# Install bupstash with Homebrew, apk, MacPorts, Nix, pacman

Easy and efficient encrypted backups. Version 0.12.0 via Homebrew; verified from local package data.

## Install

```sh
sudo av install brew:bupstash
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install bupstash
```

  Evidence: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install bupstash
```

  Evidence: MacPorts ports tree: sysutils/bupstash/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add bupstash
```

  Evidence: Alpine Linux edge package indexes: bupstash from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Nix (92%):

```sh
nix profile install nixpkgs#bupstash
```

  Evidence: nixpkgs package indexes: pkgs/by-name/bu/bupstash/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S bupstash
```

  Evidence: Arch Linux sync databases: bupstash from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

## Package facts

- **Package key:** brew:bupstash
- **Package manager:** Homebrew
- **Package manager page:** <https://formulae.brew.sh/formula/bupstash>
- **Version:** 0.12.0
- **Source summary:** Easy and efficient encrypted backups
- **Homepage:** <https://bupstash.io>
- **Repository:** <https://github.com/andrewchambers/bupstash>
- **Upstream docs:** <https://bupstash.io/>
- **License:** MIT
- **Source archive:** <https://github.com/andrewchambers/bupstash/releases/download/v0.12.0/bupstash-v0.12.0-src+deps.tar.gz>
- **Generated:** 2026-07-08T07:18:31+00:00

## Executables

- bupstash (cli)
- bupstash (alias)

## Dependencies

- libsodium

## Build dependencies

- pkgconf
- rust

## Install behavior

- Post-install hook: not defined
- Bottle: available on arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, monterey, sonoma, ventura, x86_64_linux

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 0.12.0
- Local data: ok
- Upstream repository: https://github.com/andrewchambers/bupstash
- info: No package-manager update timestamp was available.
- info: No cached GitHub release or tag data was available.
## Project history and usage

Bupstash is a Rust backup tool focused on encrypted, deduplicated, incremental backups with client-side encryption and remote repositories over SSH. It occupies the same practical space as modern deduplicating backup CLIs but makes encrypted metadata, queryable tags, and offline decryption keys central features.

### Project history

The public repository was created in August 2020, and Andrew Chambers introduced Bupstash publicly in November 2020. The README and website describe a beta-stage tool designed for efficient deduplication, strong privacy, offline decryption keys, encrypted tag search, slow-network performance, restricted remote access controls, and low memory use.

The technical overview explains the implementation model: arbitrary data streams are chunked, deduplicated, encrypted client side, stored locally or remotely, and indexed with encrypted metadata. The design uses keyed hashes for addressing chunks, a rolling hash for split points, libsodium cryptography, hash trees for large streams, and client-side metadata sync for queries.

### Adoption history

Bupstash gained enough command-line backup interest to be packaged across several ecosystems; the input metadata records apk, Homebrew, MacPorts, Nix, and Arch packages. Its adoption is narrower than older tools such as bup or Borg, but it has a clear niche among users who want encrypted deduplication without operating a large backup service.

### How it is used

Typical usage starts by initializing a repository, creating a key file, setting `BUPSTASH_REPOSITORY` and `BUPSTASH_KEY`, then using commands such as `put`, `list`, `get`, `diff`, `restore`, `rm`, and `gc`. Bupstash can store file trees, tar streams, and command output, and its `put` command benefits from avoiding already-sent file content.

### Why package nerds care

Bupstash is significant because it shows the post-Borg/Restic generation of backup tooling: single-binary CLI distribution, strong default encryption, SSH-friendly self-hosting, and deduplication that still works with encrypted data. Its key-separation model is especially attractive for package nerds thinking about ransomware-resistant unattended backups.

### Timeline

- 2020-08: Public GitHub repository created.
- 2020-11-20: Introductory Bupstash blog post published.
- 2021: Project documentation covered garbage collection, encrypted metadata, and operational guides.
- 2026: Homebrew metadata lists Bupstash as a packaged encrypted-backup CLI.

### Related projects

- Bupstash is related to bup by name and backup focus, and to Borg, Restic, Attic, Tarsnap, Duplicity, and rdiff-backup as part of the wider deduplicating and encrypted backup-tool family.

### Sources

- <https://acha.ninja/blog/introducing_bupstash/>
- <https://bupstash.io/>
- <https://bupstash.io/doc/guides/Getting%20Started.html>
- <https://bupstash.io/doc/man/bupstash.html>
- <https://github.com/andrewchambers/bupstash>
- <https://raw.githubusercontent.com/andrewchambers/bupstash/master/doc/technical_overview.md>
- source_facts.package-manager


## Security Notes

broad file, network, media, or database tool signal.

- **Geiger risk:** blue / medium
- broad file, network, media, or database tool signal

## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** bupstash
- **Version Scheme:** 0
- **Revision:** 1
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** stable

## Other Package-Manager Records

- Nix - bupstash: normalized package name match | nixpkgs package indexes: pkgs/by-name/bu/bupstash/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- apk - bupstash - 0.12.0-r7: normalized package name match | Alpine Linux edge package indexes: bupstash from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Easy and efficient encrypted backups | https://bupstash.io/
- apk - bupstash-doc - 0.12.0-r7: normalized package name match | Alpine Linux edge package indexes: bupstash-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Easy and efficient encrypted backups (documentation) | https://bupstash.io/
- pacman - bupstash - 0.12.0-4: normalized package name match | Arch Linux sync databases: bupstash from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | A tool for encrypted backups | https://bupstash.io
- MacPorts - bupstash: normalized package name match | MacPorts ports tree: sysutils/bupstash/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1


## Related links

- [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals.
- [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Archive and compression packages](https://www.automicvault.com/pkg/archive-compression-tools/) - Matched archive or compression metadata.
- [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [pkgconf](https://www.automicvault.com/pkg/brew/pkgconf/) - Build dependency declared by Homebrew.
- [rust](https://www.automicvault.com/pkg/brew/rust/) - Build dependency declared by Homebrew.
- [bup](https://www.automicvault.com/pkg/brew/bup/) - Shares av.db curated category or tags: backup, cli, deduplication, incremental-backup, system.
- [borgbackup](https://www.automicvault.com/pkg/brew/borgbackup/) - Shares av.db curated category or tags: backup, cli, deduplication, system.
- [burp](https://www.automicvault.com/pkg/brew/burp/) - Shares av.db curated category or tags: backup, cli, deduplication, system.
- [duplicity](https://www.automicvault.com/pkg/brew/duplicity/) - Shares av.db curated category or tags: backup, cli, incremental-backup, system.
- [kopia](https://www.automicvault.com/pkg/brew/kopia/) - Shares av.db curated category or tags: backup, cli, deduplication, system.
- [plakar](https://www.automicvault.com/pkg/brew/plakar/) - Shares av.db curated category or tags: backup, cli, deduplication, system.
- [rdiff-backup](https://www.automicvault.com/pkg/brew/rdiff-backup/) - Shares av.db curated category or tags: backup, cli, incremental-backup, system.
- [rustic](https://www.automicvault.com/pkg/brew/rustic/) - Shares av.db curated category or tags: backup, cli, deduplication, system.

## Combined YAML source

View the package source record on GitHub. [combined/bupstash.yml](https://github.com/automic-vault/db/blob/main/combined/bupstash.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- curated package history
- package version freshness
- av.db category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph