# Review Borg file-cache safety before switching from ctime to mtime

> Evaluate change-detection correctness alongside speed before weakening Borg cache comparisons.

- Canonical URL: https://update.dsesecurity.com/updates/review-borg-file-cache-safety-before-switching-from-ctime-to-mtime/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-10-15T13:33:05+00:00
- Modified: 2026-10-15T13:36:16+00:00
- Last reviewed by DSE: 2026-10-15
- Resource type: Guide
- DSE priority: Information
- Topics: Business Continuity, IT
- Reading time: 2 minutes

## What you need to know

Evaluate change-detection correctness alongside speed before weakening Borg cache comparisons.

## Potentially affected

This applies to Borg 1.4.5 backup-creation cache modes. It addresses the reliability tradeoff in avoiding rereads, not a universal performance recommendation for every filesystem or backup workload.

## DSE recommendation

DSE recommends documenting the observed cache problem before changing comparison fields.

## Article

Evaluate change-detection correctness alongside speed before weakening Borg cache comparisons.

## Source facts

Borg 1.4.5 uses cached file metadata to avoid reprocessing unchanged files. Its default cache comparison includes ctime, size, and inode. Inode values may be unstable on some network filesystems, reducing cache effectiveness; omitting inode can improve speed but reduce change-detection reliability. The documentation also contrasts ctime with mtime: users can reset mtime after content changes, which can mislead mtime-based cache comparisons. A metadata-only change can conversely advance ctime and cause extra processing.

Source: [Borg 1.4.5 — borg create](https://borgbackup.readthedocs.io/en/stable/usage/create.html).

## Applicability

This applies to Borg 1.4.5 backup-creation cache modes. It addresses the reliability tradeoff in avoiding rereads, not a universal performance recommendation for every filesystem or backup workload.

## DSE recommendation

DSE recommends documenting the observed cache problem before changing comparison fields. Record the source filesystem’s behavior and evaluate whether apparent slowness is expected metadata churn or unstable identifiers. Have the backup owner approve any reduced detection guarantees. Preserve a known conservative comparison in the rehearsal so faster operation can be evaluated against content correctness. Avoid treating a short backup duration as proof of improvement when fewer files may simply have been reread under a weaker comparison.

## Verification

Use disposable files to compare the proposed and existing modes, including metadata-only changes and content changes followed by restored modification times. Inspect restored content, not just archive statistics. Retain both the performance observations and any missed or unnecessarily reprocessed changes before selecting the production mode.

## Official reference

[Borg 1.4.5 — borg create](https://borgbackup.readthedocs.io/en/stable/usage/create.html). Reviewed October 15, 2026.

## Primary reference

- Name: Borg 1.4.5 — borg create
- Authority: borgbackup.readthedocs.io
- URL: https://borgbackup.readthedocs.io/en/stable/usage/create.html
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Review Borg file-cache safety before switching from ctime to mtime,” DSE Security, https://update.dsesecurity.com/updates/review-borg-file-cache-safety-before-switching-from-ctime-to-mtime/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.