mirror of
https://github.com/YunoHost-Apps/borg_ynh.git
synced 2024-09-03 18:16:05 +02:00
commit
d606639077
6 changed files with 542 additions and 13 deletions
45
README.md
45
README.md
|
@ -1,8 +1,25 @@
|
|||
# Borg Backup for YunoHost
|
||||
[](https://dash.yunohost.org/appci/app/borg)  
|
||||
[](https://install-app.yunohost.org/?app=borg)
|
||||
<!--
|
||||
N.B.: This README was automatically generated by https://github.com/YunoHost/apps/tree/master/tools/README-generator
|
||||
It shall NOT be edited by hand.
|
||||
-->
|
||||
|
||||
A [Borg](https://borgbackup.readthedocs.io/en/stable/index.html#what-is-borgbackup) implementation to backup a YunoHost server. This is the Borg Backup App to be installed on a server to backup. It works together with a [Borg Server App](https://github.com/YunoHost-Apps/borgserver_ynh) installed on a host server.
|
||||
# Borg Backup for YunoHost
|
||||
|
||||
[](https://dash.yunohost.org/appci/app/borg)  
|
||||
|
||||
[](https://install-app.yunohost.org/?app=borg)
|
||||
|
||||
*[Lire ce readme en français.](./README_fr.md)*
|
||||
|
||||
> *This package allows you to install Borg Backup quickly and simply on a YunoHost server.
|
||||
If you don't have YunoHost, please consult [the guide](https://yunohost.org/#/install) to learn how to install it.*
|
||||
|
||||
## Overview
|
||||
|
||||
Backup your server on a host server using Borg
|
||||
|
||||
**Shipped version:** 1.1.16~ynh30
|
||||
## Disclaimers / important information
|
||||
|
||||
## :warning: NB. : This doc is partially obsolete and should be reworked! :warning:
|
||||
|
||||
|
@ -226,3 +243,23 @@ For instance:
|
|||
|
||||
### Settings location
|
||||
Settings of apps are in /etc/yunohost/apps/*/settings.yml, so are the settings for borg_ynh as well. Be careful though to not savagely manually edit them if you don't know what you're doing.
|
||||
|
||||
## Documentation and resources
|
||||
|
||||
* Official app website: <https://borgbackup.readthedocs.io>
|
||||
* YunoHost documentation for this app: <https://yunohost.org/app_borg>
|
||||
* Report a bug: <https://github.com/YunoHost-Apps/borg_ynh/issues>
|
||||
|
||||
## Developer info
|
||||
|
||||
Please send your pull request to the [testing branch](https://github.com/YunoHost-Apps/borg_ynh/tree/testing).
|
||||
|
||||
To try the testing branch, please proceed like that.
|
||||
|
||||
``` bash
|
||||
sudo yunohost app install https://github.com/YunoHost-Apps/borg_ynh/tree/testing --debug
|
||||
or
|
||||
sudo yunohost app upgrade borg -u https://github.com/YunoHost-Apps/borg_ynh/tree/testing --debug
|
||||
```
|
||||
|
||||
**More info regarding app packaging:** <https://yunohost.org/packaging_apps>
|
||||
|
|
265
README_fr.md
Normal file
265
README_fr.md
Normal file
|
@ -0,0 +1,265 @@
|
|||
<!--
|
||||
N.B.: This README was automatically generated by https://github.com/YunoHost/apps/tree/master/tools/README-generator
|
||||
It shall NOT be edited by hand.
|
||||
-->
|
||||
|
||||
# Borg Backup pour YunoHost
|
||||
|
||||
[](https://dash.yunohost.org/appci/app/borg)  
|
||||
|
||||
[](https://install-app.yunohost.org/?app=borg)
|
||||
|
||||
*[Read this readme in english.](./README.md)*
|
||||
|
||||
> *Ce package vous permet d’installer Borg Backup rapidement et simplement sur un serveur YunoHost.
|
||||
Si vous n’avez pas YunoHost, regardez [ici](https://yunohost.org/#/install) pour savoir comment l’installer et en profiter.*
|
||||
|
||||
## Vue d’ensemble
|
||||
|
||||
Sauvegardez votre serveur sur un serveur distant avec Borg
|
||||
|
||||
**Version incluse :** 1.1.16~ynh30
|
||||
## Avertissements / informations importantes
|
||||
|
||||
## :warning: NB. : This doc is partially obsolete and should be reworked! :warning:
|
||||
|
||||
## How to backup your server with this app?
|
||||
|
||||
You want to backup a critical "guest" Server A onto a remote "host" Server B, you need:
|
||||
* Domain name of server B: `host.serverb`
|
||||
* Name of the server B SSH user (to be created by `borgserver`) for connection from Server A: `borgservera`
|
||||
* **Strong passphrase** to encrypt your backups on host Server B. And to **restore your backups**!!
|
||||
* IDs of YunoHost apps you want to backup
|
||||
* Regular time schedule for your backups, see below
|
||||
* Install Borg Backup App (`borg`) on guest Server A
|
||||
* Install Borg Server App (`borgserver`) on host Server B
|
||||
* Save the passphrase in another place than your server. Without the passphrase, you won't be able to restore data.
|
||||
|
||||
You should received an email after the first backup succeeded.
|
||||
|
||||
### Set up Borg Backup App on guest Server A
|
||||
Firstly, set up the Borg Backup App (`borg`) on the guest Server A you want to backup:
|
||||
|
||||
```
|
||||
$ yunohost app install borg
|
||||
In which borg repository location do you want to backup your files ?: user@host.serverb:/remote/repository
|
||||
Provide a strong passphrase to encrypt your backups. No blank space:
|
||||
Should Borg backup your YunoHost configuration? [yes | no] (default: yes):
|
||||
Should Borg backup emails and user home directory? [yes | no] (default: yes):
|
||||
Which apps should Borg backup ? (default: all):
|
||||
With which regular time schedule should the backups be performed? (see systemd OnCalendar format) (default: Daily):
|
||||
Do you want admin to receive mail notifications on backups ? [always | errors_only | never]: never
|
||||
```
|
||||
|
||||
#### Syntax to define a backup time schedule
|
||||
You can schedule regular backups at specific time. Only one regular time schedule is possible for one `borg` instance, see below for workaround. Some examples:
|
||||
* Monthly :
|
||||
* Weekly :
|
||||
* Daily : Daily at midnight
|
||||
* Hourly : Hourly o Clock
|
||||
* Sat *-*-1..7 18:00:00 : The first saturday of every month at 18:00
|
||||
* 4:00 : Every day at 4 AM
|
||||
* 5,17:00 : Every day at 5 AM and at 5 PM
|
||||
See here for more info : https://wiki.archlinux.org/index.php/Systemd/Timers#Realtime_timer
|
||||
|
||||
#### Information generated by Borg Backup
|
||||
At the end of the installation, the Borg Backup App (``borg``) displays the SSH public key and the SSH user to give to the person who has access to the host Server B and will set up Borg Server App.
|
||||
```
|
||||
You should now install the "Borg Server" app on host.serverb and fill questions like this:
|
||||
User: servera
|
||||
Public key: ssh-ed25519 AAAA[...] root@guest.servera
|
||||
```
|
||||
This information is also sent by email to the admin of guest Server A.
|
||||
If you don't find the email and you don't see the message in the log bar you can find the SSH public key with this command:
|
||||
```
|
||||
$ cat /root/.ssh/id_borg_ed25519.pub
|
||||
ssh-ed25519 AAAA[...] root@guest.servera
|
||||
```
|
||||
|
||||
### Set up Borg Server App on host Server B
|
||||
Secondly, set up the Borg Server App (``borgserver``) on the host Server B that will store your backups:
|
||||
```
|
||||
$ yunohost app install borgserver
|
||||
Indicate the ssh user to create: servera
|
||||
Indicate the public key given by Borg Backup app (borg) setup: ssh-ed25519 AAAA[...] root@guest.servera
|
||||
Indicate the storage quota: 5G
|
||||
```
|
||||
|
||||
### Test the Borg Apps setup
|
||||
At this step your backup should run at the scheduled time. Note that the first backup can take very long, as much data has to be copied through ssh. Following backups are incremental: only newly generated data since last backup will be copied.
|
||||
|
||||
If you want to test correct Borg Apps setup before scheduled time, you can start a backup manually on guest Server A:
|
||||
```
|
||||
$ systemctl start borg
|
||||
```
|
||||
|
||||
Next you can check presence of your backup repository on host Server B:
|
||||
```
|
||||
$ BORG_RSH="ssh -i /root/.ssh/id_borg_ed25519 -oStrictHostKeyChecking=yes " borg list servera@host.serverb:~/backup
|
||||
```
|
||||
You will need the passphrase to run ``borg`` commands on the backup repository created on the host Server B.
|
||||
|
||||
## Check regularly your backup
|
||||
If you want to be sure to be able to restore your server, you should try to restore regularly the archives. But this process is quite time consumming.
|
||||
|
||||
You should at least:
|
||||
* Keep your apps up to date (if apps are too old, they could be difficult to restore on a more recent recent version)
|
||||
* Check regularly the presence of `info.json` and `db.sql` or `dump.sql` in your apps archives
|
||||
```
|
||||
borg list ./::ARCHIVE_NAME | grep info.json
|
||||
borg list ./::ARCHIVE_NAME | grep db.sql
|
||||
borg list ./::ARCHIVE_NAME | grep dump.sql
|
||||
```
|
||||
* Be sure to have your passphrase available even if your server is completely broken
|
||||
|
||||
## How to restore a complete system
|
||||
|
||||
*For infos on restoring process, check [this yunohost forum thread](https://forum.yunohost.org/t/restoring-whole-yunohost-from-borg-backups/12705/3) and [that one](https://forum.yunohost.org/t/how-to-properly-backup-and-restore/12583/3), also [using Borg with sshkeys](https://thisiscasperslife.wordpress.com/2017/11/28/using-borg-backup-across-ssh-with-sshkeys/), the [`borg extract` documentation](https://borgbackup.readthedocs.io/en/stable/usage/extract.html), and this [general tutorial on Borg Backup](https://practical-admin.com/blog/backups-using-borg/).*
|
||||
|
||||
In the following explanations:
|
||||
- the server to backup/restore will be called: `yuno`
|
||||
- the remote server that receives and store the back will be called: `rem`
|
||||
- `rem` is accessible at the domain `rem.tld`
|
||||
- the remote user on `rem` which owns the Borg backups will be called `yurem`
|
||||
- backup files will be stored in `rem` in the directory: `/home/yurem/backup`
|
||||
|
||||
|
||||
### Overview
|
||||
|
||||
The idea here, if you need to restore a whole yunohost system is:
|
||||
|
||||
1. Install a new Debian VM
|
||||
2. Install YunoHost in it the usual way
|
||||
3. Go through YunoHost postinstall (parameters you will supply are not crucial, as they will be replaced by the restore)
|
||||
4. Install Borg
|
||||
5. Setup `rem` to accept ssh connections from `yuno`
|
||||
6. Use Borg to import backups from `rem` to `yuno`
|
||||
7. Restore Borg backups with the `yunohost backup restore` command, first config, then data, then each app one at a time
|
||||
8. Remove the Borg app and restore it
|
||||
|
||||
### Make it possible for `yuno` to connect to `rem` with Borg
|
||||
|
||||
At this stage, we will assume that `yuno` is a freshly installed YunoHost (based on Buster in my case). You should also have performed the YunoHost postinstall.
|
||||
|
||||
If you don't want to restore the whole system, just some apps, you can skip some of the steps below.
|
||||
|
||||
#### Install the Borg YunoHost app in `yuno`
|
||||
|
||||
The idea here is just to install Borg, not in order to create backups, but only to use Borg commands to import remote backups.
|
||||
|
||||
So for example, you can install it doing the following:
|
||||
```bash
|
||||
sudo yunohost app install borg -a "server=rem.tld&ssh_user=yurem&conf=0&data=0&apps=hextris&on_calendar=2:30"
|
||||
```
|
||||
|
||||
#### Make sure that `rem` accepts ssh connections from `yuno`
|
||||
|
||||
In `yuno` you will need to get the ssh key that borg just created while installing: `sudo cat /root/.ssh/id_borg_ed25519.pub`, copy it to clipboard.
|
||||
|
||||
Connect via ssh to `rem`, go to `/home/yurem/.ssh/authorized_keys`, and past the Borg public key you got at previous step.
|
||||
|
||||
Now to make sure this worked, you can try to SSH from `yuno` to `rem`.
|
||||
In `yuno` : `ssh -i /root/.ssh/id_borg_ed25519 yurem@rem.tld` . If you can get into `rem` , without it prompting for a password, then you're good to continue :)
|
||||
|
||||
### Restore backups to `yuno`
|
||||
|
||||
⚠️ For the commands in the following section to work, you will need to be root in `yuno` (you can become root running `sudo su`).
|
||||
|
||||
⚠️ Restoration of backups can take quite a while, you'd better do them in a separate process, so that it doesn't stop if your terminal session gets closed. For this, you can for example use [tmux](https://www.howtogeek.com/671422/how-to-use-tmux-on-linux-and-why-its-better-than-screen/).
|
||||
|
||||
In `yuno` now, you should be able to list backups in `rem` with the following command:
|
||||
|
||||
```bash
|
||||
SRV=yurem@rem.tld:/home/yurem/backup
|
||||
BORG_RSH="ssh -i /root/.ssh/id_borg_ed25519 -oStrictHostKeyChecking=yes " borg list $SRV
|
||||
```
|
||||
|
||||
You can then reimport one to `yuno` with:
|
||||
|
||||
```bash
|
||||
BORG_RSH="ssh -i /root/.ssh/id_borg_ed25519 -oStrictHostKeyChecking=yes " borg export-tar $SRV::auto_BACKUP_NAME /home/yunohost.backup/archives/auto_BACKUP_NAME.tar.gz
|
||||
```
|
||||
|
||||
And then restore the archive in `yuno` with:
|
||||
|
||||
```bash
|
||||
yunohost backup restore auto_BACKUP_NAME --system # for config and data backups
|
||||
yunohost backup restore auto_BACKUP_NAME --apps # for other backups (=apps)
|
||||
```
|
||||
|
||||
### And Nextcloud? It's super heavy!!
|
||||
|
||||
For Nextcloud, the best is probably to reimport the backup without the data. And to import the data manually.
|
||||
|
||||
For that, you can do the following (as root):
|
||||
|
||||
```bash
|
||||
SRV=yurem@rem.tld:/home/yurem/backup
|
||||
|
||||
# export the app without data
|
||||
BORG_RSH="ssh -i /root/.ssh/id_borg_ed25519 -oStrictHostKeyChecking=yes " borg export-tar -e apps/nextcloud/backup/home/yunohost.app $SRV::auto_nextcloud_XX_XX_XX_XX:XX /home/yunohost.backup/archives/auto_nextcloud_XX_XX_XX_XX:XX.tar.gz
|
||||
|
||||
# extract the data from the backup to the nextcloud folder
|
||||
cd /home/yunohost.app/nextcloud
|
||||
BORG_RSH="ssh -i /root/.ssh/id_borg_ed25519 -oStrictHostKeyChecking=yes " borg extract $SRV::auto_nextcloud_XX_XX_XX_XX:XX apps/nextcloud/backup/home/yunohost.app/nextcloud/
|
||||
mv apps/nextcloud/backup/home/yunohost.app/nextcloud/data data
|
||||
rm -r apps
|
||||
|
||||
# now you can simply restore nextcloud app
|
||||
yunohost backup restore auto_nextcloud_XX_XX_XX_XX:XX --apps
|
||||
```
|
||||
|
||||
### Restore Borg
|
||||
|
||||
Once you've restored the whole system, you will probably want to restore the Borg app as well.
|
||||
|
||||
For that, remove the "dummy" Borg you installed to do the restoration, and restore Borg the same ways as for other apps:
|
||||
|
||||
```bash
|
||||
sudo yunohost app remove borg
|
||||
sudo yunohost backup restore auto_borg_XX_XX_XX_XX:XX --apps
|
||||
```
|
||||
|
||||
## Tips
|
||||
|
||||
### Edit the list of YunoHost apps to backup
|
||||
``yunohost app setting borg apps -v "nextcloud,wordpress"``
|
||||
|
||||
### Other usefull borg commands
|
||||
[Get the storage space used by the backup repository on the host server](https://borgbackup.readthedocs.io/en/stable/usage/info.html)
|
||||
``borg info /home/servera/backup``
|
||||
|
||||
### Backup YunoHost apps with different criticallity levels
|
||||
|
||||
If you want to backup your guest server:
|
||||
* with different YunoHost apps
|
||||
* at different regular time schedule
|
||||
* on different host servers
|
||||
|
||||
Then you can set up multiple instances of the Borg Apps on same servers.
|
||||
For instance:
|
||||
* Borg Backup instance ``borg``: backup nextcloud daily on host Server B
|
||||
* Borg Backup instance ``borg__2``: backup all other YunoHost apps weekly on host Server C
|
||||
|
||||
### Settings location
|
||||
Settings of apps are in /etc/yunohost/apps/*/settings.yml, so are the settings for borg_ynh as well. Be careful though to not savagely manually edit them if you don't know what you're doing.
|
||||
|
||||
## Documentations et ressources
|
||||
|
||||
* Site officiel de l’app : <https://borgbackup.readthedocs.io>
|
||||
* Documentation YunoHost pour cette app : <https://yunohost.org/app_borg>
|
||||
* Signaler un bug : <https://github.com/YunoHost-Apps/borg_ynh/issues>
|
||||
|
||||
## Informations pour les développeurs
|
||||
|
||||
Merci de faire vos pull request sur la [branche testing](https://github.com/YunoHost-Apps/borg_ynh/tree/testing).
|
||||
|
||||
Pour essayer la branche testing, procédez comme suit.
|
||||
|
||||
``` bash
|
||||
sudo yunohost app install https://github.com/YunoHost-Apps/borg_ynh/tree/testing --debug
|
||||
ou
|
||||
sudo yunohost app upgrade borg -u https://github.com/YunoHost-Apps/borg_ynh/tree/testing --debug
|
||||
```
|
||||
|
||||
**Plus d’infos sur le packaging d’applications :** <https://yunohost.org/packaging_apps>
|
|
@ -15,7 +15,7 @@
|
|||
setup_private=0
|
||||
setup_public=0
|
||||
upgrade=1
|
||||
upgrade=1 from_commit=c1524dd8e37cc671c01f5b5363901dd6a01e6fc1
|
||||
upgrade=1 from_commit=d1cd666ee27f5cfb8e40c6f44a09370381b41b35
|
||||
backup_restore=1
|
||||
multi_instance=1
|
||||
port_already_use=0
|
||||
|
@ -45,6 +45,6 @@
|
|||
Email=
|
||||
Notification=none
|
||||
;;; Upgrade options
|
||||
; commit=c1524dd8e37cc671c01f5b5363901dd6a01e6fc1
|
||||
name=Merge pull request #63 from YunoHost-Apps/testing
|
||||
manifest_arg=server=domain.tld:22&ssh_user=package_checker&passphrase=APassphrase&conf=1&data=1&apps=all&on_calendar=Daily
|
||||
; commit=d1cd666ee27f5cfb8e40c6f44a09370381b41b35
|
||||
name=Older ynh 11 version
|
||||
manifest_arg=server=domain.tld:22&ssh_user=package_checker&passphrase=APassphrase&conf=1&data=1&apps=all&on_calendar=Daily&mailalert=never
|
||||
|
|
1
doc/DECSRIPTION.md
Normal file
1
doc/DECSRIPTION.md
Normal file
|
@ -0,0 +1 @@
|
|||
A [Borg](https://borgbackup.readthedocs.io/en/stable/index.html#what-is-borgbackup) implementation to backup a YunoHost server. This is the Borg Backup App to be installed on a server to backup. It works together with a [Borg Server App](https://github.com/YunoHost-Apps/borgserver_ynh) installed on a host server.
|
222
doc/DISCLAIMER.md
Normal file
222
doc/DISCLAIMER.md
Normal file
|
@ -0,0 +1,222 @@
|
|||
## :warning: NB. : This doc is partially obsolete and should be reworked! :warning:
|
||||
|
||||
## How to backup your server with this app?
|
||||
|
||||
You want to backup a critical "guest" Server A onto a remote "host" Server B, you need:
|
||||
* Domain name of server B: `host.serverb`
|
||||
* Name of the server B SSH user (to be created by `borgserver`) for connection from Server A: `borgservera`
|
||||
* **Strong passphrase** to encrypt your backups on host Server B. And to **restore your backups**!!
|
||||
* IDs of YunoHost apps you want to backup
|
||||
* Regular time schedule for your backups, see below
|
||||
* Install Borg Backup App (`borg`) on guest Server A
|
||||
* Install Borg Server App (`borgserver`) on host Server B
|
||||
* Save the passphrase in another place than your server. Without the passphrase, you won't be able to restore data.
|
||||
|
||||
You should received an email after the first backup succeeded.
|
||||
|
||||
### Set up Borg Backup App on guest Server A
|
||||
Firstly, set up the Borg Backup App (`borg`) on the guest Server A you want to backup:
|
||||
|
||||
```
|
||||
$ yunohost app install borg
|
||||
In which borg repository location do you want to backup your files ?: user@host.serverb:/remote/repository
|
||||
Provide a strong passphrase to encrypt your backups. No blank space:
|
||||
Should Borg backup your YunoHost configuration? [yes | no] (default: yes):
|
||||
Should Borg backup emails and user home directory? [yes | no] (default: yes):
|
||||
Which apps should Borg backup ? (default: all):
|
||||
With which regular time schedule should the backups be performed? (see systemd OnCalendar format) (default: Daily):
|
||||
Do you want admin to receive mail notifications on backups ? [always | errors_only | never]: never
|
||||
```
|
||||
|
||||
#### Syntax to define a backup time schedule
|
||||
You can schedule regular backups at specific time. Only one regular time schedule is possible for one `borg` instance, see below for workaround. Some examples:
|
||||
* Monthly :
|
||||
* Weekly :
|
||||
* Daily : Daily at midnight
|
||||
* Hourly : Hourly o Clock
|
||||
* Sat *-*-1..7 18:00:00 : The first saturday of every month at 18:00
|
||||
* 4:00 : Every day at 4 AM
|
||||
* 5,17:00 : Every day at 5 AM and at 5 PM
|
||||
See here for more info : https://wiki.archlinux.org/index.php/Systemd/Timers#Realtime_timer
|
||||
|
||||
#### Information generated by Borg Backup
|
||||
At the end of the installation, the Borg Backup App (``borg``) displays the SSH public key and the SSH user to give to the person who has access to the host Server B and will set up Borg Server App.
|
||||
```
|
||||
You should now install the "Borg Server" app on host.serverb and fill questions like this:
|
||||
User: servera
|
||||
Public key: ssh-ed25519 AAAA[...] root@guest.servera
|
||||
```
|
||||
This information is also sent by email to the admin of guest Server A.
|
||||
If you don't find the email and you don't see the message in the log bar you can find the SSH public key with this command:
|
||||
```
|
||||
$ cat /root/.ssh/id_borg_ed25519.pub
|
||||
ssh-ed25519 AAAA[...] root@guest.servera
|
||||
```
|
||||
|
||||
### Set up Borg Server App on host Server B
|
||||
Secondly, set up the Borg Server App (``borgserver``) on the host Server B that will store your backups:
|
||||
```
|
||||
$ yunohost app install borgserver
|
||||
Indicate the ssh user to create: servera
|
||||
Indicate the public key given by Borg Backup app (borg) setup: ssh-ed25519 AAAA[...] root@guest.servera
|
||||
Indicate the storage quota: 5G
|
||||
```
|
||||
|
||||
### Test the Borg Apps setup
|
||||
At this step your backup should run at the scheduled time. Note that the first backup can take very long, as much data has to be copied through ssh. Following backups are incremental: only newly generated data since last backup will be copied.
|
||||
|
||||
If you want to test correct Borg Apps setup before scheduled time, you can start a backup manually on guest Server A:
|
||||
```
|
||||
$ systemctl start borg
|
||||
```
|
||||
|
||||
Next you can check presence of your backup repository on host Server B:
|
||||
```
|
||||
$ BORG_RSH="ssh -i /root/.ssh/id_borg_ed25519 -oStrictHostKeyChecking=yes " borg list servera@host.serverb:~/backup
|
||||
```
|
||||
You will need the passphrase to run ``borg`` commands on the backup repository created on the host Server B.
|
||||
|
||||
## Check regularly your backup
|
||||
If you want to be sure to be able to restore your server, you should try to restore regularly the archives. But this process is quite time consumming.
|
||||
|
||||
You should at least:
|
||||
* Keep your apps up to date (if apps are too old, they could be difficult to restore on a more recent recent version)
|
||||
* Check regularly the presence of `info.json` and `db.sql` or `dump.sql` in your apps archives
|
||||
```
|
||||
borg list ./::ARCHIVE_NAME | grep info.json
|
||||
borg list ./::ARCHIVE_NAME | grep db.sql
|
||||
borg list ./::ARCHIVE_NAME | grep dump.sql
|
||||
```
|
||||
* Be sure to have your passphrase available even if your server is completely broken
|
||||
|
||||
## How to restore a complete system
|
||||
|
||||
*For infos on restoring process, check [this yunohost forum thread](https://forum.yunohost.org/t/restoring-whole-yunohost-from-borg-backups/12705/3) and [that one](https://forum.yunohost.org/t/how-to-properly-backup-and-restore/12583/3), also [using Borg with sshkeys](https://thisiscasperslife.wordpress.com/2017/11/28/using-borg-backup-across-ssh-with-sshkeys/), the [`borg extract` documentation](https://borgbackup.readthedocs.io/en/stable/usage/extract.html), and this [general tutorial on Borg Backup](https://practical-admin.com/blog/backups-using-borg/).*
|
||||
|
||||
In the following explanations:
|
||||
- the server to backup/restore will be called: `yuno`
|
||||
- the remote server that receives and store the back will be called: `rem`
|
||||
- `rem` is accessible at the domain `rem.tld`
|
||||
- the remote user on `rem` which owns the Borg backups will be called `yurem`
|
||||
- backup files will be stored in `rem` in the directory: `/home/yurem/backup`
|
||||
|
||||
|
||||
### Overview
|
||||
|
||||
The idea here, if you need to restore a whole yunohost system is:
|
||||
|
||||
1. Install a new Debian VM
|
||||
2. Install YunoHost in it the usual way
|
||||
3. Go through YunoHost postinstall (parameters you will supply are not crucial, as they will be replaced by the restore)
|
||||
4. Install Borg
|
||||
5. Setup `rem` to accept ssh connections from `yuno`
|
||||
6. Use Borg to import backups from `rem` to `yuno`
|
||||
7. Restore Borg backups with the `yunohost backup restore` command, first config, then data, then each app one at a time
|
||||
8. Remove the Borg app and restore it
|
||||
|
||||
### Make it possible for `yuno` to connect to `rem` with Borg
|
||||
|
||||
At this stage, we will assume that `yuno` is a freshly installed YunoHost (based on Buster in my case). You should also have performed the YunoHost postinstall.
|
||||
|
||||
If you don't want to restore the whole system, just some apps, you can skip some of the steps below.
|
||||
|
||||
#### Install the Borg YunoHost app in `yuno`
|
||||
|
||||
The idea here is just to install Borg, not in order to create backups, but only to use Borg commands to import remote backups.
|
||||
|
||||
So for example, you can install it doing the following:
|
||||
```bash
|
||||
sudo yunohost app install borg -a "server=rem.tld&ssh_user=yurem&conf=0&data=0&apps=hextris&on_calendar=2:30"
|
||||
```
|
||||
|
||||
#### Make sure that `rem` accepts ssh connections from `yuno`
|
||||
|
||||
In `yuno` you will need to get the ssh key that borg just created while installing: `sudo cat /root/.ssh/id_borg_ed25519.pub`, copy it to clipboard.
|
||||
|
||||
Connect via ssh to `rem`, go to `/home/yurem/.ssh/authorized_keys`, and past the Borg public key you got at previous step.
|
||||
|
||||
Now to make sure this worked, you can try to SSH from `yuno` to `rem`.
|
||||
In `yuno` : `ssh -i /root/.ssh/id_borg_ed25519 yurem@rem.tld` . If you can get into `rem` , without it prompting for a password, then you're good to continue :)
|
||||
|
||||
### Restore backups to `yuno`
|
||||
|
||||
⚠️ For the commands in the following section to work, you will need to be root in `yuno` (you can become root running `sudo su`).
|
||||
|
||||
⚠️ Restoration of backups can take quite a while, you'd better do them in a separate process, so that it doesn't stop if your terminal session gets closed. For this, you can for example use [tmux](https://www.howtogeek.com/671422/how-to-use-tmux-on-linux-and-why-its-better-than-screen/).
|
||||
|
||||
In `yuno` now, you should be able to list backups in `rem` with the following command:
|
||||
|
||||
```bash
|
||||
SRV=yurem@rem.tld:/home/yurem/backup
|
||||
BORG_RSH="ssh -i /root/.ssh/id_borg_ed25519 -oStrictHostKeyChecking=yes " borg list $SRV
|
||||
```
|
||||
|
||||
You can then reimport one to `yuno` with:
|
||||
|
||||
```bash
|
||||
BORG_RSH="ssh -i /root/.ssh/id_borg_ed25519 -oStrictHostKeyChecking=yes " borg export-tar $SRV::auto_BACKUP_NAME /home/yunohost.backup/archives/auto_BACKUP_NAME.tar.gz
|
||||
```
|
||||
|
||||
And then restore the archive in `yuno` with:
|
||||
|
||||
```bash
|
||||
yunohost backup restore auto_BACKUP_NAME --system # for config and data backups
|
||||
yunohost backup restore auto_BACKUP_NAME --apps # for other backups (=apps)
|
||||
```
|
||||
|
||||
### And Nextcloud? It's super heavy!!
|
||||
|
||||
For Nextcloud, the best is probably to reimport the backup without the data. And to import the data manually.
|
||||
|
||||
For that, you can do the following (as root):
|
||||
|
||||
```bash
|
||||
SRV=yurem@rem.tld:/home/yurem/backup
|
||||
|
||||
# export the app without data
|
||||
BORG_RSH="ssh -i /root/.ssh/id_borg_ed25519 -oStrictHostKeyChecking=yes " borg export-tar -e apps/nextcloud/backup/home/yunohost.app $SRV::auto_nextcloud_XX_XX_XX_XX:XX /home/yunohost.backup/archives/auto_nextcloud_XX_XX_XX_XX:XX.tar.gz
|
||||
|
||||
# extract the data from the backup to the nextcloud folder
|
||||
cd /home/yunohost.app/nextcloud
|
||||
BORG_RSH="ssh -i /root/.ssh/id_borg_ed25519 -oStrictHostKeyChecking=yes " borg extract $SRV::auto_nextcloud_XX_XX_XX_XX:XX apps/nextcloud/backup/home/yunohost.app/nextcloud/
|
||||
mv apps/nextcloud/backup/home/yunohost.app/nextcloud/data data
|
||||
rm -r apps
|
||||
|
||||
# now you can simply restore nextcloud app
|
||||
yunohost backup restore auto_nextcloud_XX_XX_XX_XX:XX --apps
|
||||
```
|
||||
|
||||
### Restore Borg
|
||||
|
||||
Once you've restored the whole system, you will probably want to restore the Borg app as well.
|
||||
|
||||
For that, remove the "dummy" Borg you installed to do the restoration, and restore Borg the same ways as for other apps:
|
||||
|
||||
```bash
|
||||
sudo yunohost app remove borg
|
||||
sudo yunohost backup restore auto_borg_XX_XX_XX_XX:XX --apps
|
||||
```
|
||||
|
||||
## Tips
|
||||
|
||||
### Edit the list of YunoHost apps to backup
|
||||
``yunohost app setting borg apps -v "nextcloud,wordpress"``
|
||||
|
||||
### Other usefull borg commands
|
||||
[Get the storage space used by the backup repository on the host server](https://borgbackup.readthedocs.io/en/stable/usage/info.html)
|
||||
``borg info /home/servera/backup``
|
||||
|
||||
### Backup YunoHost apps with different criticallity levels
|
||||
|
||||
If you want to backup your guest server:
|
||||
* with different YunoHost apps
|
||||
* at different regular time schedule
|
||||
* on different host servers
|
||||
|
||||
Then you can set up multiple instances of the Borg Apps on same servers.
|
||||
For instance:
|
||||
* Borg Backup instance ``borg``: backup nextcloud daily on host Server B
|
||||
* Borg Backup instance ``borg__2``: backup all other YunoHost apps weekly on host Server C
|
||||
|
||||
### Settings location
|
||||
Settings of apps are in /etc/yunohost/apps/*/settings.yml, so are the settings for borg_ynh as well. Be careful though to not savagely manually edit them if you don't know what you're doing.
|
|
@ -3,11 +3,15 @@
|
|||
"id": "borg",
|
||||
"packaging_format": 1,
|
||||
"description": {
|
||||
"en": "Backup your server on a host server using Borg.",
|
||||
"fr": "Sauvegardez votre serveur sur un serveur distant avec Borg."
|
||||
"en": "Backup your server on a host server using Borg",
|
||||
"fr": "Sauvegardez votre serveur sur un serveur distant avec Borg"
|
||||
},
|
||||
"version": "1.1.16~ynh29",
|
||||
"version": "1.1.16~ynh30",
|
||||
"url": "https://borgbackup.readthedocs.io",
|
||||
"upstream": {
|
||||
"license": "BSD-3-Clause",
|
||||
"website": "https://borgbackup.readthedocs.io"
|
||||
},
|
||||
"license": "BSD-3-Clause",
|
||||
"maintainer": {
|
||||
"name": "ljf",
|
||||
|
@ -15,7 +19,7 @@
|
|||
"url": "https://reflexlibre.net"
|
||||
},
|
||||
"requirements": {
|
||||
"yunohost": ">= 4.3.0"
|
||||
"yunohost": ">= 11.0.9"
|
||||
},
|
||||
"multi_instance": true,
|
||||
"services": [],
|
||||
|
@ -59,7 +63,7 @@
|
|||
"type": "boolean",
|
||||
"ask": {
|
||||
"en": "Should Borg backup emails and user home directory?",
|
||||
"fr": "Borg doit-elle sauvegarder les mails et les répertoires des utilisateurs ?"
|
||||
"fr": "Borg doit-il sauvegarder les mails et les répertoires des utilisateurs ?"
|
||||
},
|
||||
"default": true
|
||||
},
|
||||
|
|
Loading…
Add table
Reference in a new issue