Project

General

Profile

Customer Backup » History » Revision 16

Revision 15 (Dominique Roux, 02/01/2021 10:08 AM) → Revision 16/20 (Jin-Guk Kwon, 12/18/2023 10:55 AM)

h1. Managed Customer Backup 

 {{toc}} 

 *%{color:green}This document concerns end-users/customers. See [[datacenterlight:Backup]] page for server-side documentation.%* 

 h2. Status 

 This document is *a DRAFT*. 

 h3. Overview 

 * Official product page: https://ungleich.ch/u/products/backup/ 
 * Related DatacenterLight FAQ entry: https://redmine.ungleich.ch/projects/open-infrastructure/wiki/FAQ_at_Data_Center_Light#Backup 

 We make use of the "ccollect":https://www.nico.schottelius.org/software/ccollect/ software, which runs every day at 3AM Europe/Zurich. The backup server and storage clusters are in a location (place5) physically separated from the customer VMs (place6). 


 h2. VM Backup 

 h3. FAQ 

 h4. How to enable this service? 

 You will have to contact our support and give them the following details: 

 * Address of the VM to backup (IPv6 or domain with AAAA field). 
 * Directories to backup. Default is @/@ excluding @/sys@ and @/proc@. 

 "ccollect":https://www.nico.schottelius.org/software/ccollect/ makes use of @rsync@ to transfer data and needs to connect to your server over SSH (rsync itself is not encrypted!). You need to configure an user - root for a full system backup - with the following SSH key (to put in @~/.ssh/authorized_keys@): 

 <pre> 
 # backup.place5.ungleich.ch 
 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7LsZp048K5D2kSWwiI5fux5pv4Ji7eTtMZGpOu0MviZEuGG3T5NeSKPmdlG1Rr3/oLpIqaFPzB7la3SI0OX5/E3v/yWcSrIsXdoIlSJMx7yaWrd4rm3yICukg4v5cZm2iDGBzIffpRxN1aPg46XnwmSvID3dD18yHMfgKyOFJgMwpTeI0d+K99cRYdf0D+QoUUyJlEes8xOw29lfT+1gg3KXBfYeggXLxMQ1xOH5L91j3Lg1taaD0EfyvkjO+TspcEwIwEtcBwdGRDbkjNkZOgFUEoWpxEFESLFRvr+JxgDJjvkLD4Q7l6tNOvW30oq7iI961NbXSwgM1cH0gNPED ungleich-backup 
 </pre> 

 h4. What is the pricing model? 

 See "product page":https://ungleich.ch/u/products/backups-as-a-service. 

 h4. What is the retention policy? 

 The default retention policy is: 5 daily backups, 4 weekly backups, 12 monthly backups. 

 h4. How can I access my backups? 

 You can access the files over SFTP using your ungleich account (username + password) against @backup.place5.ungleich.ch@. You can use any SFTP client such as command-line @sftp@ (@sftp myusername@backup.place5.ungleich.ch) or "Filezilla":https://filezilla-project.org/ (graphical client). 

 **Note:** at the moment, @backup.place5.ungleich.ch@ is only available over IPv6. 

 h2. Glarnercloud Backup 

 h3. FAQ 

 h4. How to enable this service? 

 Simply contact our customer support in order to enable the backup of your Glarnercloud instance. 
 The support team will then enable the automated backup service (similar to [[Customer_Backup#VM_Backup|VM Backup]] but restricted to your Glarnercloud data) 

 h4. What is the pricing model? 

 See "product page":https://ungleich.ch/u/products/backups-as-a-service. 

 h4. What is the retention policy? 

 The default retention policy is: 5 daily backups, 4 weekly backups, 12 monthly backups. 

 h4. How can I access my backups? 

 You can access the files over nextcloud via @cloud-backup.glarner.cloud@. Our customer support team will hand you your credentials as soon as the service is enabled for you. 
 Otherwise, you can access the backup via SFTP. Here again, the customer support will contact you and communicate your credentials as soon as the service is enabled for you. You can use any SFTP client such as command-line @sftp@ (@sftp myusername@cloud-backup.glarner.cloud) or "Filezilla":https://filezilla-project.org/ (graphical client). 

 **Note:** at the moment, @cloud-backup.glarner.cloud@ is only available over IPv6. 

 h2. Glarnercloud Backup of k8s 

 h3. FAQ 

 h4. How to enable this service? 

 Simply contact our customer support in order to enable the backup of your Glarnercloud instance. 
 The support team will then enable the automated backup service. 
 We are using restic(s3 bucket) for cloud of k8s. 

 h4. How can I access my backups? 

 Backup customer access their s3 bucket with secure key 

 ex) s3cmd --host=s3.k8s.place5.ungleich.ch    --access_key=XXXXXXXXXX --secret_key=XXXXXXXXXX ls s3://bucket_address/snapshots/ 
 or 
 ex) export RESTIC_REPOSITORY=s3:https://s3.k8s.place5.ungleich.ch/[bucket_address]; export RESTIC_PASSWORD=XXXXXXXXXX; export AWS_ACCESS_KEY_ID=XXXXXXXX; export AWS_SECRET_ACCESS_KEY=XXXXXXXX; restic snapshots 

 Dump backup with restic 

 ex) export RESTIC_REPOSITORY=s3:https://s3.k8s.place5.ungleich.ch/[bucket_address]; export RESTIC_PASSWORD=XXXXXXXXXX; export AWS_ACCESS_KEY_ID=XXXXXXXX; export AWS_SECRET_ACCESS_KEY=XXXXXXXX; restic restore [snapshot_ID] --target /restore 

 https://restic.readthedocs.io/en/latest/050_restore.html