Project

General

Profile

Customer Backup » History » Version 17

Jin-Guk Kwon, 12/18/2023 10:56 AM

1 14 Dominique Roux
h1. Managed Customer Backup
2 1 Timothée Floure
3
{{toc}}
4
5
*%{color:green}This document concerns end-users/customers. See [[datacenterlight:Backup]] page for server-side documentation.%*
6
7
h2. Status
8
9 2 Timothée Floure
This document is *a DRAFT*.
10 1 Timothée Floure
11 14 Dominique Roux
h3. Overview
12
13 13 Timothée Floure
* Official product page: https://ungleich.ch/u/products/backup/
14 3 Timothée Floure
* Related DatacenterLight FAQ entry: https://redmine.ungleich.ch/projects/open-infrastructure/wiki/FAQ_at_Data_Center_Light#Backup
15 1 Timothée Floure
16
We make use of the "ccollect":https://www.nico.schottelius.org/software/ccollect/ software, which runs every day at 3AM Europe/Zurich. The backup server and storage clusters are in a location (place5) physically separated from the customer VMs (place6).
17
18 15 Dominique Roux
19
h2. VM Backup
20
21 14 Dominique Roux
h3. FAQ
22 3 Timothée Floure
23 14 Dominique Roux
h4. How to enable this service?
24 3 Timothée Floure
25
You will have to contact our support and give them the following details:
26
27
* Address of the VM to backup (IPv6 or domain with AAAA field).
28
* Directories to backup. Default is @/@ excluding @/sys@ and @/proc@.
29
30 10 Timothée Floure
"ccollect":https://www.nico.schottelius.org/software/ccollect/ makes use of @rsync@ to transfer data and needs to connect to your server over SSH (rsync itself is not encrypted!). You need to configure an user - root for a full system backup - with the following SSH key (to put in @~/.ssh/authorized_keys@):
31 3 Timothée Floure
32 1 Timothée Floure
<pre>
33 9 Timothée Floure
# backup.place5.ungleich.ch
34 3 Timothée Floure
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7LsZp048K5D2kSWwiI5fux5pv4Ji7eTtMZGpOu0MviZEuGG3T5NeSKPmdlG1Rr3/oLpIqaFPzB7la3SI0OX5/E3v/yWcSrIsXdoIlSJMx7yaWrd4rm3yICukg4v5cZm2iDGBzIffpRxN1aPg46XnwmSvID3dD18yHMfgKyOFJgMwpTeI0d+K99cRYdf0D+QoUUyJlEes8xOw29lfT+1gg3KXBfYeggXLxMQ1xOH5L91j3Lg1taaD0EfyvkjO+TspcEwIwEtcBwdGRDbkjNkZOgFUEoWpxEFESLFRvr+JxgDJjvkLD4Q7l6tNOvW30oq7iI961NbXSwgM1cH0gNPED ungleich-backup
35 1 Timothée Floure
</pre>
36 3 Timothée Floure
37 14 Dominique Roux
h4. What is the pricing model?
38 1 Timothée Floure
39 6 Timothée Floure
See "product page":https://ungleich.ch/u/products/backups-as-a-service.
40 3 Timothée Floure
41 14 Dominique Roux
h4. What is the retention policy?
42 3 Timothée Floure
43 1 Timothée Floure
The default retention policy is: 5 daily backups, 4 weekly backups, 12 monthly backups.
44
45 14 Dominique Roux
h4. How can I access my backups?
46 11 Timothée Floure
47
You can access the files over SFTP using your ungleich account (username + password) against @backup.place5.ungleich.ch@. You can use any SFTP client such as command-line @sftp@ (@sftp myusername@backup.place5.ungleich.ch) or "Filezilla":https://filezilla-project.org/ (graphical client).
48
49
**Note:** at the moment, @backup.place5.ungleich.ch@ is only available over IPv6.
50 1 Timothée Floure
51
h2. Glarnercloud Backup
52 15 Dominique Roux
53
h3. FAQ
54
55
h4. How to enable this service?
56
57
Simply contact our customer support in order to enable the backup of your Glarnercloud instance.
58
The support team will then enable the automated backup service (similar to [[Customer_Backup#VM_Backup|VM Backup]] but restricted to your Glarnercloud data)
59
60
h4. What is the pricing model?
61
62
See "product page":https://ungleich.ch/u/products/backups-as-a-service.
63
64
h4. What is the retention policy?
65
66
The default retention policy is: 5 daily backups, 4 weekly backups, 12 monthly backups.
67
68
h4. How can I access my backups?
69
70
You can access the files over nextcloud via @cloud-backup.glarner.cloud@. Our customer support team will hand you your credentials as soon as the service is enabled for you.
71
Otherwise, you can access the backup via SFTP. Here again, the customer support will contact you and communicate your credentials as soon as the service is enabled for you. You can use any SFTP client such as command-line @sftp@ (@sftp myusername@cloud-backup.glarner.cloud) or "Filezilla":https://filezilla-project.org/ (graphical client).
72
73
**Note:** at the moment, @cloud-backup.glarner.cloud@ is only available over IPv6.
74 16 Jin-Guk Kwon
75
h2. Glarnercloud Backup of k8s
76
77
h3. FAQ
78
79
h4. How to enable this service?
80
81
Simply contact our customer support in order to enable the backup of your Glarnercloud instance.
82
The support team will then enable the automated backup service.
83
We are using restic(s3 bucket) for cloud of k8s.
84
85
h4. How can I access my backups?
86
87
Backup customer access their s3 bucket with secure key
88
89 17 Jin-Guk Kwon
<pre>
90 16 Jin-Guk Kwon
ex) s3cmd --host=s3.k8s.place5.ungleich.ch  --access_key=XXXXXXXXXX --secret_key=XXXXXXXXXX ls s3://bucket_address/snapshots/
91 17 Jin-Guk Kwon
</pre>
92 16 Jin-Guk Kwon
or
93 17 Jin-Guk Kwon
<pre>
94 16 Jin-Guk Kwon
ex) export RESTIC_REPOSITORY=s3:https://s3.k8s.place5.ungleich.ch/[bucket_address]; export RESTIC_PASSWORD=XXXXXXXXXX; export AWS_ACCESS_KEY_ID=XXXXXXXX; export AWS_SECRET_ACCESS_KEY=XXXXXXXX; restic snapshots
95 17 Jin-Guk Kwon
</pre>
96 16 Jin-Guk Kwon
97
Dump backup with restic
98
99 17 Jin-Guk Kwon
<pre>
100 16 Jin-Guk Kwon
ex) export RESTIC_REPOSITORY=s3:https://s3.k8s.place5.ungleich.ch/[bucket_address]; export RESTIC_PASSWORD=XXXXXXXXXX; export AWS_ACCESS_KEY_ID=XXXXXXXX; export AWS_SECRET_ACCESS_KEY=XXXXXXXX; restic restore [snapshot_ID] --target /restore
101 17 Jin-Guk Kwon
</pre>
102 16 Jin-Guk Kwon
103
https://restic.readthedocs.io/en/latest/050_restore.html