# Keep Borg repository checking separate from lossy repair mode

> Preserve read-only Borg findings and an independent copy before considering repair.

- Canonical URL: https://update.dsesecurity.com/updates/keep-borg-repository-checking-separate-from-lossy-repair-mode/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-10-15T13:33:01+00:00
- Modified: 2026-10-15T13:36:16+00:00
- Last reviewed by DSE: 2026-10-15
- Resource type: Guide
- DSE priority: Information
- Topics: Business Continuity, IT
- Reading time: 2 minutes

## What you need to know

Preserve read-only Borg findings and an independent copy before considering repair.

## Potentially affected

This applies to Borg 1.4.5 repository integrity checking. It addresses the difference between observation, data verification, and repair, not the separate manifest verification used for PostgreSQL base backups.

## DSE recommendation

DSE recommends saving the read-only findings and the exact command mode before discussing repair.

## Article

Preserve read-only Borg findings and an independent copy before considering repair.

## Source facts

Borg 1.4.5 check is read-only by default and reports discovered corruption without repairing it. Adding repair changes that behavior and can sacrifice data, including additional data affected by corruption the repair cannot handle. The documentation recommends backing up the repository before repair. Repair cannot recreate data that no longer exists. Data verification is also distinct from checking only repository structure; verify-data cannot be combined with repository-only. A check result therefore needs its exact mode attached.

Source: [Borg 1.4.5 — borg check](https://borgbackup.readthedocs.io/en/stable/usage/check.html).

## Applicability

This applies to Borg 1.4.5 repository integrity checking. It addresses the difference between observation, data verification, and repair, not the separate manifest verification used for PostgreSQL base backups.

## DSE recommendation

DSE recommends saving the read-only findings and the exact command mode before discussing repair. Have the backup owner identify independent recovery copies and obtain a storage diagnosis where hardware is suspect. Review any repair as a change with a known loss risk and a preserved pre-repair repository, rather than adding the option to make a scheduled check pass. Keep the original error report available for later comparison, including which archives or chunks were affected.

## Verification

On an expendable repository copy, confirm that routine checking leaves the repository unchanged and that the selected mode examines the intended data. Rehearse the review and preservation steps before any repair experiment. Validate restored files afterward and record losses explicitly instead of equating repository consistency with complete content recovery.

## Official reference

[Borg 1.4.5 — borg check](https://borgbackup.readthedocs.io/en/stable/usage/check.html). Reviewed October 15, 2026.

## Primary reference

- Name: Borg 1.4.5 — borg check
- Authority: borgbackup.readthedocs.io
- URL: https://borgbackup.readthedocs.io/en/stable/usage/check.html
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Keep Borg repository checking separate from lossy repair mode,” DSE Security, https://update.dsesecurity.com/updates/keep-borg-repository-checking-separate-from-lossy-repair-mode/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.