The ssh-key was NOT a default "~/.ssh/id_rsa" but a "~/.ssh/id_rsa_backup"
Thus, the backup-script, that calls hat a line
"ssh-add /root/.ssh/id_rsa_backup" but it had no effect in a noninteractive env, where no ssh-agent was running.
Thus, there was not key for duplicity.
So i'm calling now duplicity with "--ssh-options" -
*facepalm*
Sorry, my fault.
The ssh-key was NOT a default "~/.ssh/id_rsa" but a "~/.ssh/ id_rsa_ backup"
Thus, the backup-script, that calls hat a line ssh/id_ rsa_backup" but it had no effect in a noninteractive env, where no ssh-agent was running.
"ssh-add /root/.
Thus, there was not key for duplicity.
So i'm calling now duplicity with "--ssh-options" -
/usr/bin/duplicity --ssh-options= "-oProtocol= 2 -oIdentityFile= '/root/ .ssh/id_ rsa_backup' " ....
and everything works fine.