
+		return nil
+	})
 }

 func TestBackupSelfHealing(t *testing.T) {
@@ -460,13 +438,13 @@ func TestIncrementalBackup(t *testing.T) {

 	testRunBackup(t, "", []string{datadir}, opts, env.gopts)
 	testRunCheck(t, env.gopts)
-	stat1 := dirStats(t, env.repo)
+	stat1 := dirStats(env.repo)

 	rtest.OK(t, appendRandomData(testfile, incrementalSecondWrite))

 	testRunBackup(t, "", []string{datadir}, opts, env.gopts)
 	testRunCheck(t, env.gopts)
-	stat2 := dirStats(t, env.repo)
+	stat2 := dirStats(env.repo)
 	if stat2.size-stat1.size > incrementalFirstWrite {
 		t.Errorf("repository size has grown by more than %d bytes", incrementalFirstWrite)
 	}
@@ -476,13 +454,14 @@ func TestIncrementalBackup(t *testing.T) {

 	testRunBackup(t, "", []string{datadir}, opts, env.gopts)
 	testRunCheck(t, env.gopts)
-	stat3 := dirStats(t, env.repo)
+	stat3 := dirStats(env.repo)
 	if stat3.size-stat2.size > incrementalFirstWrite {
 		t.Errorf("repository size has grown by more than %d bytes", incrementalFirstWrite)
 	}
 	t.Logf("repository grown by %d bytes", stat3.size-stat2.size)
 }

+// nolint: staticcheck // false positive nil pointer dereference check
 func TestBackupTags(t *testing.T) {
 	env, cleanup := withTestEnvironment(t)
 	defer cleanup()
@@ -502,7 +481,7 @@ func TestBackupTags(t *testing.T) {
 		"expected no tags, got %v", newest.Tags)
 	parent := newest

-	opts.Tags = data.TagLists{[]string{"NL"}}
+	opts.Tags = restic.TagLists{[]string{"NL"}}
 	testRunBackup(t, "", []string{env.testdata}, opts, env.gopts)
 	testRunCheck(t, env.gopts)
 	newest, _ = testRunSnapshots(t, env.gopts)
@@ -518,6 +497,7 @@ func TestBackupTags(t *testing.T) {
 		"expected parent to be %v, got %v", parent.ID, newest.Parent)
 }

+// nolint: staticcheck // false positive nil pointer dereference check
 func TestBackupProgramVersion(t *testing.T) {
 	env, cleanup := withTestEnvironment(t)
 	defer cleanup()
@@ -529,7 +509,7 @@ func TestBackupProgramVersion(t *testing.T) {
 	if newest == nil {
 		t.Fatal("expected a backup, got nil")
 	}
-	resticVersion := "restic " + global.Version
+	resticVersion := "restic " + version
 	rtest.Assert(t, newest.ProgramVersion == resticVersion,
 		"expected %v, got %v", resticVersion, newest.ProgramVersion)
 }
@@ -587,7 +567,7 @@ func TestHardLink(t *testing.T) {
 		restoredir := filepath.Join(env.base, fmt.Sprintf("restore%d", i))
 		t.Logf("restoring snapshot %v to %v", snapshotID.Str(), restoredir)
 		testRunRestore(t, env.gopts, restoredir, snapshotID.String())
-		diff := directoriesContentsDiff(t, env.testdata, filepath.Join(restoredir, "testdata"))
+		diff := directoriesContentsDiff(env.testdata, filepath.Join(restoredir, "testdata"))
 		rtest.Assert(t, diff == "", "directories are not equal %v", diff)

 		linkResults := createFileSetPerHardlink(filepath.Join(restoredir, "testdata"))
@@ -631,7 +611,13 @@ func linkEqual(source, dest []string) bool {
 	}

 	for i := range source {
-		found := slices.Contains(dest, source[i])
+		found := false
+		for j := range dest {
+			if source[i] == dest[j] {
+				found = true
+				break
+			}
+		}
 		if !found {
 			return false
 		}
@@ -717,7 +703,7 @@ func TestBackupEmptyPassword(t *testing.T) {
 	env, cleanup := withTestEnvironment(t)
 	defer cleanup()

-	env.gopts.Password = ""
+	env.gopts.password = ""
 	env.gopts.InsecureNoPassword = true

 	testSetupBackupData(t, env)
@@ -733,47 +719,10 @@ func TestBackupSkipIfUnchanged(t *testing.T) {
 	testSetupBackupData(t, env)
 	opts := BackupOptions{SkipIfUnchanged: true}

-	for range 3 {
+	for i := 0; i < 3; i++ {
 		testRunBackup(t, filepath.Dir(env.testdata), []string{"testdata"}, opts, env.gopts)
 		testListSnapshots(t, env.gopts, 1)
 	}

 	testRunCheck(t, env.gopts)
 }
-
-func TestBackupExcludeWithOutput(t *testing.T) {
-	env, cleanup := withTestEnvironment(t)
-	defer cleanup()
-
-	testSetupBackupData(t, env)
-	backupOptions := BackupOptions{}
-	backupOptions.Excludes = []string{"*.py"}
-
-	env.gopts.JSON = true
-	env.gopts.Verbosity = 2
-	output, err := testRunBackupOutput(t, backupOptions, env.gopts, []string{filepath.Join(env.testdata, "0", "for_cmd_ls")})
-	rtest.OK(t, err)
-
-	foundExclude := false
-	for line := range bytes.SplitSeq(output, []byte("\n")) {
-		if len(line) == 0 {
-			continue
-		}
-
-		type MessageType struct {
-			MessageType string `json:"message_type"` // any
-		}
-		var mType MessageType
-		rtest.OK(t, json.Unmarshal(line, &mType))
-		if mType.MessageType != "excluded_item" {
-			continue
-		}
-
-		var excludeLine backup.VerboseExclude
-		rtest.OK(t, json.Unmarshal(line, &excludeLine))
-		rtest.Assert(t, strings.Contains(excludeLine.Item, ".py"), "expected excluded pathname to be ending in .py, but contains %q",
-			excludeLine.Item)
-		foundExclude = true
-	}
-	rtest.Assert(t, foundExclude, "expected at least one excluded item, but found none")
-}
@@ -10,7 +10,6 @@ import (
 	"strings"
 	"testing"

-	"github.com/restic/restic/internal/errors"
 	rtest "github.com/restic/restic/internal/test"
 )

@@ -68,35 +67,10 @@ func TestCollectTargets(t *testing.T) {
 		FilesFromRaw:      []string{f3.Name()},
 	}

-	targets, err := collectTargets(opts, []string{filepath.Join(dir, "cmdline arg")}, t.Logf, nil)
+	targets, err := collectTargets(opts, []string{filepath.Join(dir, "cmdline arg")})
 	rtest.OK(t, err)
 	sort.Strings(targets)
 	rtest.Equals(t, expect, targets)
-
-	_, err = collectTargets(opts, []string{filepath.Join(dir, "cmdline arg"), filepath.Join(dir, "non-existing-file")}, t.Logf, nil)
-	rtest.Assert(t, err == ErrInvalidSourceData, "expected error when not all targets exist")
-}
-
-func TestFilterExistingUnreadable(t *testing.T) {
-	dir := rtest.TempDir(t)
-
-	existing := filepath.Join(dir, "existing")
-	rtest.OK(t, os.Mkdir(existing, 0755))
-
-	file := filepath.Join(dir, "file")
-	rtest.OK(t, os.WriteFile(file, []byte("x"), 0600))
-
-	// Regression test for #5667. A target whose Lstat fails with an error other
-	// than ErrNotExist must be skipped (ENOTDIR on unix, NUL byte everywhere).
-	for _, unreadable := range []string{filepath.Join(file, "child"), "invalid\x00path"} {
-		result, err := filterExisting([]string{unreadable}, t.Logf)
-		rtest.Assert(t, errors.Is(err, ErrNoSourceData), "input %q: expected ErrNoSourceData; got %v", unreadable, err)
-		rtest.Assert(t, len(result) == 0, "input %q: expected no targets; got %v", unreadable, result)
-
-		result, err = filterExisting([]string{existing, unreadable}, t.Logf)
-		rtest.Assert(t, errors.Is(err, ErrInvalidSourceData), "input %q: expected ErrInvalidSourceData; got %v", unreadable, err)
-		rtest.Equals(t, []string{existing}, result)
-	}
 }

 func TestReadFilenamesRaw(t *testing.T) {
@@ -10,15 +10,13 @@ import (

 	"github.com/restic/restic/internal/backend/cache"
 	"github.com/restic/restic/internal/errors"
-	"github.com/restic/restic/internal/global"
 	"github.com/restic/restic/internal/ui"
-	"github.com/restic/restic/internal/ui/progress"
 	"github.com/restic/restic/internal/ui/table"
 	"github.com/spf13/cobra"
 	"github.com/spf13/pflag"
 )

-func newCacheCommand(globalOptions *global.Options) *cobra.Command {
+func newCacheCommand() *cobra.Command {
 	var opts CacheOptions

 	cmd := &cobra.Command{
@@ -36,7 +34,7 @@ Exit status is 1 if there was any error.
 		GroupID:           cmdGroupDefault,
 		DisableAutoGenTag: true,
 		RunE: func(_ *cobra.Command, args []string) error {
-			return runCache(opts, *globalOptions, args, globalOptions.Term)
+			return runCache(opts, globalOptions, args)
 		},
 	}

@@ -57,9 +55,7 @@ func (opts *CacheOptions) AddFlags(f *pflag.FlagSet) {
 	f.BoolVar(&opts.NoSize, "no-size", false, "do not output the size of the cache directories")
 }

-func runCache(opts CacheOptions, gopts global.Options, args []string, term ui.Terminal) error {
-	printer := progress.NewTerminalPrinter(false, gopts.Verbosity, term)
-
+func runCache(opts CacheOptions, gopts GlobalOptions, args []string) error {
 	if len(args) > 0 {
 		return errors.Fatal("the cache command expects no arguments, only options - please see `restic help cache` for usage and flags")
 	}
@@ -87,17 +83,17 @@ func runCache(opts CacheOptions, gopts global.Options, args []string, term ui.Te
 		}

 		if len(oldDirs) == 0 {
-			printer.P("no old cache dirs found")
+			Verbosef("no old cache dirs found\n")
 			return nil
 		}

-		printer.P("remove %d old cache directories", len(oldDirs))
+		Verbosef("remove %d old cache directories\n", len(oldDirs))

 		for _, item := range oldDirs {
 			dir := filepath.Join(cachedir, item.Name())
 			err = os.RemoveAll(dir)
 			if err != nil {
-				printer.E("unable to remove %v: %v", dir, err)
+				Warnf("unable to remove %v: %v\n", dir, err)
 			}
 		}

@@ -127,7 +123,7 @@ func runCache(opts CacheOptions, gopts global.Options, args []string, term ui.Te
 	}

 	if len(dirs) == 0 {
-		printer.S("no cache dirs found, basedir is %v", cachedir)
+		Printf("no cache dirs found, basedir is %v\n", cachedir)
 		return nil
 	}

@@ -163,8 +159,8 @@ func runCache(opts CacheOptions, gopts global.Options, args []string, term ui.Te
 		})
 	}

-	_ = tab.Write(gopts.Term.OutputWriter())
-	printer.S("%d cache dirs in %s", len(dirs), cachedir)
+	_ = tab.Write(globalOptions.stdout)
+	Printf("%d cache dirs in %s\n", len(dirs), cachedir)

 	return nil
 }
@@ -3,23 +3,18 @@ package main
 import (
 	"context"
 	"encoding/json"
-	"slices"
 	"strings"

 	"github.com/spf13/cobra"

-	"github.com/restic/restic/internal/data"
 	"github.com/restic/restic/internal/errors"
-	"github.com/restic/restic/internal/global"
 	"github.com/restic/restic/internal/repository"
 	"github.com/restic/restic/internal/restic"
-	"github.com/restic/restic/internal/ui"
-	"github.com/restic/restic/internal/ui/progress"
 )

 var catAllowedCmds = []string{"config", "index", "snapshot", "key", "masterkey", "lock", "pack", "blob", "tree"}

-func newCatCommand(globalOptions *global.Options) *cobra.Command {
+func newCatCommand() *cobra.Command {
 	cmd := &cobra.Command{
 		Use:   "cat [flags] [masterkey|config|pack ID|blob ID|snapshot ID|index ID|key ID|lock ID|tree snapshot:subfolder]",
 		Short: "Print internal objects to stdout",
@@ -38,7 +33,7 @@ Exit status is 12 if the password is incorrect.
 		GroupID:           cmdGroupDefault,
 		DisableAutoGenTag: true,
 		RunE: func(cmd *cobra.Command, args []string) error {
-			return runCat(cmd.Context(), *globalOptions, args, globalOptions.Term)
+			return runCat(cmd.Context(), globalOptions, args)
 		},
 		ValidArgs: catAllowedCmds,
 	}
@@ -50,7 +45,13 @@ func validateCatArgs(args []string) error {
 		return errors.Fatal("type not specified")
 	}

-	validType := slices.Contains(catAllowedCmds, args[0])
+	validType := false
+	for _, v := range catAllowedCmds {
+		if v == args[0] {
+			validType = true
+			break
+		}
+	}
 	if !validType {
 		return errors.Fatalf("invalid type %q, must be one of [%s]", args[0], strings.Join(catAllowedCmds, "|"))
 	}
@@ -62,14 +63,12 @@ func validateCatArgs(args []string) error {
 	return nil
 }

-func runCat(ctx context.Context, gopts global.Options, args []string, term ui.Terminal) error {
-	printer := progress.NewTerminalPrinter(gopts.JSON, gopts.Verbosity, term)
-
+func runCat(ctx context.Context, gopts GlobalOptions, args []string) error {
 	if err := validateCatArgs(args); err != nil {
 		return err
 	}

-	ctx, repo, unlock, err := openWithReadLock(ctx, gopts, gopts.NoLock, printer)
+	ctx, repo, unlock, err := openWithReadLock(ctx, gopts, gopts.NoLock)
 	if err != nil {
 		return err
 	}
@@ -81,7 +80,7 @@ func runCat(ctx context.Context, gopts global.Options, args []string, term ui.Te
 	if tpe != "masterkey" && tpe != "config" && tpe != "snapshot" && tpe != "tree" {
 		id, err = restic.ParseID(args[1])
 		if err != nil {
-			return errors.Fatalf("unable to parse ID: %v", err)
+			return errors.Fatalf("unable to parse ID: %v\n", err)
 		}
 	}

@@ -92,7 +91,7 @@ func runCat(ctx context.Context, gopts global.Options, args []string, term ui.Te
 			return err
 		}

-		printer.S(string(buf))
+		Println(string(buf))
 		return nil
 	case "index":
 		buf, err := repo.LoadUnpacked(ctx, restic.IndexFile, id)
@@ -100,12 +99,12 @@ func runCat(ctx context.Context, gopts global.Options, args []string, term ui.Te
 			return err
 		}

-		printer.S(string(buf))
+		Println(string(buf))
 		return nil
 	case "snapshot":
-		sn, _, err := data.FindSnapshot(ctx, repo, repo, args[1])
+		sn, _, err := restic.FindSnapshot(ctx, repo, repo, args[1])
 		if err != nil {
-			return errors.Fatalf("could not find snapshot: %v", err)
+			return errors.Fatalf("could not find snapshot: %v\n", err)
 		}

 		buf, err := json.MarshalIndent(sn, "", "  ")
@@ -113,7 +112,7 @@ func runCat(ctx context.Context, gopts global.Options, args []string, term ui.Te
 			return err
 		}

-		printer.S(string(buf))
+		Println(string(buf))
 		return nil
 	case "key":
 		key, err := repository.LoadKey(ctx, repo, id)
@@ -126,7 +125,7 @@ func runCat(ctx context.Context, gopts global.Options, args []string, term ui.Te
 			return err
 		}

-		printer.S(string(buf))
+		Println(string(buf))
 		return nil
 	case "masterkey":
 		buf, err := json.MarshalIndent(repo.Key(), "", "  ")
@@ -134,10 +133,10 @@ func runCat(ctx context.Context, gopts global.Options, args []string, term ui.Te
 			return err
 		}

-		printer.S(string(buf))
+		Println(string(buf))
 		return nil
 	case "lock":
-		lock, err := repository.LoadLock(ctx, repo, id)
+		lock, err := restic.LoadLock(ctx, repo, id)
 		if err != nil {
 			return err
 		}
@@ -147,7 +146,7 @@ func runCat(ctx context.Context, gopts global.Options, args []string, term ui.Te
 			return err
 		}

-		printer.S(string(buf))
+		Println(string(buf))
 		return nil

 	case "pack":
@@ -159,55 +158,57 @@ func runCat(ctx context.Context, gopts global.Options, args []string, term ui.Te

 		hash := restic.Hash(buf)
 		if !hash.Equal(id) {
-			printer.E("Warning: hash of data does not match ID, want\n  %v\ngot:\n  %v", id.String(), hash.String())
+			Warnf("Warning: hash of data does not match ID, want\n  %v\ngot:\n  %v\n", id.String(), hash.String())
 		}

-		_, err = term.OutputRaw().Write(buf)
+		_, err = globalOptions.stdout.Write(buf)
 		return err

 	case "blob":
-		err = repo.LoadIndex(ctx, printer)
+		bar := newIndexProgress(gopts.Quiet, gopts.JSON)
+		err = repo.LoadIndex(ctx, bar)
 		if err != nil {
 			return err
 		}

 		for _, t := range []restic.BlobType{restic.DataBlob, restic.TreeBlob} {
-			if _, ok := repo.LookupBlobSize(restic.BlobHandle{Type: t, ID: id}); !ok {
+			if _, ok := repo.LookupBlobSize(t, id); !ok {
 				continue
 			}

-			buf, err := repo.LoadBlob(ctx, restic.BlobHandle{Type: t, ID: id}, nil)
+			buf, err := repo.LoadBlob(ctx, t, id, nil)
 			if err != nil {
 				return err
 			}

-			_, err = term.OutputRaw().Write(buf)
+			_, err = globalOptions.stdout.Write(buf)
 			return err
 		}

 		return errors.Fatal("blob not found")

 	case "tree":
-		sn, subfolder, err := data.FindSnapshot(ctx, repo, repo, args[1])
+		sn, subfolder, err := restic.FindSnapshot(ctx, repo, repo, args[1])
 		if err != nil {
-			return errors.Fatalf("could not find snapshot: %v", err)
+			return errors.Fatalf("could not find snapshot: %v\n", err)
 		}

-		err = repo.LoadIndex(ctx, printer)
+		bar := newIndexProgress(gopts.Quiet, gopts.JSON)
+		err = repo.LoadIndex(ctx, bar)
 		if err != nil {
 			return err
 		}

-		sn.Tree, err = data.FindTreeDirectory(ctx, repo, sn.Tree, subfolder)
+		sn.Tree, err = restic.FindTreeDirectory(ctx, repo, sn.Tree, subfolder)
 		if err != nil {
 			return err
 		}

-		buf, err := repo.LoadBlob(ctx, restic.BlobHandle{Type: restic.TreeBlob, ID: *sn.Tree}, nil)
+		buf, err := repo.LoadBlob(ctx, restic.TreeBlob, *sn.Tree, nil)
 		if err != nil {
 			return err
 		}
-		_, err = term.OutputRaw().Write(buf)
+		_, err = globalOptions.stdout.Write(buf)
 		return err

 	default:
@@ -15,30 +15,25 @@ import (

 	"github.com/restic/restic/internal/backend/cache"
 	"github.com/restic/restic/internal/checker"
-	"github.com/restic/restic/internal/data"
 	"github.com/restic/restic/internal/errors"
-	"github.com/restic/restic/internal/global"
 	"github.com/restic/restic/internal/repository"
 	"github.com/restic/restic/internal/restic"
 	"github.com/restic/restic/internal/ui"
 	"github.com/restic/restic/internal/ui/progress"
+	"github.com/restic/restic/internal/ui/termstatus"
 )

-func newCheckCommand(globalOptions *global.Options) *cobra.Command {
+func newCheckCommand() *cobra.Command {
 	var opts CheckOptions
 	cmd := &cobra.Command{
 		Use:   "check [flags]",
 		Short: "Check the repository for errors",
 		Long: `
 The "check" command tests the repository for errors and reports any errors it
-finds.
+finds. It can also be used to read all data and therefore simulate a restore.

-By default, check verifies the structural consistency and integrity of
-snapshots, trees and pack files. To also verify the integrity of the actual
-backed-up data, use the --read-data or --read-data-subset flags.
-
-By default, check creates a new temporary cache directory to verify data.
-To reuse the existing cache, use the --with-cache flag.
+By default, the "check" command will always load all data directly from the
+repository and not use a local cache.

 EXIT STATUS
 ===========
@@ -52,13 +47,14 @@ Exit status is 12 if the password is incorrect.
 		GroupID:           cmdGroupDefault,
 		DisableAutoGenTag: true,
 		RunE: func(cmd *cobra.Command, args []string) error {
-			finalizeSnapshotFilter(&opts.SnapshotFilter)
-			summary, err := runCheck(cmd.Context(), opts, *globalOptions, args, globalOptions.Term)
+			term, cancel := setupTermstatus()
+			defer cancel()
+			summary, err := runCheck(cmd.Context(), opts, globalOptions, args, term)
 			if globalOptions.JSON {
 				if err != nil && summary.NumErrors == 0 {
 					summary.NumErrors = 1
 				}
-				globalOptions.Term.Print(ui.ToJSONString(summary))
+				term.Print(ui.ToJSONString(summary))
 			}
 			return err
 		},
@@ -77,7 +73,6 @@ type CheckOptions struct {
 	ReadDataSubset string
 	CheckUnused    bool
 	WithCache      bool
-	data.SnapshotFilter
 }

 func (opts *CheckOptions) AddFlags(f *pflag.FlagSet) {
@@ -91,7 +86,6 @@ func (opts *CheckOptions) AddFlags(f *pflag.FlagSet) {
 		panic(err)
 	}
 	f.BoolVar(&opts.WithCache, "with-cache", false, "use existing cache, only read uncached data from repository")
-	initMultiSnapshotFilter(f, &opts.SnapshotFilter, true)
 }

 func checkFlags(opts CheckOptions) error {
@@ -179,7 +173,7 @@ func parsePercentage(s string) (float64, error) {
 //   - if the user explicitly requested --no-cache, we don't use any cache
 //   - if the user provides --cache-dir, we use a cache in a temporary sub-directory of the specified directory and the sub-directory is deleted after the check
 //   - by default, we use a cache in a temporary directory that is deleted after the check
-func prepareCheckCache(opts CheckOptions, gopts *global.Options, printer restic.Printer) (cleanup func()) {
+func prepareCheckCache(opts CheckOptions, gopts *GlobalOptions, printer progress.Printer) (cleanup func()) {
 	cleanup = func() {}
 	if opts.WithCache {
 		// use the default cache, no setup needed
@@ -200,7 +194,7 @@ func prepareCheckCache(opts CheckOptions, gopts *global.Options, printer restic.
 		// use a cache in a temporary directory
 		err := os.MkdirAll(cachedir, 0755)
 		if err != nil {
-			printer.E("unable to create cache directory %s, disabling cache: %v", cachedir, err)
+			Warnf("unable to create cache directory %s, disabling cache: %v\n", cachedir, err)
 			gopts.NoCache = true
 			return cleanup
 		}
@@ -226,12 +220,15 @@ func prepareCheckCache(opts CheckOptions, gopts *global.Options, printer restic.
 	return cleanup
 }

-func runCheck(ctx context.Context, opts CheckOptions, gopts global.Options, args []string, term ui.Terminal) (checkSummary, error) {
+func runCheck(ctx context.Context, opts CheckOptions, gopts GlobalOptions, args []string, term *termstatus.Terminal) (checkSummary, error) {
 	summary := checkSummary{MessageType: "summary"}
+	if len(args) != 0 {
+		return summary, errors.Fatal("the check command expects no arguments, only options - please see `restic help check` for usage and flags")
+	}

-	var printer restic.Printer
+	var printer progress.Printer
 	if !gopts.JSON {
-		printer = progress.NewTerminalPrinter(gopts.JSON, gopts.Verbosity, term)
+		printer = newTerminalProgressPrinter(gopts.verbosity, term)
 	} else {
 		printer = newJSONErrorPrinter(term)
 	}
@@ -242,38 +239,32 @@ func runCheck(ctx context.Context, opts CheckOptions, gopts global.Options, args
 	if !gopts.NoLock {
 		printer.P("create exclusive lock for repository\n")
 	}
-	ctx, repo, unlock, err := openWithExclusiveLock(ctx, gopts, gopts.NoLock, printer)
+	ctx, repo, unlock, err := openWithExclusiveLock(ctx, gopts, gopts.NoLock)
 	if err != nil {
 		return summary, err
 	}
 	defer unlock()

 	chkr := checker.New(repo, opts.CheckUnused)
-	err = chkr.LoadSnapshots(ctx, &opts.SnapshotFilter, args)
+	err = chkr.LoadSnapshots(ctx)
 	if err != nil {
 		return summary, err
 	}

 	printer.P("load indexes\n")
-	hints, errs := chkr.LoadIndex(ctx, printer)
+	bar := newIndexTerminalProgress(gopts.Quiet, gopts.JSON, term)
+	hints, errs := chkr.LoadIndex(ctx, bar)
 	if ctx.Err() != nil {
 		return summary, ctx.Err()
 	}

 	errorsFound := false
-	salvagePacks := restic.NewIDSet()
-
 	for _, hint := range hints {
-		switch hint := hint.(type) {
-		case *repository.ErrIncompletePackEntry:
-			printer.E("%s", hint.Error())
-			salvagePacks.Insert(hint.PackID)
-			errorsFound = true
-			summary.NumErrors++
-		case *repository.ErrDuplicatePacks:
+		switch hint.(type) {
+		case *checker.ErrDuplicatePacks:
 			printer.S("%s", hint.Error())
 			summary.HintRepairIndex = true
-		case *repository.ErrMixedPack:
+		case *checker.ErrMixedPack:
 			printer.S("%s", hint.Error())
 			summary.HintPrune = true
 		default:
@@ -302,18 +293,19 @@ func runCheck(ctx context.Context, opts CheckOptions, gopts global.Options, args

 	orphanedPacks := 0
 	errChan := make(chan error)
+	salvagePacks := restic.NewIDSet()

 	printer.P("check all packs\n")
 	go chkr.Packs(ctx, errChan)

 	for err := range errChan {
-		var packErr *repository.ErrPackMetadata
+		var packErr *checker.PackError
 		if errors.As(err, &packErr) {
 			if packErr.Orphaned {
 				orphanedPacks++
 				printer.V("%v\n", err)
 			} else {
-				if packErr.Truncated || packErr.Missing {
+				if packErr.Truncated {
 					salvagePacks.Insert(packErr.ID)
 				}
 				errorsFound = true
@@ -339,28 +331,25 @@ func runCheck(ctx context.Context, opts CheckOptions, gopts global.Options, args

 	printer.P("check snapshots, trees and blobs\n")
 	errChan = make(chan error)
-	var brokenSnapshots []string
 	var wg sync.WaitGroup

-	wg.Go(func() {
+	wg.Add(1)
+	go func() {
+		defer wg.Done()
 		bar := printer.NewCounter("snapshots")
 		defer bar.Done()
 		chkr.Structure(ctx, bar, errChan)
-	})
+	}()

 	for err := range errChan {
 		errorsFound = true
-		switch e := err.(type) {
-		case *checker.TreeError:
+		if e, ok := err.(*checker.TreeError); ok {
 			printer.E("error for tree %v:\n", e.ID.Str())
 			for _, treeErr := range e.Errors {
 				summary.NumErrors++
 				printer.E("  %v\n", treeErr)
 			}
-		case *checker.SnapshotError:
-			printer.E("snapshot error %v: %v", e.ID, e.Message)
-			brokenSnapshots = append(brokenSnapshots, e.ID)
-		default:
+		} else {
 			summary.NumErrors++
 			printer.E("error: %v\n", err)
 		}
@@ -374,7 +363,6 @@ func runCheck(ctx context.Context, opts CheckOptions, gopts global.Options, args
 		return summary, ctx.Err()
 	}

-	// the following block only used for tests
 	if opts.CheckUnused {
 		unused, err := chkr.UnusedBlobs(ctx)
 		if err != nil {
@@ -386,15 +374,12 @@ func runCheck(ctx context.Context, opts CheckOptions, gopts global.Options, args
 		}
 	}

-	readDataFilter, err := buildPacksFilter(opts, printer, chkr.IsFiltered())
-	if err != nil {
-		return summary, err
-	}
-
-	if readDataFilter != nil {
+	doReadData := func(packs map[restic.ID]int64) {
+		p := printer.NewCounter("packs")
+		p.SetMax(uint64(len(packs)))
 		errChan := make(chan error)

-		go chkr.ReadPacks(ctx, readDataFilter, printer, errChan)
+		go chkr.ReadPacks(ctx, packs, p, errChan)

 		for err := range errChan {
 			errorsFound = true
@@ -404,6 +389,49 @@ func runCheck(ctx context.Context, opts CheckOptions, gopts global.Options, args
 				salvagePacks.Insert(err.PackID)
 			}
 		}
+		p.Done()
+	}
+
+	switch {
+	case opts.ReadData:
+		printer.P("read all data\n")
+		doReadData(selectPacksByBucket(chkr.GetPacks(), 1, 1))
+	case opts.ReadDataSubset != "":
+		var packs map[restic.ID]int64
+		dataSubset, err := stringToIntSlice(opts.ReadDataSubset)
+		if err == nil {
+			bucket := dataSubset[0]
+			totalBuckets := dataSubset[1]
+			packs = selectPacksByBucket(chkr.GetPacks(), bucket, totalBuckets)
+			packCount := uint64(len(packs))
+			printer.P("read group #%d of %d data packs (out of total %d packs in %d groups)\n", bucket, packCount, chkr.CountPacks(), totalBuckets)
+		} else if strings.HasSuffix(opts.ReadDataSubset, "%") {
+			percentage, err := parsePercentage(opts.ReadDataSubset)
+			if err == nil {
+				packs = selectRandomPacksByPercentage(chkr.GetPacks(), percentage)
+				printer.P("read %.1f%% of data packs\n", percentage)
+			}
+		} else {
+			repoSize := int64(0)
+			allPacks := chkr.GetPacks()
+			for _, size := range allPacks {
+				repoSize += size
+			}
+			if repoSize == 0 {
+				return summary, errors.Fatal("Cannot read from a repository having size 0")
+			}
+			subsetSize, _ := ui.ParseBytes(opts.ReadDataSubset)
+			if subsetSize > repoSize {
+				subsetSize = repoSize
+			}
+			packs = selectRandomPacksByFileSize(chkr.GetPacks(), subsetSize, repoSize)
+			percentage := float64(subsetSize) / float64(repoSize) * 100.0
+			printer.P("read %d bytes (%.1f%%) of data packs\n", subsetSize, percentage)
+		}
+		if packs == nil {
+			return summary, errors.Fatal("internal error: failed to select packs to check")
+		}
+		doReadData(packs)
 	}

 	if len(salvagePacks) > 0 {
@@ -415,18 +443,12 @@ func runCheck(ctx context.Context, opts CheckOptions, gopts global.Options, args
 		printer.E("Damaged pack files can be caused by backend problems, hardware problems or bugs in restic. Please open an issue at https://github.com/restic/restic/issues/new/choose for further troubleshooting!\n")
 	}

-	if len(brokenSnapshots) > 0 {
-		printer.E("\nThe repository contains damaged snapshot files. These damaged files must be removed to repair the repository. This can be done using the following commands. Please read the troubleshooting guide at https://restic.readthedocs.io/en/stable/077_troubleshooting.html first.\n\n")
-		printer.E("restic repair snapshots --forget %s\n\n", strings.Join(brokenSnapshots, " "))
-		printer.E("Damaged snapshot files can be caused by backend problems, hardware problems or bugs in restic. Please open an issue at https://github.com/restic/restic/issues/new/choose for further troubleshooting!\n")
-	}
-
 	if ctx.Err() != nil {
 		return summary, ctx.Err()
 	}

 	if errorsFound {
-		if len(salvagePacks) == 0 && len(brokenSnapshots) == 0 {
+		if len(salvagePacks) == 0 {
 			printer.E("\nThe repository is damaged and must be repaired. Please follow the troubleshooting guide at https://restic.readthedocs.io/en/stable/077_troubleshooting.html .\n\n")
 		}
 		return summary, errors.Fatal("repository contains errors")
@@ -435,64 +457,6 @@ func runCheck(ctx context.Context, opts CheckOptions, gopts global.Options, args
 	return summary, nil
 }

-func buildPacksFilter(opts CheckOptions, printer restic.Printer,
-	filteredStatus bool) (func(packs map[restic.ID]int64) map[restic.ID]int64, error) {
-	typeData := ""
-	if filteredStatus {
-		typeData = "filtered "
-	}
-	switch {
-	case opts.ReadData:
-		return func(packs map[restic.ID]int64) map[restic.ID]int64 {
-			printer.P("read all %sdata", typeData)
-			return packs
-		}, nil
-	case opts.ReadDataSubset != "":
-		dataSubset, err := stringToIntSlice(opts.ReadDataSubset)
-		if err == nil {
-			bucket := dataSubset[0]
-			totalBuckets := dataSubset[1]
-			return func(packs map[restic.ID]int64) map[restic.ID]int64 {
-				packCount := uint64(len(packs))
-				packs = selectPacksByBucket(packs, bucket, totalBuckets)
-				printer.P("read group #%d of %d %sdata packs (out of total %d packs in %d groups", bucket, len(packs), typeData, packCount, totalBuckets)
-				return packs
-			}, nil
-		} else if strings.HasSuffix(opts.ReadDataSubset, "%") {
-			percentage, err := parsePercentage(opts.ReadDataSubset)
-			if err != nil {
-				return nil, err
-			}
-			return func(packs map[restic.ID]int64) map[restic.ID]int64 {
-				printer.P("read %.1f%% of %spackfiles", percentage, typeData)
-				return selectRandomPacksByPercentage(packs, percentage)
-			}, nil
-		}
-
-		repoSize := int64(0)
-		return func(packs map[restic.ID]int64) map[restic.ID]int64 {
-			for _, size := range packs {
-				repoSize += size
-			}
-			subsetSize, _ := ui.ParseBytes(opts.ReadDataSubset)
-			if subsetSize > repoSize {
-				subsetSize = repoSize
-			}
-			if repoSize > 0 {
-				packs = selectRandomPacksByFileSize(packs, subsetSize, repoSize)
-			}
-			percentage := float64(subsetSize) / float64(repoSize) * 100.0
-			if repoSize == 0 {
-				percentage = 100
-			}
-			printer.P("read %d bytes (%.1f%%) of %sdata packs\n", subsetSize, percentage, typeData)
-			return packs
-		}, nil
-	}
-
-	return nil, nil
-}
-
 // selectPacksByBucket selects subsets of packs by ranges of buckets.
 func selectPacksByBucket(allPacks map[restic.ID]int64, bucket, totalBuckets uint) map[restic.ID]int64 {
 	packs := make(map[restic.ID]int64)
@@ -560,23 +524,18 @@ func newJSONErrorPrinter(term ui.Terminal) *jsonErrorPrinter {
 	}
 }

-func (*jsonErrorPrinter) NewCounter(_ string) restic.Counter {
-	return restic.NoopCounter
+func (*jsonErrorPrinter) NewCounter(_ string) *progress.Counter {
+	return nil
 }

-func (*jsonErrorPrinter) NewCounterTerminalOnly(_ string) restic.Counter {
-	return restic.NoopCounter
-}
-
-func (p *jsonErrorPrinter) E(msg string, args ...any) {
+func (p *jsonErrorPrinter) E(msg string, args ...interface{}) {
 	status := checkError{
 		MessageType: "error",
 		Message:     fmt.Sprintf(msg, args...),
 	}
 	p.term.Error(ui.ToJSONString(status))
 }
-func (*jsonErrorPrinter) S(_ string, _ ...any)  {}
-func (*jsonErrorPrinter) P(_ string, _ ...any)  {}
-func (*jsonErrorPrinter) PT(_ string, _ ...any) {}
-func (*jsonErrorPrinter) V(_ string, _ ...any)  {}
-func (*jsonErrorPrinter) VV(_ string, _ ...any) {}
+func (*jsonErrorPrinter) S(_ string, _ ...interface{})  {}
+func (*jsonErrorPrinter) P(_ string, _ ...interface{})  {}
+func (*jsonErrorPrinter) V(_ string, _ ...interface{})  {}
+func (*jsonErrorPrinter) VV(_ string, _ ...interface{}) {}
@@ -1,102 +1,39 @@
 package main

 import (
+	"bytes"
 	"context"
-	"strings"
 	"testing"

-	"github.com/restic/restic/internal/global"
 	rtest "github.com/restic/restic/internal/test"
+	"github.com/restic/restic/internal/ui/termstatus"
 )

-func testRunCheck(t testing.TB, gopts global.Options) {
+func testRunCheck(t testing.TB, gopts GlobalOptions) {
 	t.Helper()
-	stdout, stderr, err := testRunCheckOutput(t, gopts, true)
+	output, err := testRunCheckOutput(gopts, true)
 	if err != nil {
-		t.Error(stdout)
-		t.Error(stderr)
+		t.Error(output)
 		t.Fatalf("unexpected error: %+v", err)
 	}
 }

-func testRunCheckMustFail(t testing.TB, gopts global.Options) {
+func testRunCheckMustFail(t testing.TB, gopts GlobalOptions) {
 	t.Helper()
-	_, _, err := testRunCheckOutput(t, gopts, false)
+	_, err := testRunCheckOutput(gopts, false)
 	rtest.Assert(t, err != nil, "expected non nil error after check of damaged repository")
 }

-func testRunCheckOutput(t testing.TB, gopts global.Options, checkUnused bool) (string, string, error) {
-	stdout, stderr, err := withCaptureStdoutStderr(t, gopts, func(ctx context.Context, gopts global.Options) error {
+func testRunCheckOutput(gopts GlobalOptions, checkUnused bool) (string, error) {
+	buf := bytes.NewBuffer(nil)
+	gopts.stdout = buf
+	err := withTermStatus(gopts, func(ctx context.Context, term *termstatus.Terminal) error {
 		opts := CheckOptions{
 			ReadData:    true,
 			CheckUnused: checkUnused,
 		}
-		_, err := runCheck(ctx, opts, gopts, nil, gopts.Term)
-		return err
-	})
-	return stdout.String(), stderr.String(), err
-}
-
-func testRunCheckOutputWithOpts(t testing.TB, gopts global.Options, opts CheckOptions, args []string) (string, error) {
-	buf, err := withCaptureStdout(t, gopts, func(ctx context.Context, gopts global.Options) error {
-		gopts.Verbosity = 2
-		_, err := runCheck(ctx, opts, gopts, args, gopts.Term)
+		_, err := runCheck(context.TODO(), opts, gopts, nil, term)
 		return err
 	})
 	return buf.String(), err
 }
-
-func TestCheckWithSnaphotFilter(t *testing.T) {
-	testCases := []struct {
-		opts           CheckOptions
-		args           []string
-		expectedOutput string
-	}{
-		{ // full --read-data, all snapshots
-			CheckOptions{ReadData: true},
-			nil,
-			"4 / 4 packs",
-		},
-		{ // full --read-data, all snapshots
-			CheckOptions{ReadData: true},
-			nil,
-			"2 / 2 snapshots",
-		},
-		{ // full --read-data, latest snapshot
-			CheckOptions{ReadData: true},
-			[]string{"latest"},
-			"2 / 2 packs",
-		},
-		{ // full --read-data, latest snapshot
-			CheckOptions{ReadData: true},
-			[]string{"latest"},
-			"1 / 1 snapshots",
-		},
-		{ // --read-data-subset, latest snapshot
-			CheckOptions{ReadDataSubset: "1%"},
-			[]string{"latest"},
-			"1 / 1 packs",
-		},
-		{ // --read-data-subset, latest snapshot
-			CheckOptions{ReadDataSubset: "1%"},
-			[]string{"latest"},
-			"filtered",
-		},
-	}
-
-	env, cleanup := withTestEnvironment(t)
-	defer cleanup()
-
-	testSetupBackupData(t, env)
-	opts := BackupOptions{}
-	testRunBackup(t, env.testdata+"/0", []string{"for_cmd_ls"}, opts, env.gopts)
-	testRunBackup(t, env.testdata+"/0", []string{"0/9"}, opts, env.gopts)
-
-	for _, testCase := range testCases {
-		output, err := testRunCheckOutputWithOpts(t, env.gopts, testCase.opts, testCase.args)
-		rtest.OK(t, err)
-
-		hasOutput := strings.Contains(output, testCase.expectedOutput)
-		rtest.Assert(t, hasOutput, `expected to find substring %q, but did not find it`, testCase.expectedOutput)
-	}
-}
@@ -9,9 +9,9 @@ import (
 	"testing"

 	"github.com/restic/restic/internal/errors"
-	"github.com/restic/restic/internal/global"
 	"github.com/restic/restic/internal/restic"
 	rtest "github.com/restic/restic/internal/test"
+	"github.com/restic/restic/internal/ui/progress"
 )

 func TestParsePercentage(t *testing.T) {
@@ -202,8 +202,8 @@ func TestPrepareCheckCache(t *testing.T) {
 				err := os.Remove(tmpDirBase)
 				rtest.OK(t, err)
 			}
-			gopts := global.Options{CacheDir: tmpDirBase}
-			cleanup := prepareCheckCache(testCase.opts, &gopts, restic.NewNoopPrinter())
+			gopts := GlobalOptions{CacheDir: tmpDirBase}
+			cleanup := prepareCheckCache(testCase.opts, &gopts, &progress.NoopPrinter{})
 			files, err := os.ReadDir(tmpDirBase)
 			rtest.OK(t, err)

@@ -232,8 +232,8 @@ func TestPrepareCheckCache(t *testing.T) {
 }

 func TestPrepareDefaultCheckCache(t *testing.T) {
-	gopts := global.Options{CacheDir: ""}
-	cleanup := prepareCheckCache(CheckOptions{}, &gopts, restic.NewNoopPrinter())
+	gopts := GlobalOptions{CacheDir: ""}
+	cleanup := prepareCheckCache(CheckOptions{}, &gopts, &progress.NoopPrinter{})
 	_, err := os.ReadDir(gopts.CacheDir)
 	rtest.OK(t, err)

@@ -3,24 +3,18 @@ package main
 import (
 	"context"
 	"fmt"
-	"iter"
-	"sync"
-	"time"

-	"github.com/restic/restic/internal/data"
 	"github.com/restic/restic/internal/debug"
 	"github.com/restic/restic/internal/errors"
-	"github.com/restic/restic/internal/global"
 	"github.com/restic/restic/internal/repository"
 	"github.com/restic/restic/internal/restic"
-	"github.com/restic/restic/internal/ui"
-	"github.com/restic/restic/internal/ui/progress"
+	"golang.org/x/sync/errgroup"

 	"github.com/spf13/cobra"
 	"github.com/spf13/pflag"
 )

-func newCopyCommand(globalOptions *global.Options) *cobra.Command {
+func newCopyCommand() *cobra.Command {
 	var opts CopyOptions
 	cmd := &cobra.Command{
 		Use:   "copy [flags] [snapshotID ...]",
@@ -52,8 +46,7 @@ Exit status is 12 if the password is incorrect.
 		GroupID:           cmdGroupDefault,
 		DisableAutoGenTag: true,
 		RunE: func(cmd *cobra.Command, args []string) error {
-			finalizeSnapshotFilter(&opts.SnapshotFilter)
-			return runCopy(cmd.Context(), opts, *globalOptions, args, globalOptions.Term)
+			return runCopy(cmd.Context(), opts, globalOptions, args)
 		},
 	}

@@ -63,63 +56,17 @@ Exit status is 12 if the password is incorrect.

 // CopyOptions bundles all options for the copy command.
 type CopyOptions struct {
-	global.SecondaryRepoOptions
-	data.SnapshotFilter
+	secondaryRepoOptions
+	restic.SnapshotFilter
 }

 func (opts *CopyOptions) AddFlags(f *pflag.FlagSet) {
-	opts.SecondaryRepoOptions.AddFlags(f, "destination", "to copy snapshots from")
+	opts.secondaryRepoOptions.AddFlags(f, "destination", "to copy snapshots from")
 	initMultiSnapshotFilter(f, &opts.SnapshotFilter, true)
 }

-var errSentinelEndIteration = errors.New("end iteration")
-
-// collectAllSnapshots: select all snapshot trees to be copied
-func collectAllSnapshots(ctx context.Context, opts CopyOptions,
-	srcSnapshotLister restic.Lister, srcRepo restic.Repository,
-	dstSnapshotByOriginal map[restic.ID][]*data.Snapshot, args []string, printer restic.Printer,
-) iter.Seq2[*data.Snapshot, error] {
-	return func(yield func(*data.Snapshot, error) bool) {
-		err := opts.SnapshotFilter.FindAll(ctx, srcSnapshotLister, srcRepo, args, func(_ string, sn *data.Snapshot, err error) error {
-			// check whether the destination has a snapshot with the same persistent ID which has similar snapshot fields
-			if err != nil {
-				if !yield(nil, err) {
-					return errSentinelEndIteration
-				}
-				return nil
-			}
-			srcOriginal := *sn.ID()
-			if sn.Original != nil {
-				srcOriginal = *sn.Original
-			}
-			if originalSns, ok := dstSnapshotByOriginal[srcOriginal]; ok {
-				isCopy := false
-				for _, originalSn := range originalSns {
-					if similarSnapshots(originalSn, sn) {
-						printer.V("\n%v", sn)
-						printer.V("skipping source snapshot %s, was already copied to snapshot %s", sn.ID().Str(), originalSn.ID().Str())
-						isCopy = true
-						break
-					}
-				}
-				if isCopy {
-					return nil
-				}
-			}
-			if !yield(sn, nil) {
-				return errSentinelEndIteration
-			}
-			return nil
-		})
-		if err != nil && !errors.Is(err, errSentinelEndIteration) {
-			yield(nil, err)
-		}
-	}
-}
-
-func runCopy(ctx context.Context, opts CopyOptions, gopts global.Options, args []string, term ui.Terminal) error {
-	printer := progress.NewTerminalPrinter(false, gopts.Verbosity, term)
-	secondaryGopts, isFromRepo, err := opts.SecondaryRepoOptions.FillGlobalOpts(ctx, gopts, "destination")
+func runCopy(ctx context.Context, opts CopyOptions, gopts GlobalOptions, args []string) error {
+	secondaryGopts, isFromRepo, err := fillSecondaryGlobalOpts(ctx, opts.secondaryRepoOptions, gopts, "destination")
 	if err != nil {
 		return err
 	}
@@ -128,13 +75,13 @@ func runCopy(ctx context.Context, opts CopyOptions, gopts global.Options, args [
 		gopts, secondaryGopts = secondaryGopts, gopts
 	}

-	ctx, srcRepo, unlock, err := openWithReadLock(ctx, gopts, gopts.NoLock, printer)
+	ctx, srcRepo, unlock, err := openWithReadLock(ctx, gopts, gopts.NoLock)
 	if err != nil {
 		return err
 	}
 	defer unlock()

-	ctx, dstRepo, unlock, err := openWithAppendLock(ctx, secondaryGopts, false, printer)
+	ctx, dstRepo, unlock, err := openWithAppendLock(ctx, secondaryGopts, false)
 	if err != nil {
 		return err
 	}
@@ -151,40 +98,75 @@ func runCopy(ctx context.Context, opts CopyOptions, gopts global.Options, args [
 	}

 	debug.Log("Loading source index")
-	if err := srcRepo.LoadIndex(ctx, printer); err != nil {
+	bar := newIndexProgress(gopts.Quiet, gopts.JSON)
+	if err := srcRepo.LoadIndex(ctx, bar); err != nil {
 		return err
 	}
+	bar = newIndexProgress(gopts.Quiet, gopts.JSON)
 	debug.Log("Loading destination index")
-	if err := dstRepo.LoadIndex(ctx, printer); err != nil {
+	if err := dstRepo.LoadIndex(ctx, bar); err != nil {
 		return err
 	}

-	dstSnapshotByOriginal := make(map[restic.ID][]*data.Snapshot)
-	err = opts.SnapshotFilter.FindAll(ctx, dstSnapshotLister, dstRepo, nil, func(_ string, sn *data.Snapshot, err error) error {
-		if err != nil {
-			return err
-		}
+	dstSnapshotByOriginal := make(map[restic.ID][]*restic.Snapshot)
+	for sn := range FindFilteredSnapshots(ctx, dstSnapshotLister, dstRepo, &opts.SnapshotFilter, nil) {
 		if sn.Original != nil && !sn.Original.IsNull() {
 			dstSnapshotByOriginal[*sn.Original] = append(dstSnapshotByOriginal[*sn.Original], sn)
 		}
 		// also consider identical snapshot copies
 		dstSnapshotByOriginal[*sn.ID()] = append(dstSnapshotByOriginal[*sn.ID()], sn)
-		return nil
-	})
-	if err != nil {
-		return err
+	}
+	if ctx.Err() != nil {
+		return ctx.Err()
 	}

-	selectedSnapshots := collectAllSnapshots(ctx, opts, srcSnapshotLister, srcRepo, dstSnapshotByOriginal, args, printer)
+	// remember already processed trees across all snapshots
+	visitedTrees := restic.NewIDSet()

-	if err := copyTreeBatched(ctx, srcRepo, dstRepo, selectedSnapshots, printer); err != nil {
-		return err
+	for sn := range FindFilteredSnapshots(ctx, srcSnapshotLister, srcRepo, &opts.SnapshotFilter, args) {
+		// check whether the destination has a snapshot with the same persistent ID which has similar snapshot fields
+		srcOriginal := *sn.ID()
+		if sn.Original != nil {
+			srcOriginal = *sn.Original
+		}
+
+		if originalSns, ok := dstSnapshotByOriginal[srcOriginal]; ok {
+			isCopy := false
+			for _, originalSn := range originalSns {
+				if similarSnapshots(originalSn, sn) {
+					Verboseff("\n%v\n", sn)
+					Verboseff("skipping source snapshot %s, was already copied to snapshot %s\n", sn.ID().Str(), originalSn.ID().Str())
+					isCopy = true
+					break
+				}
+			}
+			if isCopy {
+				continue
+			}
+		}
+		Verbosef("\n%v\n", sn)
+		Verbosef("  copy started, this may take a while...\n")
+		if err := copyTree(ctx, srcRepo, dstRepo, visitedTrees, *sn.Tree, gopts.Quiet); err != nil {
+			return err
+		}
+		debug.Log("tree copied")
+
+		// save snapshot
+		sn.Parent = nil // Parent does not have relevance in the new repo.
+		// Use Original as a persistent snapshot ID
+		if sn.Original == nil {
+			sn.Original = sn.ID()
+		}
+		newID, err := restic.SaveSnapshot(ctx, dstRepo, sn)
+		if err != nil {
+			return err
+		}
+		Verbosef("snapshot %s saved\n", newID.Str())
 	}
-
 	return ctx.Err()
 }

-func similarSnapshots(sna *data.Snapshot, snb *data.Snapshot) bool {
+func similarSnapshots(sna *restic.Snapshot, snb *restic.Snapshot) bool {
 	// everything except Parent and Original must match
 	if !sna.Time.Equal(snb.Time) || !sna.Tree.Equal(*snb.Tree) || sna.Hostname != snb.Hostname ||
 		sna.Username != snb.Username || sna.UID != snb.UID || sna.GID != snb.GID ||
@@ -203,161 +185,72 @@ func similarSnapshots(sna *data.Snapshot, snb *data.Snapshot) bool {
 	return true
 }

-// copyTreeBatched copies multiple snapshots in one go. Snapshots are written after
-// data equivalent to at least 10 packfiles was written.
-func copyTreeBatched(ctx context.Context, srcRepo *repository.Repository, dstRepo restic.Repository,
-	selectedSnapshots iter.Seq2[*data.Snapshot, error], printer restic.Printer) error {
+func copyTree(ctx context.Context, srcRepo restic.Repository, dstRepo restic.Repository,
+	visitedTrees restic.IDSet, rootTreeID restic.ID, quiet bool) error {

-	// remember already processed trees across all snapshots
-	visitedTrees := srcRepo.NewAssociatedBlobSet()
+	wg, wgCtx := errgroup.WithContext(ctx)

-	targetSize := uint64(dstRepo.PackSize()) * 100
-	minDuration := 1 * time.Minute
+	treeStream := restic.StreamTrees(wgCtx, wg, srcRepo, restic.IDs{rootTreeID}, func(treeID restic.ID) bool {
+		visited := visitedTrees.Has(treeID)
+		visitedTrees.Insert(treeID)
+		return visited
+	}, nil)

-	// use pull-based iterator to allow iteration in multiple steps
-	next, stop := iter.Pull2(selectedSnapshots)
-	defer stop()
-
-	for {
-		var batch []*data.Snapshot
-		batchSize := uint64(0)
-		startTime := time.Now()
-
-		// call WithBlobUploader() once and then loop over all selectedSnapshots
-		err := dstRepo.WithBlobUploader(ctx, func(ctx context.Context, uploader restic.BlobSaverWithAsync) error {
-			for batchSize < targetSize || time.Since(startTime) < minDuration {
-				sn, err, ok := next()
-				if err != nil {
-					return err
-				}
-				if !ok {
-					break
-				}
-
-				batch = append(batch, sn)
-
-				printer.P("\n%v", sn)
-				printer.P("  copy started, this may take a while...")
-				sizeBlobs, err := copyTree(ctx, srcRepo, dstRepo, visitedTrees, *sn.Tree, printer, uploader)
-				if err != nil {
-					return err
-				}
-				debug.Log("tree copied")
-				batchSize += sizeBlobs
-			}
-
-			return nil
-		})
-		if err != nil {
-			return err
-		}
-
-		// if no snapshots were processed in this batch, we're done
-		if len(batch) == 0 {
-			break
-		}
-
-		// add a newline to separate saved snapshot messages from the other messages
-		if len(batch) > 1 {
-			printer.P("")
-		}
-		// save all the snapshots
-		for _, sn := range batch {
-			err := copySaveSnapshot(ctx, sn, dstRepo, printer)
-			if err != nil {
-				return err
-			}
-		}
-	}
-
-	return nil
-}
-
-func copyTree(ctx context.Context, srcRepo *repository.Repository, dstRepo restic.Repository,
-	visitedTrees restic.AssociatedBlobSet, rootTreeID restic.ID, printer restic.Printer, uploader restic.BlobSaverWithAsync) (uint64, error) {
-
-	copyBlobs := srcRepo.NewAssociatedBlobSet()
+	copyBlobs := restic.NewBlobSet()
 	packList := restic.NewIDSet()
-	var lock sync.Mutex

 	enqueue := func(h restic.BlobHandle) {
-		lock.Lock()
-		defer lock.Unlock()
-		if _, ok := dstRepo.LookupBlobSize(h); !ok {
-			pb := srcRepo.LookupBlob(h)
-			copyBlobs.Insert(h)
-			for _, p := range pb {
-				packList.Insert(p.PackID())
-			}
+		pb := srcRepo.LookupBlob(h.Type, h.ID)
+		copyBlobs.Insert(h)
+		for _, p := range pb {
+			packList.Insert(p.PackID)
 		}
 	}

-	err := data.StreamTrees(ctx, srcRepo, restic.IDs{rootTreeID}, restic.NoopCounter, func(treeID restic.ID) bool {
-		handle := restic.BlobHandle{ID: treeID, Type: restic.TreeBlob}
-		visited := visitedTrees.Has(handle)
-		visitedTrees.Insert(handle)
-		return visited
-	}, func(treeID restic.ID, err error, nodes data.TreeNodeIterator) error {
-		if err != nil {
-			return fmt.Errorf("LoadTree(%v) returned error %v", treeID.Str(), err)
-		}
-
-		// copy raw tree bytes to avoid problems if the serialization changes
-		enqueue(restic.BlobHandle{ID: treeID, Type: restic.TreeBlob})
-
-		for item := range nodes {
-			if item.Error != nil {
-				return item.Error
+	wg.Go(func() error {
+		for tree := range treeStream {
+			if tree.Error != nil {
+				return fmt.Errorf("LoadTree(%v) returned error %v", tree.ID.Str(), tree.Error)
 			}
-			// Recursion into directories is handled by StreamTrees
-			// Copy the blobs for this file.
-			for _, blobID := range item.Node.Content {
-				enqueue(restic.BlobHandle{Type: restic.DataBlob, ID: blobID})
+
+			// Do we already have this tree blob?
+			treeHandle := restic.BlobHandle{ID: tree.ID, Type: restic.TreeBlob}
+			if _, ok := dstRepo.LookupBlobSize(treeHandle.Type, treeHandle.ID); !ok {
+				// copy raw tree bytes to avoid problems if the serialization changes
+				enqueue(treeHandle)
+			}
+
+			for _, entry := range tree.Nodes {
+				// Recursion into directories is handled by StreamTrees
+				// Copy the blobs for this file.
+				for _, blobID := range entry.Content {
+					h := restic.BlobHandle{Type: restic.DataBlob, ID: blobID}
+					if _, ok := dstRepo.LookupBlobSize(h.Type, h.ID); !ok {
+						enqueue(h)
+					}
+				}
 			}
 		}
 		return nil
 	})
-	if err != nil {
-		return 0, err
-	}
-
-	sizeBlobs := copyStats(srcRepo, copyBlobs, packList, printer)
-	bar := printer.NewCounter("packs copied")
-	err = repository.CopyBlobs(ctx, srcRepo, dstRepo, uploader, packList, copyBlobs, bar, printer.P)
-	if err != nil {
-		return 0, errors.Fatalf("%s", err)
-	}
-	return sizeBlobs, nil
-}
-
-// copyStats: print statistics for the blobs to be copied
-func copyStats(srcRepo restic.Repository, copyBlobs restic.AssociatedBlobSet, packList restic.IDSet, printer restic.Printer) uint64 {
-	// count and size
-	countBlobs := 0
-	sizeBlobs := uint64(0)
-	for blob := range copyBlobs.Keys() {
-		for _, pb := range srcRepo.LookupBlob(blob) {
-			countBlobs++
-			sizeBlobs += uint64(pb.CiphertextLength())
-			break
-		}
-	}
-
-	printer.V("  copy %d blobs with disk size %s in %d packfiles\n",
-		countBlobs, ui.FormatBytes(uint64(sizeBlobs)), len(packList))
-	return sizeBlobs
-}
-
-func copySaveSnapshot(ctx context.Context, sn *data.Snapshot, dstRepo restic.Repository, printer restic.Printer) error {
-	sn.Parent = nil // Parent does not have relevance in the new repo.
-	// Use Original as a persistent snapshot ID
-	if sn.Original == nil {
-		sn.Original = sn.ID()
-	}
-	newID, err := data.SaveSnapshot(ctx, dstRepo, sn)
+	err := wg.Wait()
 	if err != nil {
 		return err
 	}
-	printer.P("snapshot %s saved, copied from source snapshot %s", newID.Str(), sn.ID().Str())
+
+	bar := newProgressMax(!quiet, uint64(len(packList)), "packs copied")
+	_, err = repository.Repack(
+		ctx,
+		srcRepo,
+		dstRepo,
+		packList,
+		copyBlobs,
+		bar,
+		func(msg string, args ...interface{}) { fmt.Printf(msg+"\n", args...) },
+	)
+	bar.Done()
+	if err != nil {
+		return errors.Fatal(err.Error())
+	}
 	return nil
 }
@@ -6,28 +6,23 @@ import (
 	"path/filepath"
 	"testing"

-	"github.com/restic/restic/internal/global"
-	"github.com/restic/restic/internal/restic"
 	rtest "github.com/restic/restic/internal/test"
-	"github.com/restic/restic/internal/ui/progress"
 )

-func testRunCopy(t testing.TB, srcGopts global.Options, dstGopts global.Options) {
+func testRunCopy(t testing.TB, srcGopts GlobalOptions, dstGopts GlobalOptions) {
 	gopts := srcGopts
 	gopts.Repo = dstGopts.Repo
-	gopts.Password = dstGopts.Password
+	gopts.password = dstGopts.password
 	gopts.InsecureNoPassword = dstGopts.InsecureNoPassword
 	copyOpts := CopyOptions{
-		SecondaryRepoOptions: global.SecondaryRepoOptions{
+		secondaryRepoOptions: secondaryRepoOptions{
 			Repo:               srcGopts.Repo,
-			Password:           srcGopts.Password,
+			password:           srcGopts.password,
 			InsecureNoPassword: srcGopts.InsecureNoPassword,
 		},
 	}

-	rtest.OK(t, withTermStatus(t, gopts, func(ctx context.Context, gopts global.Options) error {
-		return runCopy(context.TODO(), copyOpts, gopts, nil, gopts.Term)
-	}))
+	rtest.OK(t, runCopy(context.TODO(), copyOpts, gopts, nil))
 }

 func TestCopy(t *testing.T) {
@@ -50,8 +45,8 @@ func TestCopy(t *testing.T) {
 	copiedSnapshotIDs := testListSnapshots(t, env2.gopts, 3)

 	// Check that the copies size seems reasonable
-	stat := dirStats(t, env.repo)
-	stat2 := dirStats(t, env2.repo)
+	stat := dirStats(env.repo)
+	stat2 := dirStats(env2.repo)
 	sizeDiff := int64(stat.size) - int64(stat2.size)
 	if sizeDiff < 0 {
 		sizeDiff = -sizeDiff
@@ -74,7 +69,7 @@ func TestCopy(t *testing.T) {
 		testRunRestore(t, env2.gopts, restoredir, snapshotID.String())
 		foundMatch := false
 		for cmpdir := range origRestores {
-			diff := directoriesContentsDiff(t, restoredir, cmpdir)
+			diff := directoriesContentsDiff(restoredir, cmpdir)
 			if diff == "" {
 				delete(origRestores, cmpdir)
 				foundMatch = true
@@ -85,41 +80,6 @@ func TestCopy(t *testing.T) {
 	}

 	rtest.Assert(t, len(origRestores) == 0, "found not copied snapshots")
-
-	// check that snapshots were properly batched while copying
-	_, _, countBlobs := testPackAndBlobCounts(t, env.gopts)
-	countTreePacksDst, countDataPacksDst, countBlobsDst := testPackAndBlobCounts(t, env2.gopts)
-
-	rtest.Equals(t, countBlobs, countBlobsDst, "expected blob count in both repos to be equal")
-	rtest.Equals(t, countTreePacksDst, 1, "expected 1 tree packfile")
-	rtest.Equals(t, countDataPacksDst, 1, "expected 1 data packfile")
-}
-
-func testPackAndBlobCounts(t testing.TB, gopts global.Options) (countTreePacks int, countDataPacks int, countBlobs int) {
-	rtest.OK(t, withTermStatus(t, gopts, func(ctx context.Context, gopts global.Options) error {
-		printer := progress.NewTerminalPrinter(gopts.JSON, gopts.Verbosity, gopts.Term)
-		_, repo, unlock, err := openWithReadLock(ctx, gopts, false, printer)
-		rtest.OK(t, err)
-		defer unlock()
-
-		rtest.OK(t, repo.List(context.TODO(), restic.PackFile, func(id restic.ID, size int64) error {
-			handles, err := repo.ListPackHandles(context.TODO(), id, size)
-			rtest.OK(t, err)
-			rtest.Assert(t, len(handles) > 0, "a packfile should contain at least one blob")
-
-			switch handles[0].Type {
-			case restic.TreeBlob:
-				countTreePacks++
-			case restic.DataBlob:
-				countDataPacks++
-			}
-			countBlobs += len(handles)
-			return nil
-		}))
-		return nil
-	}))
-
-	return countTreePacks, countDataPacks, countBlobs
 }

 func TestCopyIncremental(t *testing.T) {
@@ -182,7 +142,7 @@ func TestCopyToEmptyPassword(t *testing.T) {
 	defer cleanup()
 	env2, cleanup2 := withTestEnvironment(t)
 	defer cleanup2()
-	env2.gopts.Password = ""
+	env2.gopts.password = ""
 	env2.gopts.InsecureNoPassword = true

 	testSetupBackupData(t, env)
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Leo R. Lundgren	6d39410958	doc: Reword parts of the text, replace rclone with rest-server The intent here is to make the text more consistent in its use of different concepts involved in explaining the idea and setup that is explained, and to make it easier to follow. We're also replacing rclone with rest-server, not because we dislike rclone but in order to keep the text to the basic tooling and the main restic eco- system. Finally we also remove the previous tip at the end about keeping the SSH tunnel up, as it will be during the time the SSH session is running (in which the user is expected to run the restic commands).	2026-02-18 22:19:56 +01:00
JL710	5c3116901e	use rclone for rest server instead of docker	2026-01-17 16:29:26 +01:00
JL710	8943ca15ed	apply suggestions from Michael Eischer	2025-09-25 13:35:40 +02:00
JL710	a9d51db68d	add example for "Pulling a Backup with HTTP over a ssh tunnel"	2025-09-11 16:07:50 +02:00