restic backup(1) restic backup(1)
NAME
restic-diff - Show differences between two snapshots
SYNOPSIS
restic diff [flags] snapshotID snapshotID
DESCRIPTION
The "diff" command shows differences from the first to the second snap-
shot. The first characters in each line display what has happened to a
particular file or directory:
• + The item was added
• - The item was removed
• U The metadata (access mode, timestamps, ...) for the item was
updated
• M The file's content was modified
• T The type was changed, e.g. a file was made a symlink
• ? Bitrot detected: The file's content has changed but all
metadata is the same
Metadata comparison will likely not work if a backup was created using
the '--ignore-inode' or '--ignore-ctime' option.
To only compare files in specific subfolders, you can use the "snap-
shotID:subfolder" syntax, where "subfolder" is a path within the snap-
shot.
EXIT STATUS
Exit status is 0 if the command was successful. Exit status is 1 if
there was any error. Exit status is 10 if the repository does not ex-
ist. Exit status is 11 if the repository is already locked. Exit sta-
tus is 12 if the password is incorrect.
OPTIONS
-h, --help[=false] help for diff
--metadata[=false] print changes in metadata
OPTIONS INHERITED FROM PARENT COMMANDS
--cacert=[] file to load root certificates from (default: use sys-
tem certificates or $RESTIC_CACERT)
--cache-dir="" set the cache directory. (default: use system de-
fault cache directory)
--cleanup-cache[=false] auto remove old cache directories
--compression=auto compression mode (only available for repository
format version 2), one of (auto|off|max) (default: $RESTIC_COMPRESSION)
--http-user-agent="" set a http user agent for outgoing http re-
quests
--insecure-no-password[=false] use an empty password for the repos-
itory, must be passed to every restic command (insecure)
--insecure-tls[=false] skip TLS certificate verification when con-
necting to the repository (insecure)
--json[=false] set output mode to JSON for commands that support it
--key-hint="" key ID of key to try decrypting first (default:
$RESTIC_KEY_HINT)
--limit-download=0 limits downloads to a maximum rate in KiB/s.
(default: unlimited)
--limit-upload=0 limits uploads to a maximum rate in KiB/s. (de-
fault: unlimited)
--no-cache[=false] do not use a local cache
--no-extra-verify[=false] skip additional verification of data be-
fore upload (see documentation)
--no-lock[=false] do not lock the repository, this allows some op-
erations on read-only repositories
-o, --option=[] set extended option (key=value, can be specified
multiple times)
--pack-size=0 set target pack size in MiB, created pack files may
be larger (default: $RESTIC_PACK_SIZE)
--password-command="" shell command to obtain the repository pass-
word from (default: $RESTIC_PASSWORD_COMMAND)
-p, --password-file="" file to read the repository password from
(default: $RESTIC_PASSWORD_FILE)
-q, --quiet[=false] do not output comprehensive progress report
-r, --repo="" repository to backup to or restore from (default:
$RESTIC_REPOSITORY)
--repository-file="" file to read the repository location from (de-
fault: $RESTIC_REPOSITORY_FILE)
--retry-lock=0s retry to lock the repository if it is already
locked, takes a value like 5m or 2h (default: no retries)
--stuck-request-timeout=5m0s duration after which to retry stuck
requests
--tls-client-cert="" path to a file containing PEM encoded TLS
client certificate and private key (default: $RESTIC_TLS_CLIENT_CERT)
-v, --verbose[=0] be verbose (specify multiple times or a level us-
ing --verbose=n``, max level/times is 2)
SEE ALSO
restic(1)
generated by restic generate Jan 2017 restic backup(1)
Generated by dwww version 1.16 on Fri Nov 13 21:34:27 CET 2026.