mirror of
https://github.com/ZettaIO/restic-compose-backup.git
synced 2025-10-10 12:20:58 +00:00
Compare commits
53 Commits
Author | SHA1 | Date | |
---|---|---|---|
|
74c0954e6f | ||
|
f6995eb506 | ||
|
ef28baed5e | ||
|
336cace237 | ||
|
cab4676b91 | ||
|
d002ad9390 | ||
|
98a10bf994 | ||
|
2535ce3421 | ||
|
8858f88ba4 | ||
|
c5b7f11db7 | ||
|
a099060b2e | ||
|
dd40152fe1 | ||
|
f77d61410d | ||
|
272244fecf | ||
|
7b2ffd8e7c | ||
|
be173ff5cb | ||
|
df92579e10 | ||
|
fb3c564d7a | ||
|
151f3cfeeb | ||
|
2848738789 | ||
|
cf402d77ed | ||
|
ae835f30d3 | ||
|
1e21ff422f | ||
|
6347529701 | ||
|
3dacc0bfab | ||
|
fa14880742 | ||
|
5eb773eb34 | ||
|
e8123922df | ||
|
be74715595 | ||
|
515702ae78 | ||
|
ff49d9c018 | ||
|
187787425a | ||
|
fa1c982bf5 | ||
|
2bbd329047 | ||
|
8097ac79af | ||
|
5082244949 | ||
|
d9e5a62458 | ||
|
6085f5fc03 | ||
|
d89ed781ef | ||
|
e2dec9ffa0 | ||
|
2b3a702f21 | ||
|
3456e1a899 | ||
|
105cdbb65e | ||
|
d671ffb626 | ||
|
f988b42881 | ||
|
5d653c2c3c | ||
|
c80b2774d4 | ||
|
12da998538 | ||
|
d17d776339 | ||
|
758c3075f1 | ||
|
9cad6a5c71 | ||
|
4ebe16af14 | ||
|
fd87ddc388 |
BIN
.github/logo.png
vendored
Normal file
BIN
.github/logo.png
vendored
Normal file
Binary file not shown.
After Width: | Height: | Size: 6.1 KiB |
3
.gitignore
vendored
3
.gitignore
vendored
@@ -21,9 +21,10 @@ restic_data/
|
|||||||
restic_cache/
|
restic_cache/
|
||||||
alerts.env
|
alerts.env
|
||||||
|
|
||||||
# docs
|
# build
|
||||||
build/
|
build/
|
||||||
docs/_build
|
docs/_build
|
||||||
|
dist
|
||||||
|
|
||||||
# tests
|
# tests
|
||||||
.tox
|
.tox
|
||||||
|
17
.travis.yml
Normal file
17
.travis.yml
Normal file
@@ -0,0 +1,17 @@
|
|||||||
|
language: python
|
||||||
|
|
||||||
|
sudo: false
|
||||||
|
|
||||||
|
matrix:
|
||||||
|
include:
|
||||||
|
python: 3.7
|
||||||
|
dist: bionic
|
||||||
|
sudo: true
|
||||||
|
|
||||||
|
install:
|
||||||
|
- pip install -U setuptools pip wheel
|
||||||
|
- pip install -r src/tests/requirements.txt
|
||||||
|
- pip install ./src
|
||||||
|
|
||||||
|
script:
|
||||||
|
- tox
|
203
README.md
203
README.md
@@ -3,7 +3,8 @@
|
|||||||
|
|
||||||

|

|
||||||
|
|
||||||
Backup using https://restic.net/ for a docker-compose setup.
|
Backup using [restic] for a docker-compose setup.
|
||||||
|
Currently tested with docker-ce 17, 18 and 19.
|
||||||
|
|
||||||
* [restic-compose-backup Documentation](https://restic-compose-backup.readthedocs.io)
|
* [restic-compose-backup Documentation](https://restic-compose-backup.readthedocs.io)
|
||||||
* [restic-compose-backup on Github](https://github.com/ZettaIO/restic-compose-backup)
|
* [restic-compose-backup on Github](https://github.com/ZettaIO/restic-compose-backup)
|
||||||
@@ -11,175 +12,145 @@ Backup using https://restic.net/ for a docker-compose setup.
|
|||||||
|
|
||||||
Features:
|
Features:
|
||||||
|
|
||||||
* Back up docker volumes or host binds
|
* Backs up docker volumes or host binds
|
||||||
* Back up mariadb postgres
|
* Backs up postgres, mariadb and mysql databases
|
||||||
* Back up mariadb databases
|
* Notifications over mail/smtp or Discord webhooks
|
||||||
* Back up mysql databases
|
|
||||||
* Notifications over mail/smtp
|
|
||||||
* Notifications to Discord through webhooks
|
|
||||||
|
|
||||||
Please report issus on [github](https://github.com/ZettaIO/restic-compose-backup/issues).
|
Please report issus on [github](https://github.com/ZettaIO/restic-compose-backup/issues).
|
||||||
|
|
||||||
Automatically detects and backs up volumes, mysql, mariadb and postgres databases in a docker-compose setup.
|
|
||||||
|
|
||||||
* Each service in the compose setup is configured with a label
|
|
||||||
to enable backup of volumes or databases
|
|
||||||
* When backup starts a new instance of the container is created
|
|
||||||
mapping in all the needed volumes. It will copy networks etc
|
|
||||||
to ensure databases can be reached
|
|
||||||
* Volumes are mounted to `/volumes/<service_name>/<path>`
|
|
||||||
in the backup process container. `/volumes` is pushed into restic
|
|
||||||
* Databases are backed up from stdin / dumps into restic using path `/databases/<service_name>/dump.sql`
|
|
||||||
* Cron triggers backup at 2AM every day
|
|
||||||
|
|
||||||
## Install
|
## Install
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
docker pull zettaio/restic-compose-backup
|
docker pull zettaio/restic-compose-backup
|
||||||
```
|
```
|
||||||
|
|
||||||
## Configuration
|
## Configuration (env vars)
|
||||||
|
|
||||||
Required env variables for restic:
|
Minimum configuration
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
RESTIC_REPOSITORY
|
RESTIC_REPOSITORY
|
||||||
RESTIC_PASSWORD
|
RESTIC_PASSWORD
|
||||||
```
|
```
|
||||||
|
|
||||||
Backend specific env vars : https://restic.readthedocs.io/en/stable/040_backup.html#environment-variables
|
More config options can be found in the [documentation].
|
||||||
|
|
||||||
Additional env vars:
|
Restic backend specific env vars : https://restic.readthedocs.io/en/stable/040_backup.html#environment-variables
|
||||||
|
|
||||||
|
## Compose Example
|
||||||
|
|
||||||
|
We simply control what should be backed up by adding
|
||||||
|
labels to our containers. More details are covered
|
||||||
|
in the [documentation].
|
||||||
|
|
||||||
|
restic-backup.env
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
# Prune rules
|
RESTIC_REPOSITORY=<whatever backend restic supports>
|
||||||
|
RESTIC_PASSWORD=hopefullyasecturepw
|
||||||
|
# snapshot prune rules
|
||||||
RESTIC_KEEP_DAILY=7
|
RESTIC_KEEP_DAILY=7
|
||||||
RESTIC_KEEP_WEEKLY=4
|
RESTIC_KEEP_WEEKLY=4
|
||||||
RESTIC_KEEP_MONTHLY=12
|
RESTIC_KEEP_MONTHLY=12
|
||||||
RESTIC_KEEP_YEARLY=3
|
RESTIC_KEEP_YEARLY=3
|
||||||
|
# Cron schedule. Run every day at 1am
|
||||||
# Logging level (debug,info,warning,error)
|
CRON_SCHEDULE="0 1 * * *"
|
||||||
LOG_LEVEL=info
|
|
||||||
|
|
||||||
# SMTP alerts
|
|
||||||
EMAIL_HOST=my.mail.host
|
|
||||||
EMAIL_PORT=465
|
|
||||||
EMAIL_HOST_USER=johndoe
|
|
||||||
EMAIL_HOST_PASSWORD=s3cr3tpassw0rd
|
|
||||||
EMAIL_SEND_TO=johndoe@gmail.com
|
|
||||||
|
|
||||||
# Discord webhook
|
|
||||||
DISCORD_WEBHOOK=https://discordapp.com/api/webhooks/...
|
|
||||||
```
|
```
|
||||||
|
|
||||||
### Volumes
|
docker-compose.yaml
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
version: '3'
|
version: '3'
|
||||||
services:
|
services:
|
||||||
# The backup service
|
# The backup service
|
||||||
backup:
|
backup:
|
||||||
image: zettaio/restic-compose-backup
|
image: zettaio/restic-compose-backup:<version>
|
||||||
environment:
|
|
||||||
- RESTIC_REPOSITORY=<whatever restic supports>
|
|
||||||
- RESTIC_PASSWORD=hopefullyasecturepw
|
|
||||||
- RESTIC_KEEP_DAILY=7
|
|
||||||
- RESTIC_KEEP_WEEKLY=4
|
|
||||||
- RESTIC_KEEP_MONTHLY=12
|
|
||||||
- RESTIC_KEEP_YEARLY=3
|
|
||||||
env_file:
|
env_file:
|
||||||
- some_other_vars.env
|
- restic-backup.env
|
||||||
volumes:
|
volumes:
|
||||||
|
# We need to communicate with docker
|
||||||
- /var/run/docker.sock:/tmp/docker.sock:ro
|
- /var/run/docker.sock:/tmp/docker.sock:ro
|
||||||
|
# Persistent storage of restic cache (greatly speeds up all restic operations)
|
||||||
example:
|
- cache:/cache
|
||||||
|
web:
|
||||||
image: some_image
|
image: some_image
|
||||||
# Enable volume backup with label
|
|
||||||
labels:
|
labels:
|
||||||
|
# Enables backup of the volumes below
|
||||||
restic-compose-backup.volumes: true
|
restic-compose-backup.volumes: true
|
||||||
# These volumes will be backed up
|
|
||||||
volumes:
|
volumes:
|
||||||
# Docker volume
|
|
||||||
- media:/srv/media
|
- media:/srv/media
|
||||||
# Host map
|
|
||||||
- /srv/files:/srv/files
|
- /srv/files:/srv/files
|
||||||
|
|
||||||
volumes:
|
|
||||||
media:
|
|
||||||
```
|
|
||||||
|
|
||||||
A simple `include` and `exclude` filter is also available.
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
example:
|
|
||||||
image: some_image
|
|
||||||
labels:
|
|
||||||
restic-compose-backup.volumes: true
|
|
||||||
restic-compose-backup.volumes.include: "files,data"
|
|
||||||
volumes:
|
|
||||||
# Source don't match include filter. No backup.
|
|
||||||
- media:/srv/media
|
|
||||||
# Matches include filter
|
|
||||||
- files:/srv/files
|
|
||||||
- /srv/data:/srv/data
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
media:
|
|
||||||
files:
|
|
||||||
|
|
||||||
```
|
|
||||||
|
|
||||||
Exclude
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
example:
|
|
||||||
image: some_image
|
|
||||||
labels:
|
|
||||||
restic-compose-backup.volumes: true
|
|
||||||
restic-compose-backup.volumes.exclude: "media"
|
|
||||||
volumes:
|
|
||||||
# Excluded by filter
|
|
||||||
- media:/srv/media
|
|
||||||
# Backed up
|
|
||||||
- files:/srv/files
|
|
||||||
- /srv/data:/srv/data
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
media:
|
|
||||||
files:
|
|
||||||
```
|
|
||||||
|
|
||||||
### Databases
|
|
||||||
|
|
||||||
Will dump databases directly into restic through stdin.
|
|
||||||
They will appear in restic as a separate snapshot with
|
|
||||||
path `/databases/<service_name>/dump.sql` or similar.
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
mariadb:
|
mariadb:
|
||||||
image: mariadb:10
|
image: mariadb:10
|
||||||
labels:
|
labels:
|
||||||
|
# Enables backup of this database
|
||||||
restic-compose-backup.mariadb: true
|
restic-compose-backup.mariadb: true
|
||||||
```
|
env_file:
|
||||||
|
mariadb-credentials.env
|
||||||
```yaml
|
volumes:
|
||||||
|
- mysqldata:/var/lib/mysql
|
||||||
mysql:
|
mysql:
|
||||||
image: mysql:5
|
image: mysql:5
|
||||||
labels:
|
labels:
|
||||||
|
# Enables backup of this database
|
||||||
restic-compose-backup.mysql: true
|
restic-compose-backup.mysql: true
|
||||||
```
|
env_file:
|
||||||
|
mysql-credentials.env
|
||||||
|
volumes:
|
||||||
|
- mysqldata:/var/lib/mysql
|
||||||
|
|
||||||
```yaml
|
|
||||||
postgres:
|
postgres:
|
||||||
image: postgres
|
image: postgres
|
||||||
labels:
|
labels:
|
||||||
|
# Enables backup of this database
|
||||||
restic-compose-backup.postgres: true
|
restic-compose-backup.postgres: true
|
||||||
|
env_file:
|
||||||
|
postgres-credentials.env
|
||||||
|
volumes:
|
||||||
|
- pgdata:/var/lib/postgresql/data
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
media:
|
||||||
|
mysqldata:
|
||||||
|
mariadbdata:
|
||||||
|
pgdata:
|
||||||
|
cache:
|
||||||
```
|
```
|
||||||
|
|
||||||
|
## The `rcb` command
|
||||||
|
|
||||||
|
Everything is controlled using the `rcb` command.
|
||||||
|
After configuring backup with labels and restarted
|
||||||
|
the affected services we can quickly view the
|
||||||
|
result using the `status` subcommand.
|
||||||
|
|
||||||
|
```bash
|
||||||
|
$ docker-compose run --rm backup rcb status
|
||||||
|
INFO: Status for compose project 'myproject'
|
||||||
|
INFO: Repository: '<restic repository>'
|
||||||
|
INFO: Backup currently running?: False
|
||||||
|
INFO: --------------- Detected Config ---------------
|
||||||
|
INFO: service: mysql
|
||||||
|
INFO: - mysql (is_ready=True)
|
||||||
|
INFO: service: mariadb
|
||||||
|
INFO: - mariadb (is_ready=True)
|
||||||
|
INFO: service: postgres
|
||||||
|
INFO: - postgres (is_ready=True)
|
||||||
|
INFO: service: web
|
||||||
|
INFO: - volume: media
|
||||||
|
INFO: - volume: /srv/files
|
||||||
|
```
|
||||||
|
|
||||||
|
The `status` subcommand lists what will be backed up and
|
||||||
|
even pings the database services checking their availability.
|
||||||
|
The `restic` command can also be used directly in the container.
|
||||||
|
|
||||||
|
More `rcb` commands can be found in the [documentation].
|
||||||
|
|
||||||
## Running Tests
|
## Running Tests
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
pip install -e src/
|
pip install -e ./src/
|
||||||
pip install -r src/tests/requirements.txt
|
pip install -r src/tests/requirements.txt
|
||||||
tox
|
tox
|
||||||
```
|
```
|
||||||
@@ -194,3 +165,11 @@ python src/setup.py build_sphinx
|
|||||||
## Contributing
|
## Contributing
|
||||||
|
|
||||||
Contributions are welcome regardless of experience level. Don't hesitate submitting issues, opening partial or completed pull requests.
|
Contributions are welcome regardless of experience level. Don't hesitate submitting issues, opening partial or completed pull requests.
|
||||||
|
|
||||||
|
[restic]: https://restic.net/
|
||||||
|
[documentation]: https://restic-compose-backup.readthedocs.io
|
||||||
|
|
||||||
|
---
|
||||||
|
This project is sponsored by [zetta.io](https://www.zetta.io)
|
||||||
|
|
||||||
|
[](https://www.zetta.io)
|
||||||
|
@@ -5,11 +5,15 @@ services:
|
|||||||
env_file:
|
env_file:
|
||||||
- restic_compose_backup.env
|
- restic_compose_backup.env
|
||||||
- alerts.env
|
- alerts.env
|
||||||
|
labels:
|
||||||
|
restic-compose-backup.volumes: true
|
||||||
|
restic-compose-backup.volumes.include: 'src'
|
||||||
volumes:
|
volumes:
|
||||||
# Map in docker socket
|
# Map in docker socket
|
||||||
- /var/run/docker.sock:/tmp/docker.sock:ro
|
- /var/run/docker.sock:/tmp/docker.sock:ro
|
||||||
# Map backup database locally
|
# Map local restic repository for dev
|
||||||
- ./restic_data:/restic_data
|
- ./restic_data:/restic_data
|
||||||
|
# Map restic cache
|
||||||
- ./restic_cache:/cache
|
- ./restic_cache:/cache
|
||||||
# Map in project source in dev
|
# Map in project source in dev
|
||||||
- ./src:/restic-compose-backup
|
- ./src:/restic-compose-backup
|
||||||
@@ -19,7 +23,7 @@ services:
|
|||||||
restic-compose-backup.volumes: true
|
restic-compose-backup.volumes: true
|
||||||
restic-compose-backup.volumes.include: "/tests"
|
restic-compose-backup.volumes.include: "/tests"
|
||||||
volumes:
|
volumes:
|
||||||
- ./tests:/srv/tests
|
- ./src/tests:/srv/tests
|
||||||
- ./.vscode:/srv/code
|
- ./.vscode:/srv/code
|
||||||
environment:
|
environment:
|
||||||
- SOME_VALUE=test
|
- SOME_VALUE=test
|
||||||
|
@@ -22,7 +22,7 @@ copyright = '2019, Zetta.IO Technology AS'
|
|||||||
author = 'Zetta.IO Technology AS'
|
author = 'Zetta.IO Technology AS'
|
||||||
|
|
||||||
# The full version, including alpha/beta/rc tags
|
# The full version, including alpha/beta/rc tags
|
||||||
release = '0.3.2'
|
release = '0.4.2'
|
||||||
|
|
||||||
# -- General configuration ---------------------------------------------------
|
# -- General configuration ---------------------------------------------------
|
||||||
|
|
||||||
|
30
docs/guide/advanced.rst
Normal file
30
docs/guide/advanced.rst
Normal file
@@ -0,0 +1,30 @@
|
|||||||
|
Advanced
|
||||||
|
--------
|
||||||
|
|
||||||
|
Currently work in progress. These are only notes :D
|
||||||
|
|
||||||
|
Temp Notes
|
||||||
|
~~~~~~~~~~
|
||||||
|
|
||||||
|
* Quick setup guide from start to end
|
||||||
|
* we group snapshots by path when forgetting
|
||||||
|
* explain rcb commands
|
||||||
|
* examples of using restic directly
|
||||||
|
* Explain what happens during backup process
|
||||||
|
* Explain the backup process container
|
||||||
|
* cache directory
|
||||||
|
* Not displaying passwords in logs
|
||||||
|
|
||||||
|
Inner workings
|
||||||
|
~~~~~~~~~~~~~~
|
||||||
|
|
||||||
|
* Each service in the compose setup is configured with a label
|
||||||
|
to enable backup of volumes or databases
|
||||||
|
* When backup starts a new instance of the container is created
|
||||||
|
mapping in all the needed volumes. It will copy networks etc
|
||||||
|
to ensure databases can be reached
|
||||||
|
* Volumes are mounted to `/volumes/<service_name>/<path>`
|
||||||
|
in the backup process container. `/volumes` is pushed into restic
|
||||||
|
* Databases are backed up from stdin / dumps into restic using path
|
||||||
|
`/databases/<service_name>/dump.sql`
|
||||||
|
* Cron triggers backup at 2AM every day
|
420
docs/guide/configuration.rst
Normal file
420
docs/guide/configuration.rst
Normal file
@@ -0,0 +1,420 @@
|
|||||||
|
Configuration
|
||||||
|
=============
|
||||||
|
|
||||||
|
Environment Variables
|
||||||
|
---------------------
|
||||||
|
|
||||||
|
RESTIC_REPOSITORY
|
||||||
|
~~~~~~~~~~~~~~~~~
|
||||||
|
|
||||||
|
Sets the restic repository path.
|
||||||
|
|
||||||
|
This is a standard environment variable
|
||||||
|
the ``restic`` command will read making it simple for
|
||||||
|
us to enter the container and use the restic command directly.
|
||||||
|
|
||||||
|
More about this value and supported backends:
|
||||||
|
https://restic.readthedocs.io/en/stable/030_preparing_a_new_repo.html
|
||||||
|
|
||||||
|
RESTIC_PASSWORD
|
||||||
|
~~~~~~~~~~~~~~~
|
||||||
|
|
||||||
|
Sets the password is used to encrypt/decrypt data.
|
||||||
|
Losing this password will make recovery impossible.
|
||||||
|
|
||||||
|
This is a standard environment variable the ``restic``
|
||||||
|
command will read making it simple for us to enter the
|
||||||
|
container running the command directly.
|
||||||
|
|
||||||
|
RESTIC_KEEP_DAILY
|
||||||
|
~~~~~~~~~~~~~~~~~
|
||||||
|
|
||||||
|
**Default value**: ``7``
|
||||||
|
|
||||||
|
How many daily snapshots (grouped by path) back in time we
|
||||||
|
want to keep. This is passed to restic in the
|
||||||
|
``forget --keep-daily`` option.
|
||||||
|
|
||||||
|
RESTIC_KEEP_WEEKLY
|
||||||
|
~~~~~~~~~~~~~~~~~~
|
||||||
|
|
||||||
|
**Default value**: ``4``
|
||||||
|
|
||||||
|
How many weeks back we should keep at least one snapshot
|
||||||
|
(grouped by path). This is passed to restic in the
|
||||||
|
``forget --keep-weekly`` option.
|
||||||
|
|
||||||
|
RESTIC_KEEP_MONTHLY
|
||||||
|
~~~~~~~~~~~~~~~~~~~
|
||||||
|
|
||||||
|
**Default value**: ``12``
|
||||||
|
|
||||||
|
How many months back we should keep at least on snapshot
|
||||||
|
(grouped by path). This is passed to restic in the
|
||||||
|
``forget --keep-monthly`` option.
|
||||||
|
|
||||||
|
The schedule parameters only accepts numeric values
|
||||||
|
and is validated when the container starts. Providing
|
||||||
|
values cron does not understand will stall all backup.
|
||||||
|
|
||||||
|
RESTIC_KEEP_YEARLY
|
||||||
|
~~~~~~~~~~~~~~~~~~
|
||||||
|
|
||||||
|
**Default value**: ``3``
|
||||||
|
|
||||||
|
How many years back we should keep at least one snapshot
|
||||||
|
(grouped by path). This is passed to restic in the
|
||||||
|
``forget --keep-yearly`` option.
|
||||||
|
|
||||||
|
CRON_SCHEDULE
|
||||||
|
~~~~~~~~~~~~~
|
||||||
|
|
||||||
|
**Default value**: ``0 2 * * *`` (daily at 02:00)
|
||||||
|
|
||||||
|
The cron schedule parameters. The crontab is generated when the
|
||||||
|
container starts from the ``CRON_SCHEDULE`` and ``CRON_COMMAND``
|
||||||
|
env variables.
|
||||||
|
|
||||||
|
.. code::
|
||||||
|
|
||||||
|
┌───────────── minute (0 - 59)
|
||||||
|
│ ┌───────────── hour (0 - 23)
|
||||||
|
│ │ ┌───────────── day of the month (1 - 31)
|
||||||
|
│ │ │ ┌───────────── month (1 - 12)
|
||||||
|
│ │ │ │ ┌───────────── day of the week (0 - 6) (Sunday to Saturday)
|
||||||
|
│ │ │ │ │
|
||||||
|
│ │ │ │ │
|
||||||
|
│ │ │ │ │
|
||||||
|
* * * * * command to execute
|
||||||
|
|
||||||
|
CRON_COMMAND
|
||||||
|
~~~~~~~~~~~~
|
||||||
|
|
||||||
|
**Default value**: ``source /env.sh && rcb backup > /proc/1/fd/1``
|
||||||
|
|
||||||
|
The command executed in the crontab. A single line is generated when
|
||||||
|
the container starts from the ``CRON_SCHEDULE`` and ``CRON_COMMAND``
|
||||||
|
environment variables.
|
||||||
|
|
||||||
|
The default command sources a dump of all env vars, runs the
|
||||||
|
backup command and directs output to pid 1 so it appears in
|
||||||
|
docker logs.
|
||||||
|
|
||||||
|
By default the crontab will look like this::
|
||||||
|
|
||||||
|
0 2 * * * source /env.sh && rcb backup > /proc/1/fd/1
|
||||||
|
|
||||||
|
LOG_LEVEL
|
||||||
|
~~~~~~~~~
|
||||||
|
|
||||||
|
**Default value**: ``info``
|
||||||
|
|
||||||
|
Log level for the ``rcb`` command. Valid values are
|
||||||
|
``debug``, ``info``, ``warning``, ``error``.
|
||||||
|
|
||||||
|
EMAIL_HOST
|
||||||
|
~~~~~~~~~~
|
||||||
|
|
||||||
|
The email host to use.
|
||||||
|
|
||||||
|
Alerts can be tested using the ``rcb alerts`` command.
|
||||||
|
This will send a test message to all configured alert
|
||||||
|
backends.
|
||||||
|
|
||||||
|
EMAIL_PORT
|
||||||
|
~~~~~~~~~~
|
||||||
|
|
||||||
|
The port to connect to
|
||||||
|
|
||||||
|
Alerts can be tested using the ``rcb alerts`` command.
|
||||||
|
This will send a test message to all configured alert
|
||||||
|
backends.
|
||||||
|
|
||||||
|
EMAIL_HOST_USER
|
||||||
|
~~~~~~~~~~~~~~~
|
||||||
|
|
||||||
|
The user of the sender account
|
||||||
|
|
||||||
|
Alerts can be tested using the ``rcb alerts`` command.
|
||||||
|
This will send a test message to all configured alert
|
||||||
|
backends.
|
||||||
|
|
||||||
|
EMAIL_HOST_PASSWORD
|
||||||
|
~~~~~~~~~~~~~~~~~~~
|
||||||
|
|
||||||
|
The password for the sender account
|
||||||
|
|
||||||
|
Alerts can be tested using the ``rcb alerts`` command.
|
||||||
|
This will send a test message to all configured alert
|
||||||
|
backends.
|
||||||
|
|
||||||
|
EMAIL_SEND_TO
|
||||||
|
~~~~~~~~~~~~~
|
||||||
|
|
||||||
|
The email address to send alerts
|
||||||
|
|
||||||
|
Alerts can be tested using the ``rcb alerts`` command.
|
||||||
|
This will send a test message to all configured alert
|
||||||
|
backends.
|
||||||
|
|
||||||
|
DISCORD_WEBHOOK
|
||||||
|
~~~~~~~~~~~~~~~
|
||||||
|
|
||||||
|
The discord webhook url. And administrator can quickly set this up
|
||||||
|
by going to server settings in the discord client and create
|
||||||
|
a webhook that will post embedded messages to a specific channel.
|
||||||
|
|
||||||
|
The url usually looks like this: ``https://discordapp.com/api/webhooks/...```
|
||||||
|
|
||||||
|
DOCKER_HOST
|
||||||
|
~~~~~~~~~~~
|
||||||
|
|
||||||
|
**Default value**: ``unix://tmp/docker.sock``
|
||||||
|
|
||||||
|
The socket or host of the docker service.
|
||||||
|
|
||||||
|
DOCKER_TLS_VERIFY
|
||||||
|
~~~~~~~~~~~~~~~~~
|
||||||
|
|
||||||
|
If defined verify the host against a CA certificate.
|
||||||
|
Path to certs is defined in ``DOCKER_CERT_PATH``
|
||||||
|
and can be copied or mapped into this backup container.
|
||||||
|
|
||||||
|
DOCKER_CERT_PATH
|
||||||
|
~~~~~~~~~~~~~~~~
|
||||||
|
|
||||||
|
A path to a directory containing TLS certificates to use when
|
||||||
|
connecting to the Docker host. Combined with ``DOCKER_TLS_VERIFY``
|
||||||
|
this can be used to talk to docker through TLS in cases
|
||||||
|
were we cannot map in the docker socket.
|
||||||
|
|
||||||
|
Compose Labels
|
||||||
|
--------------
|
||||||
|
|
||||||
|
What is backed up is controlled by simple labels in the compose
|
||||||
|
yaml file. At any point we can verify this configuration
|
||||||
|
by running the ``rcb status`` command.
|
||||||
|
|
||||||
|
.. code:
|
||||||
|
|
||||||
|
$ docker-compose run --rm backup rcb status
|
||||||
|
INFO: Status for compose project 'myproject'
|
||||||
|
INFO: Repository: '<restic repository>'
|
||||||
|
INFO: Backup currently running?: False
|
||||||
|
INFO: --------------- Detected Config ---------------
|
||||||
|
INFO: service: mysql
|
||||||
|
INFO: - mysql (is_ready=True)
|
||||||
|
INFO: service: mariadb
|
||||||
|
INFO: - mariadb (is_ready=True)
|
||||||
|
INFO: service: postgres
|
||||||
|
INFO: - postgres (is_ready=True)
|
||||||
|
INFO: service: web
|
||||||
|
INFO: - volume: media
|
||||||
|
INFO: - volume: /srv/files
|
||||||
|
|
||||||
|
Here we can see what volumes and databases are detected for backup.
|
||||||
|
|
||||||
|
Volumes
|
||||||
|
~~~~~~~
|
||||||
|
|
||||||
|
To enable volume backup for a service we simply add the
|
||||||
|
`restic-compose-backup.volumes: true` label. The value
|
||||||
|
must be ``true``.
|
||||||
|
|
||||||
|
Example:
|
||||||
|
|
||||||
|
.. code:: yaml
|
||||||
|
|
||||||
|
myservice:
|
||||||
|
image: some_image
|
||||||
|
labels:
|
||||||
|
restic-compose-backup.volumes: true
|
||||||
|
volumes:
|
||||||
|
- uploaded_media:/srv/media
|
||||||
|
- uploaded_files:/srv/files
|
||||||
|
- /srv/data:/srv/data
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
media:
|
||||||
|
files:
|
||||||
|
|
||||||
|
This will back up the three volumes mounted to this service.
|
||||||
|
Their path in restic will be:
|
||||||
|
|
||||||
|
- /volumes/myservice/srv/media
|
||||||
|
- /volumes/myservice/srv/files
|
||||||
|
- /volumes/myservice/srv/data
|
||||||
|
|
||||||
|
A simple `include` and `exclude` filter for what volumes
|
||||||
|
should be backed up is also available. Note that this
|
||||||
|
includes or excludes entire volumes and are not include/exclude
|
||||||
|
patterns for files in the volumes.
|
||||||
|
|
||||||
|
.. note:: The ``exclude`` and ``include`` filtering is applied on
|
||||||
|
the source path, not the destination.
|
||||||
|
|
||||||
|
Include example including two volumes only:
|
||||||
|
|
||||||
|
.. code:: yaml
|
||||||
|
|
||||||
|
myservice:
|
||||||
|
image: some_image
|
||||||
|
labels:
|
||||||
|
restic-compose-backup.volumes: true
|
||||||
|
restic-compose-backup.volumes.include: "uploaded_media,uploaded_files"
|
||||||
|
volumes:
|
||||||
|
- uploaded_media:/srv/media
|
||||||
|
- uploaded_files:/srv/files
|
||||||
|
- /srv/data:/srv/data
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
media:
|
||||||
|
files:
|
||||||
|
|
||||||
|
Exclude example achieving the same result as the example above.
|
||||||
|
|
||||||
|
.. code:: yaml
|
||||||
|
|
||||||
|
example:
|
||||||
|
image: some_image
|
||||||
|
labels:
|
||||||
|
restic-compose-backup.volumes: true
|
||||||
|
restic-compose-backup.volumes.exclude: "data"
|
||||||
|
volumes:
|
||||||
|
# Excluded by filter
|
||||||
|
- media:/srv/media
|
||||||
|
# Backed up
|
||||||
|
- files:/srv/files
|
||||||
|
- /srv/data:/srv/data
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
media:
|
||||||
|
files:
|
||||||
|
|
||||||
|
The ``exclude`` and ``include`` tag can be used together
|
||||||
|
in more complex situations.
|
||||||
|
|
||||||
|
mariadb
|
||||||
|
~~~~~~~
|
||||||
|
|
||||||
|
To enable backup of mariadb simply add the
|
||||||
|
``restic-compose-backup.mariadb: true`` label.
|
||||||
|
|
||||||
|
Credentials are fetched from the following environment
|
||||||
|
variables in the mariadb service. This is the standard
|
||||||
|
when using the official mariadb_ image.
|
||||||
|
|
||||||
|
.. code::
|
||||||
|
|
||||||
|
MYSQL_USER
|
||||||
|
MYSQL_PASSWORD
|
||||||
|
|
||||||
|
Backups are done by dumping all databases directly into
|
||||||
|
restic through stdin using ``mysqldump``. It will appear
|
||||||
|
in restic as a separate snapshot with path
|
||||||
|
``/databases/<service_name>/all_databases.sql``.
|
||||||
|
|
||||||
|
.. warning: This will only back up the databases the
|
||||||
|
``MYSQL_USER` has access to. If you have multiple
|
||||||
|
databases this must be taken into consideration.
|
||||||
|
|
||||||
|
Example:
|
||||||
|
|
||||||
|
.. code:: yaml
|
||||||
|
|
||||||
|
mariadb:
|
||||||
|
image: mariadb:10
|
||||||
|
labels:
|
||||||
|
restic-compose-backup.mariadb: true
|
||||||
|
env_file:
|
||||||
|
mariadb-credentials.env
|
||||||
|
volumes:
|
||||||
|
- mariadb:/var/lib/mysql
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
mariadb:
|
||||||
|
|
||||||
|
mysql
|
||||||
|
~~~~~
|
||||||
|
|
||||||
|
To enable backup of mysql simply add the
|
||||||
|
``restic-compose-backup.mysql: true`` label.
|
||||||
|
|
||||||
|
Credentials are fetched from the following environment
|
||||||
|
variables in the mysql service. This is the standard
|
||||||
|
when using the official mysql_ image.
|
||||||
|
|
||||||
|
.. code::
|
||||||
|
|
||||||
|
MYSQL_USER
|
||||||
|
MYSQL_PASSWORD
|
||||||
|
|
||||||
|
Backups are done by dumping all databases directly into
|
||||||
|
restic through stdin using ``mysqldump``. It will appear
|
||||||
|
in restic as a separate snapshot with path
|
||||||
|
``/databases/<service_name>/all_databases.sql``.
|
||||||
|
|
||||||
|
.. warning: This will only back up the databases the
|
||||||
|
``MYSQL_USER` has access to. If you have multiple
|
||||||
|
databases this must be taken into consideration.
|
||||||
|
|
||||||
|
Example:
|
||||||
|
|
||||||
|
.. code:: yaml
|
||||||
|
|
||||||
|
mysql:
|
||||||
|
image: mysql:5
|
||||||
|
labels:
|
||||||
|
restic-compose-backup.mysql: true
|
||||||
|
env_file:
|
||||||
|
mysql-credentials.env
|
||||||
|
volumes:
|
||||||
|
- mysql:/var/lib/mysql
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
mysql:
|
||||||
|
|
||||||
|
postgres
|
||||||
|
~~~~~~~~
|
||||||
|
|
||||||
|
To enable backup of mysql simply add the
|
||||||
|
``restic-compose-backup.postgres: true`` label.
|
||||||
|
|
||||||
|
Credentials are fetched from the following environment
|
||||||
|
variables in the postgres service. This is the standard
|
||||||
|
when using the official postgres_ image.
|
||||||
|
|
||||||
|
.. code::
|
||||||
|
|
||||||
|
POSTGRES_USER
|
||||||
|
POSTGRES_PASSWORD
|
||||||
|
POSTGRES_DB
|
||||||
|
|
||||||
|
Backups are done by dumping the ``POSTGRES_DB`` directly into
|
||||||
|
restic through stdin using ``pg_dump``. It will appear
|
||||||
|
in restic as a separate snapshot with path
|
||||||
|
``/databases/<service_name>/<POSTGRES_DB>.sql``.
|
||||||
|
|
||||||
|
.. warning:: Currently only the ``POSTGRES_DB`` database
|
||||||
|
is dumped.
|
||||||
|
|
||||||
|
Example:
|
||||||
|
|
||||||
|
.. code:: yaml
|
||||||
|
|
||||||
|
postgres:
|
||||||
|
image: postgres:11
|
||||||
|
labels:
|
||||||
|
# Enables backup of this database
|
||||||
|
restic-compose-backup.postgres: true
|
||||||
|
env_file:
|
||||||
|
postgres-credentials.env
|
||||||
|
volumes:
|
||||||
|
- pgdata:/var/lib/postgresql/data
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
pgdata:
|
||||||
|
|
||||||
|
.. _mariadb: https://hub.docker.com/_/mariadb
|
||||||
|
.. _mysql: https://hub.docker.com/_/mysql
|
||||||
|
.. _postgres: https://hub.docker.com/_/postgres
|
53
docs/guide/install.rst
Normal file
53
docs/guide/install.rst
Normal file
@@ -0,0 +1,53 @@
|
|||||||
|
Introduction
|
||||||
|
============
|
||||||
|
|
||||||
|
|
||||||
|
Install
|
||||||
|
-------
|
||||||
|
|
||||||
|
restic-compose-backup is available at docker `docker hub`_.
|
||||||
|
|
||||||
|
.. code::
|
||||||
|
|
||||||
|
docker pull restic-compose-backup
|
||||||
|
|
||||||
|
Optionally it can be built from source using the github_ repository.
|
||||||
|
|
||||||
|
.. code:: bash
|
||||||
|
|
||||||
|
git clone https://github.com/ZettaIO/restic-compose-backup.git
|
||||||
|
cd restic-compose-backup
|
||||||
|
# Build and tag the image locally
|
||||||
|
docker build src/ --tag restic-compose-backup
|
||||||
|
|
||||||
|
Bug reports and issues
|
||||||
|
----------------------
|
||||||
|
|
||||||
|
Please report bugs an issues on github_
|
||||||
|
|
||||||
|
Development setup
|
||||||
|
-----------------
|
||||||
|
|
||||||
|
Getting started with local development is fairly simple.
|
||||||
|
The github_ repository contains a simple ``docker-compose.yaml``
|
||||||
|
|
||||||
|
.. code:: bash
|
||||||
|
|
||||||
|
docker-compose up -d
|
||||||
|
# Enter the container in sh
|
||||||
|
docker-compose run --rm backup sh
|
||||||
|
|
||||||
|
The dev compose setup maps in the source from the host
|
||||||
|
and the spawned backup container will inherit all
|
||||||
|
the volumes from the backup service ensuring code changes
|
||||||
|
propagates during development.
|
||||||
|
|
||||||
|
Set up a local venv and install the package in development mode::
|
||||||
|
|
||||||
|
python -m venv .venv
|
||||||
|
. .venv/bin/activate
|
||||||
|
pip install -e ./src
|
||||||
|
|
||||||
|
|
||||||
|
.. _docker hub: https://hub.docker.com/r/zettaio/restic-compose-backup
|
||||||
|
.. _github: https://github.com/ZettaIO/restic-compose-backup
|
199
docs/guide/rcb.rst
Normal file
199
docs/guide/rcb.rst
Normal file
@@ -0,0 +1,199 @@
|
|||||||
|
|
||||||
|
The `rcb` command
|
||||||
|
-----------------
|
||||||
|
|
||||||
|
The ``rcb`` command is is basically what this entire project is.
|
||||||
|
It provides useful commands interacting with the compose setup
|
||||||
|
and restic.
|
||||||
|
|
||||||
|
The command can be executed inside the container or through ``run``.
|
||||||
|
|
||||||
|
.. code:: bash
|
||||||
|
|
||||||
|
# Get the current status using run
|
||||||
|
$ docker-compose run --rm backup rcb status
|
||||||
|
|
||||||
|
# by entering the container
|
||||||
|
$ docker-compose exec backup sh
|
||||||
|
/restic-compose-backup # rcb status
|
||||||
|
|
||||||
|
Log level can be overridden by using the ``--log-level``
|
||||||
|
flag. This can help you better understand what is going on
|
||||||
|
for example by using ``--log-level debug``.
|
||||||
|
|
||||||
|
version
|
||||||
|
~~~~~~~
|
||||||
|
|
||||||
|
Displays the version.
|
||||||
|
|
||||||
|
Example output::
|
||||||
|
|
||||||
|
/restic-compose-backup # rcb version
|
||||||
|
0.4.0
|
||||||
|
|
||||||
|
status
|
||||||
|
~~~~~~
|
||||||
|
|
||||||
|
Shows the general status of our setup. The command is doing
|
||||||
|
the following operations
|
||||||
|
|
||||||
|
- Displays the name of the compose setup
|
||||||
|
- Displays the repository path
|
||||||
|
- Tells us if a backup is currently running
|
||||||
|
- Removes stale backup process containers if the exist
|
||||||
|
- Checks is the repository is initialized
|
||||||
|
- Initializes the repository if this is not already done
|
||||||
|
- Displays what volumes and databases are flagged for backup
|
||||||
|
|
||||||
|
Example output::
|
||||||
|
|
||||||
|
INFO: Status for compose project 'myproject'
|
||||||
|
INFO: Repository: '<restic repository>'
|
||||||
|
INFO: Backup currently running?: False
|
||||||
|
INFO: --------------- Detected Config ---------------
|
||||||
|
INFO: service: mysql
|
||||||
|
INFO: - mysql (is_ready=True)
|
||||||
|
INFO: service: mariadb
|
||||||
|
INFO: - mariadb (is_ready=True)
|
||||||
|
INFO: service: postgres
|
||||||
|
INFO: - postgres (is_ready=True)
|
||||||
|
INFO: service: web
|
||||||
|
INFO: - volume: media
|
||||||
|
INFO: - volume: /srv/files
|
||||||
|
|
||||||
|
alert
|
||||||
|
~~~~~
|
||||||
|
|
||||||
|
Sends a test message to all configured alert backends
|
||||||
|
and is there for you to verify that alerts are in
|
||||||
|
fact working and configured correctly.
|
||||||
|
|
||||||
|
The format of this message::
|
||||||
|
|
||||||
|
subject: myproject: Test Alert
|
||||||
|
body: Test message
|
||||||
|
|
||||||
|
snapshots
|
||||||
|
~~~~~~~~~
|
||||||
|
|
||||||
|
Displays the latest snapshots in restic. This can also
|
||||||
|
be done with ``restic snapshots``.
|
||||||
|
|
||||||
|
Example output::
|
||||||
|
|
||||||
|
/restic-compose-backup # rcb snapshots
|
||||||
|
repository f325264e opened successfully, password is correct
|
||||||
|
ID Time Host Tags Paths
|
||||||
|
---------------------------------------------------------------------------------------------
|
||||||
|
19928e1c 2019-12-09 02:07:44 b3038db04ec1 /volumes
|
||||||
|
7a642f37 2019-12-09 02:07:45 b3038db04ec1 /databases/mysql/all_databases.sql
|
||||||
|
883dada4 2019-12-09 02:07:46 b3038db04ec1 /databases/mariadb/all_databases.sql
|
||||||
|
76ef2457 2019-12-09 02:07:47 b3038db04ec1 /databases/postgres/test.sql
|
||||||
|
---------------------------------------------------------------------------------------------
|
||||||
|
4 snapshots
|
||||||
|
|
||||||
|
backup
|
||||||
|
~~~~~~
|
||||||
|
|
||||||
|
Starts a backup process by spawning a new docker container.
|
||||||
|
The network stack, mounted volumes, env vars etc. from the
|
||||||
|
backup service are copied to this container.
|
||||||
|
|
||||||
|
We attach to this container and stream the logs and delete
|
||||||
|
the container with the backup process is completed. If the
|
||||||
|
container for any reason should not be deleted, it will
|
||||||
|
be in next backup run as these containers are tagged with
|
||||||
|
a unique label and detected.
|
||||||
|
|
||||||
|
If anything goes wrong the exist status of the container
|
||||||
|
is non-zero and the logs from this backup run will be sent
|
||||||
|
to the user through the configure alerts.
|
||||||
|
|
||||||
|
This command is by default called by cron every
|
||||||
|
day at 02:00 unless configured otherwise. We can also run this
|
||||||
|
manually is needed.
|
||||||
|
|
||||||
|
Running this command will do the following:
|
||||||
|
|
||||||
|
* Checks if a backup process is already running.
|
||||||
|
If so, we alert the user and abort
|
||||||
|
* Gathers all the volumes configured for backup and starts
|
||||||
|
the backup process with these volumes mounted into ``/volumes``
|
||||||
|
* Checks the status of the process and reports to the user
|
||||||
|
if anything failed
|
||||||
|
|
||||||
|
The backup process does the following:
|
||||||
|
|
||||||
|
* ``status`` is first called to ensure everything is ok
|
||||||
|
* Backs up ``/volumes`` if any volumes were mounted
|
||||||
|
* Backs up each configured database
|
||||||
|
* Runs ``cleanup`` purging snapshots based on the configured policy
|
||||||
|
* Checks the health of the repository
|
||||||
|
|
||||||
|
Example::
|
||||||
|
|
||||||
|
$ docker-compose exec backup sh
|
||||||
|
/restic-compose-backup # rcb backup
|
||||||
|
INFO: Starting backup container
|
||||||
|
INFO: Backup process container: loving_jepsen
|
||||||
|
INFO: 2019-12-09 04:50:22,817 - INFO: Status for compose project 'restic-compose-backup'
|
||||||
|
INFO: 2019-12-09 04:50:22,817 - INFO: Repository: '/restic_data'
|
||||||
|
INFO: 2019-12-09 04:50:22,817 - INFO: Backup currently running?: True
|
||||||
|
INFO: 2019-12-09 04:50:23,701 - INFO: ------------------------- Detected Config -------------------------
|
||||||
|
INFO: 2019-12-09 04:50:23,701 - INFO: service: mysql
|
||||||
|
INFO: 2019-12-09 04:50:23,718 - INFO: - mysql (is_ready=True)
|
||||||
|
INFO: 2019-12-09 04:50:23,718 - INFO: service: mariadb
|
||||||
|
INFO: 2019-12-09 04:50:23,726 - INFO: - mariadb (is_ready=True)
|
||||||
|
INFO: 2019-12-09 04:50:23,727 - INFO: service: postgres
|
||||||
|
INFO: 2019-12-09 04:50:23,734 - INFO: - postgres (is_ready=True)
|
||||||
|
INFO: 2019-12-09 04:50:23,735 - INFO: service: web
|
||||||
|
INFO: 2019-12-09 04:50:23,736 - INFO: - volume: /some/volume
|
||||||
|
INFO: 2019-12-09 04:50:23,736 - INFO: -------------------------------------------------------------------
|
||||||
|
INFO: 2019-12-09 04:50:23,736 - INFO: Backing up volumes
|
||||||
|
INFO: 2019-12-09 04:50:24,661 - INFO: Backing up databases
|
||||||
|
INFO: 2019-12-09 04:50:24,661 - INFO: Backing up mysql in service mysql
|
||||||
|
INFO: 2019-12-09 04:50:25,643 - INFO: Backing up mariadb in service mariadb
|
||||||
|
INFO: 2019-12-09 04:50:26,580 - INFO: Backing up postgres in service postgres
|
||||||
|
INFO: 2019-12-09 04:50:27,555 - INFO: Forget outdated snapshots
|
||||||
|
INFO: 2019-12-09 04:50:28,457 - INFO: Prune stale data freeing storage space
|
||||||
|
INFO: 2019-12-09 04:50:31,547 - INFO: Checking the repository for errors
|
||||||
|
INFO: 2019-12-09 04:50:32,869 - INFO: Backup completed
|
||||||
|
INFO: Backup container exit code: 0
|
||||||
|
|
||||||
|
crontab
|
||||||
|
~~~~~~~
|
||||||
|
|
||||||
|
Generates and verifies the crontab. This is done automatically when
|
||||||
|
the container starts. It can be user to verify the configuration.
|
||||||
|
|
||||||
|
Example output::
|
||||||
|
|
||||||
|
/restic-compose-backup # rcb crontab
|
||||||
|
10 2 * * * source /env.sh && rcb backup > /proc/1/fd/1
|
||||||
|
|
||||||
|
cleanup
|
||||||
|
~~~~~~~
|
||||||
|
|
||||||
|
Purges all snapshots based on the configured policy. (``RESTIC_KEEP_*``
|
||||||
|
env variables). It runs ``restic forget`` and ``restic purge``.
|
||||||
|
|
||||||
|
Example output::
|
||||||
|
|
||||||
|
/restic-compose-backup # rcb cleanup
|
||||||
|
2019-12-09 05:09:52,892 - INFO: Forget outdated snapshots
|
||||||
|
2019-12-09 05:09:53,776 - INFO: Prune stale data freeing storage space
|
||||||
|
|
||||||
|
start-backup-process
|
||||||
|
~~~~~~~~~~~~~~~~~~~~
|
||||||
|
|
||||||
|
This can only be executed by the backup process container.
|
||||||
|
Attempting to run this command in the backup service
|
||||||
|
will simply tell you it's not possible.
|
||||||
|
|
||||||
|
The backup process is doing the following:
|
||||||
|
|
||||||
|
* ``status`` is first called to ensure everything is ok
|
||||||
|
* Backs up ``/volumes`` if any volumes were mounted
|
||||||
|
* Backs up each configured database
|
||||||
|
* Runs ``cleanup`` purging snapshots based on the configured policy
|
||||||
|
* Checks the health of the repository
|
@@ -6,12 +6,16 @@
|
|||||||
Welcome to restic-compose-backup's documentation!
|
Welcome to restic-compose-backup's documentation!
|
||||||
=================================================
|
=================================================
|
||||||
|
|
||||||
Simple backup with restic for small to medium docker-compose setups.
|
Simple backup with restic_ for docker-compose setups.
|
||||||
|
|
||||||
.. toctree::
|
.. toctree::
|
||||||
:maxdepth: 2
|
:maxdepth: 3
|
||||||
:caption: Contents:
|
:caption: Contents:
|
||||||
|
|
||||||
|
guide/install
|
||||||
|
guide/configuration
|
||||||
|
guide/rcb
|
||||||
|
guide/advanced
|
||||||
|
|
||||||
Indices and tables
|
Indices and tables
|
||||||
==================
|
==================
|
||||||
@@ -19,3 +23,5 @@ Indices and tables
|
|||||||
* :ref:`genindex`
|
* :ref:`genindex`
|
||||||
* :ref:`modindex`
|
* :ref:`modindex`
|
||||||
* :ref:`search`
|
* :ref:`search`
|
||||||
|
|
||||||
|
.. _restic: https://restic.net/
|
||||||
|
@@ -13,9 +13,9 @@ When releasing a bugfix version we need to update the
|
|||||||
main image as well.
|
main image as well.
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
docker build src --tag zettaio/restic-compose-backup:0.3
|
docker build src --tag zettaio/restic-compose-backup:0.4
|
||||||
docker build src --tag zettaio/restic-compose-backup:0.3.2
|
docker build src --tag zettaio/restic-compose-backup:0.4.1
|
||||||
|
|
||||||
docker push zettaio/restic-compose-backup:0.3
|
docker push zettaio/restic-compose-backup:0.4
|
||||||
docker push zettaio/restic-compose-backup:0.3.2
|
docker push zettaio/restic-compose-backup:0.4.1
|
||||||
```
|
```
|
||||||
|
@@ -1,6 +1,9 @@
|
|||||||
# DON'T COMMIT THIS FILE IF YOU MODIFY IN DEV
|
# DON'T COMMIT THIS FILE IF YOU MODIFY IN DEV
|
||||||
|
|
||||||
DOCKER_BASE_URL=unix://tmp/docker.sock
|
# DOCKER_HOST=unix://tmp/docker.sock
|
||||||
|
# DOCKER_TLS_VERIFY=1
|
||||||
|
# DOCKER_CERT_PATH=''
|
||||||
|
|
||||||
RESTIC_REPOSITORY=/restic_data
|
RESTIC_REPOSITORY=/restic_data
|
||||||
RESTIC_PASSWORD=password
|
RESTIC_PASSWORD=password
|
||||||
|
|
||||||
@@ -10,6 +13,7 @@ RESTIC_KEEP_MONTHLY=12
|
|||||||
RESTIC_KEEP_YEARLY=3
|
RESTIC_KEEP_YEARLY=3
|
||||||
|
|
||||||
LOG_LEVEL=info
|
LOG_LEVEL=info
|
||||||
|
CRON_SCHEDULE=10 2 * * *
|
||||||
|
|
||||||
# EMAIL_HOST=
|
# EMAIL_HOST=
|
||||||
# EMAIL_PORT=
|
# EMAIL_PORT=
|
||||||
|
@@ -1,19 +1,3 @@
|
|||||||
.venv/
|
|
||||||
.vscode/
|
|
||||||
extras/
|
|
||||||
restic_cache/
|
|
||||||
restic_data/
|
|
||||||
tests/
|
tests/
|
||||||
.gitignore
|
|
||||||
*.env
|
|
||||||
*.log
|
|
||||||
docker-compose.yaml
|
|
||||||
*.ini
|
|
||||||
*.egg-info
|
|
||||||
__pycache__
|
__pycache__
|
||||||
.DS_Store
|
.DS_Store
|
||||||
.git
|
|
||||||
.pytest_cache
|
|
||||||
.dockerignore
|
|
||||||
build/
|
|
||||||
docs/
|
|
||||||
|
@@ -1 +1,2 @@
|
|||||||
0 2 * * * source /env.sh && rcb backup > /proc/1/fd/1
|
10 2 * * * source /env.sh && rcb backup > /proc/1/fd/1
|
||||||
|
|
||||||
|
@@ -3,6 +3,9 @@
|
|||||||
# Dump all env vars so we can source them in cron jobs
|
# Dump all env vars so we can source them in cron jobs
|
||||||
printenv | sed 's/^\(.*\)$/export \1/g' > /env.sh
|
printenv | sed 's/^\(.*\)$/export \1/g' > /env.sh
|
||||||
|
|
||||||
|
# Write crontab
|
||||||
|
rcb crontab > crontab
|
||||||
|
|
||||||
# start cron in the foreground
|
# start cron in the foreground
|
||||||
crontab crontab
|
crontab crontab
|
||||||
crond -f
|
crond -f
|
||||||
|
@@ -1 +1 @@
|
|||||||
__version__ = '0.3.2'
|
__version__ = '0.4.2'
|
||||||
|
@@ -30,11 +30,14 @@ class DiscordWebhookAlert(BaseAlert):
|
|||||||
def send(self, subject: str = None, body: str = None, alert_type: str = None):
|
def send(self, subject: str = None, body: str = None, alert_type: str = None):
|
||||||
"""Send basic webhook request. Max embed size is 6000"""
|
"""Send basic webhook request. Max embed size is 6000"""
|
||||||
logger.info("Triggering discord webhook")
|
logger.info("Triggering discord webhook")
|
||||||
|
# NOTE: The title size is 2048
|
||||||
|
# The max description size is 2048
|
||||||
|
# Total embed size limit is 6000 characters (per embed)
|
||||||
data = {
|
data = {
|
||||||
'embeds': [
|
'embeds': [
|
||||||
{
|
{
|
||||||
'title': subject,
|
'title': subject[-256:],
|
||||||
'description': body[:5000],
|
'description': body[-2048:] if body else "",
|
||||||
},
|
},
|
||||||
]
|
]
|
||||||
}
|
}
|
||||||
|
@@ -1,8 +1,7 @@
|
|||||||
import logging
|
import logging
|
||||||
import os
|
import os
|
||||||
import docker
|
|
||||||
|
|
||||||
from restic_compose_backup.config import Config
|
from restic_compose_backup import utils
|
||||||
|
|
||||||
logger = logging.getLogger(__name__)
|
logger = logging.getLogger(__name__)
|
||||||
|
|
||||||
@@ -10,8 +9,7 @@ logger = logging.getLogger(__name__)
|
|||||||
def run(image: str = None, command: str = None, volumes: dict = None,
|
def run(image: str = None, command: str = None, volumes: dict = None,
|
||||||
environment: dict = None, labels: dict = None, source_container_id: str = None):
|
environment: dict = None, labels: dict = None, source_container_id: str = None):
|
||||||
logger.info("Starting backup container")
|
logger.info("Starting backup container")
|
||||||
config = Config()
|
client = utils.docker_client()
|
||||||
client = docker.DockerClient(base_url=config.docker_base_url)
|
|
||||||
|
|
||||||
container = client.containers.run(
|
container = client.containers.run(
|
||||||
image,
|
image,
|
||||||
@@ -19,7 +17,7 @@ def run(image: str = None, command: str = None, volumes: dict = None,
|
|||||||
labels=labels,
|
labels=labels,
|
||||||
# auto_remove=True, # We remove the container further down
|
# auto_remove=True, # We remove the container further down
|
||||||
detach=True,
|
detach=True,
|
||||||
environment=environment,
|
environment=environment + ['BACKUP_PROCESS_CONTAINER=true'],
|
||||||
volumes=volumes,
|
volumes=volumes,
|
||||||
network_mode=f'container:{source_container_id}', # Reuse original container's network stack.
|
network_mode=f'container:{source_container_id}', # Reuse original container's network stack.
|
||||||
working_dir=os.getcwd(),
|
working_dir=os.getcwd(),
|
||||||
@@ -35,8 +33,8 @@ def run(image: str = None, command: str = None, volumes: dict = None,
|
|||||||
line = ""
|
line = ""
|
||||||
while True:
|
while True:
|
||||||
try:
|
try:
|
||||||
# TODO: figure out why..
|
# Make log streaming work for docker ce 17 and 18.
|
||||||
# Apparently the stream can be bytes or strings.
|
# For some reason strings are returned instead if bytes.
|
||||||
data = next(stream)
|
data = next(stream)
|
||||||
if isinstance(data, bytes):
|
if isinstance(data, bytes):
|
||||||
line += data.decode()
|
line += data.decode()
|
||||||
@@ -57,9 +55,9 @@ def run(image: str = None, command: str = None, volumes: dict = None,
|
|||||||
fd.write('\n')
|
fd.write('\n')
|
||||||
logger.info(line)
|
logger.info(line)
|
||||||
|
|
||||||
|
container.wait()
|
||||||
container.reload()
|
container.reload()
|
||||||
logger.debug("Container ExitCode %s", container.attrs['State']['ExitCode'])
|
logger.debug("Container ExitCode %s", container.attrs['State']['ExitCode'])
|
||||||
container.stop()
|
|
||||||
container.remove()
|
container.remove()
|
||||||
|
|
||||||
return container.attrs['State']['ExitCode']
|
return container.attrs['State']['ExitCode']
|
||||||
|
@@ -1,4 +1,5 @@
|
|||||||
import argparse
|
import argparse
|
||||||
|
import os
|
||||||
import logging
|
import logging
|
||||||
|
|
||||||
from restic_compose_backup import (
|
from restic_compose_backup import (
|
||||||
@@ -9,6 +10,7 @@ from restic_compose_backup import (
|
|||||||
)
|
)
|
||||||
from restic_compose_backup.config import Config
|
from restic_compose_backup.config import Config
|
||||||
from restic_compose_backup.containers import RunningContainers
|
from restic_compose_backup.containers import RunningContainers
|
||||||
|
from restic_compose_backup import cron, utils
|
||||||
|
|
||||||
logger = logging.getLogger(__name__)
|
logger = logging.getLogger(__name__)
|
||||||
|
|
||||||
@@ -46,17 +48,34 @@ def main():
|
|||||||
import restic_compose_backup
|
import restic_compose_backup
|
||||||
print(restic_compose_backup.__version__)
|
print(restic_compose_backup.__version__)
|
||||||
|
|
||||||
|
elif args.action == "crontab":
|
||||||
|
crontab(config)
|
||||||
|
|
||||||
|
|
||||||
def status(config, containers):
|
def status(config, containers):
|
||||||
"""Outputs the backup config for the compose setup"""
|
"""Outputs the backup config for the compose setup"""
|
||||||
logger.info("Status for compose project '%s'", containers.project_name)
|
logger.info("Status for compose project '%s'", containers.project_name)
|
||||||
logger.info("Repository: '%s'", config.repository)
|
logger.info("Repository: '%s'", config.repository)
|
||||||
logger.info("Backup currently running?: %s", containers.backup_process_running)
|
logger.info("Backup currently running?: %s", containers.backup_process_running)
|
||||||
|
logger.info("Checking docker availability")
|
||||||
|
|
||||||
|
utils.list_containers()
|
||||||
|
|
||||||
|
if containers.stale_backup_process_containers:
|
||||||
|
utils.remove_containers(containers.stale_backup_process_containers)
|
||||||
|
|
||||||
|
# Check if repository is initialized with restic snapshots
|
||||||
|
if not restic.is_initialized(config.repository):
|
||||||
|
logger.info("Could not get repository info. Attempting to initialize it.")
|
||||||
|
result = restic.init_repo(config.repository)
|
||||||
|
if result == 0:
|
||||||
|
logger.info("Successfully initialized repository: %s", config.repository)
|
||||||
|
else:
|
||||||
|
logger.error("Failed to initialize repository")
|
||||||
|
|
||||||
logger.info("%s Detected Config %s", "-" * 25, "-" * 25)
|
logger.info("%s Detected Config %s", "-" * 25, "-" * 25)
|
||||||
|
|
||||||
logger.info("Initializing repository (may fail if already initalized)")
|
# Start making snapshots
|
||||||
restic.init_repo(config.repository)
|
|
||||||
|
|
||||||
backup_containers = containers.containers_for_backup()
|
backup_containers = containers.containers_for_backup()
|
||||||
for container in backup_containers:
|
for container in backup_containers:
|
||||||
logger.info('service: %s', container.service_name)
|
logger.info('service: %s', container.service_name)
|
||||||
@@ -83,7 +102,16 @@ def backup(config, containers):
|
|||||||
"""Request a backup to start"""
|
"""Request a backup to start"""
|
||||||
# Make sure we don't spawn multiple backup processes
|
# Make sure we don't spawn multiple backup processes
|
||||||
if containers.backup_process_running:
|
if containers.backup_process_running:
|
||||||
raise ValueError("Backup process already running")
|
alerts.send(
|
||||||
|
subject="Backup process container already running",
|
||||||
|
body=(
|
||||||
|
"A backup process container is already running. \n"
|
||||||
|
f"Id: {containers.backup_process_container.id}\n"
|
||||||
|
f"Name: {containers.backup_process_container.name}\n"
|
||||||
|
),
|
||||||
|
alert_type='ERROR',
|
||||||
|
)
|
||||||
|
raise RuntimeError("Backup process already running")
|
||||||
|
|
||||||
# Map all volumes from the backup container into the backup process container
|
# Map all volumes from the backup container into the backup process container
|
||||||
volumes = containers.this_container.volumes
|
volumes = containers.this_container.volumes
|
||||||
@@ -92,6 +120,7 @@ def backup(config, containers):
|
|||||||
mounts = containers.generate_backup_mounts('/volumes')
|
mounts = containers.generate_backup_mounts('/volumes')
|
||||||
volumes.update(mounts)
|
volumes.update(mounts)
|
||||||
|
|
||||||
|
logger.debug('Starting backup container with image %s', containers.this_container.image)
|
||||||
try:
|
try:
|
||||||
result = backup_runner.run(
|
result = backup_runner.run(
|
||||||
image=containers.this_container.image,
|
image=containers.this_container.image,
|
||||||
@@ -100,7 +129,7 @@ def backup(config, containers):
|
|||||||
environment=containers.this_container.environment,
|
environment=containers.this_container.environment,
|
||||||
source_container_id=containers.this_container.id,
|
source_container_id=containers.this_container.id,
|
||||||
labels={
|
labels={
|
||||||
"restic-compose-backup.backup_process": 'True',
|
containers.backup_process_label: 'True',
|
||||||
"com.docker.compose.project": containers.project_name,
|
"com.docker.compose.project": containers.project_name,
|
||||||
},
|
},
|
||||||
)
|
)
|
||||||
@@ -126,30 +155,50 @@ def backup(config, containers):
|
|||||||
|
|
||||||
def start_backup_process(config, containers):
|
def start_backup_process(config, containers):
|
||||||
"""The actual backup process running inside the spawned container"""
|
"""The actual backup process running inside the spawned container"""
|
||||||
if (not containers.backup_process_container
|
if not utils.is_true(os.environ.get('BACKUP_PROCESS_CONTAINER')):
|
||||||
or containers.this_container == containers.backup_process_container is False):
|
|
||||||
logger.error(
|
logger.error(
|
||||||
"Cannot run backup process in this container. Use backup command instead. "
|
"Cannot run backup process in this container. Use backup command instead. "
|
||||||
"This will spawn a new container with the necessary mounts."
|
"This will spawn a new container with the necessary mounts."
|
||||||
)
|
)
|
||||||
return
|
alerts.send(
|
||||||
|
subject="Cannot run backup process in this container",
|
||||||
|
body=(
|
||||||
|
"Cannot run backup process in this container. Use backup command instead. "
|
||||||
|
"This will spawn a new container with the necessary mounts."
|
||||||
|
)
|
||||||
|
)
|
||||||
|
exit(1)
|
||||||
|
|
||||||
status(config, containers)
|
status(config, containers)
|
||||||
errors = False
|
errors = False
|
||||||
|
|
||||||
# Back up volumes
|
# Did we actually get any volumes mounted?
|
||||||
|
try:
|
||||||
|
has_volumes = os.stat('/volumes') is not None
|
||||||
|
except FileNotFoundError:
|
||||||
|
logger.warning("Found no volumes to back up")
|
||||||
|
has_volumes = False
|
||||||
|
|
||||||
|
# Warn if there is nothing to do
|
||||||
|
if len(containers.containers_for_backup()) == 0 and not has_volumes:
|
||||||
|
logger.error("No containers for backup found")
|
||||||
|
exit(1)
|
||||||
|
|
||||||
|
if has_volumes:
|
||||||
try:
|
try:
|
||||||
logger.info('Backing up volumes')
|
logger.info('Backing up volumes')
|
||||||
vol_result = restic.backup_files(config.repository, source='/volumes')
|
vol_result = restic.backup_files(config.repository, source='/volumes')
|
||||||
logger.debug('Volume backup exit code: %s', vol_result)
|
logger.debug('Volume backup exit code: %s', vol_result)
|
||||||
if vol_result != 0:
|
if vol_result != 0:
|
||||||
logger.error('Backup command exited with non-zero code: %s', vol_result)
|
logger.error('Volume backup exited with non-zero code: %s', vol_result)
|
||||||
errors = True
|
errors = True
|
||||||
except Exception as ex:
|
except Exception as ex:
|
||||||
|
logger.error('Exception raised during volume backup')
|
||||||
logger.exception(ex)
|
logger.exception(ex)
|
||||||
errors = True
|
errors = True
|
||||||
|
|
||||||
# back up databases
|
# back up databases
|
||||||
|
logger.info('Backing up databases')
|
||||||
for container in containers.containers_for_backup():
|
for container in containers.containers_for_backup():
|
||||||
if container.database_backup_enabled:
|
if container.database_backup_enabled:
|
||||||
try:
|
try:
|
||||||
@@ -165,14 +214,25 @@ def start_backup_process(config, containers):
|
|||||||
errors = True
|
errors = True
|
||||||
|
|
||||||
if errors:
|
if errors:
|
||||||
|
logger.error('Exit code: %s', errors)
|
||||||
exit(1)
|
exit(1)
|
||||||
|
|
||||||
# Only run cleanup if backup was successful
|
# Only run cleanup if backup was successful
|
||||||
result = cleanup(config, container)
|
result = cleanup(config, container)
|
||||||
logger.debug('cleanup exit code: %s', errors)
|
logger.debug('cleanup exit code: %s', result)
|
||||||
if result != 0:
|
if result != 0:
|
||||||
|
logger.error('cleanup exit code: %s', result)
|
||||||
exit(1)
|
exit(1)
|
||||||
|
|
||||||
|
# Test the repository for errors
|
||||||
|
logger.info("Checking the repository for errors")
|
||||||
|
result = restic.check(config.repository)
|
||||||
|
if result != 0:
|
||||||
|
logger.error('Check exit code: %s', result)
|
||||||
|
exit(1)
|
||||||
|
|
||||||
|
logger.info('Backup completed')
|
||||||
|
|
||||||
|
|
||||||
def cleanup(config, containers):
|
def cleanup(config, containers):
|
||||||
"""Run forget / prune to minimize storage space"""
|
"""Run forget / prune to minimize storage space"""
|
||||||
@@ -205,11 +265,25 @@ def alert(config, containers):
|
|||||||
)
|
)
|
||||||
|
|
||||||
|
|
||||||
|
def crontab(config):
|
||||||
|
"""Generate the crontab"""
|
||||||
|
print(cron.generate_crontab(config))
|
||||||
|
|
||||||
|
|
||||||
def parse_args():
|
def parse_args():
|
||||||
parser = argparse.ArgumentParser(prog='restic_compose_backup')
|
parser = argparse.ArgumentParser(prog='restic_compose_backup')
|
||||||
parser.add_argument(
|
parser.add_argument(
|
||||||
'action',
|
'action',
|
||||||
choices=['status', 'snapshots', 'backup', 'start-backup-process', 'alert', 'cleanup', 'version'],
|
choices=[
|
||||||
|
'status',
|
||||||
|
'snapshots',
|
||||||
|
'backup',
|
||||||
|
'start-backup-process',
|
||||||
|
'alert',
|
||||||
|
'cleanup',
|
||||||
|
'version',
|
||||||
|
'crontab',
|
||||||
|
],
|
||||||
)
|
)
|
||||||
parser.add_argument(
|
parser.add_argument(
|
||||||
'--log-level',
|
'--log-level',
|
||||||
|
@@ -53,14 +53,12 @@ def run(cmd: List[str]) -> int:
|
|||||||
child = Popen(cmd, stdout=PIPE, stderr=PIPE)
|
child = Popen(cmd, stdout=PIPE, stderr=PIPE)
|
||||||
stdoutdata, stderrdata = child.communicate()
|
stdoutdata, stderrdata = child.communicate()
|
||||||
|
|
||||||
if stdoutdata:
|
if stdoutdata.strip():
|
||||||
logger.debug(stdoutdata.decode().strip())
|
log_std('stdout', stdoutdata.decode(),
|
||||||
logger.debug('-' * 28)
|
logging.DEBUG if child.returncode == 0 else logging.ERROR)
|
||||||
|
|
||||||
if stderrdata:
|
if stderrdata.strip():
|
||||||
logger.error('%s STDERR %s', '-' * 10, '-' * 10)
|
log_std('stderr', stderrdata.decode(), logging.ERROR)
|
||||||
logger.error(stderrdata.decode().strip())
|
|
||||||
logger.error('-' * 28)
|
|
||||||
|
|
||||||
logger.debug("returncode %s", child.returncode)
|
logger.debug("returncode %s", child.returncode)
|
||||||
return child.returncode
|
return child.returncode
|
||||||
@@ -71,3 +69,23 @@ def run_capture_std(cmd: List[str]) -> Tuple[str, str]:
|
|||||||
logger.debug('cmd: %s', ' '.join(cmd))
|
logger.debug('cmd: %s', ' '.join(cmd))
|
||||||
child = Popen(cmd, stdout=PIPE, stderr=PIPE)
|
child = Popen(cmd, stdout=PIPE, stderr=PIPE)
|
||||||
return child.communicate()
|
return child.communicate()
|
||||||
|
|
||||||
|
|
||||||
|
def log_std(source: str, data: str, level: int):
|
||||||
|
if isinstance(data, bytes):
|
||||||
|
data = data.decode()
|
||||||
|
|
||||||
|
if not data.strip():
|
||||||
|
return
|
||||||
|
|
||||||
|
log_func = logger.debug if level == logging.DEBUG else logger.error
|
||||||
|
log_func('%s %s %s', '-' * 10, source, '-' * 10)
|
||||||
|
|
||||||
|
lines = data.split('\n')
|
||||||
|
if lines[-1] == '':
|
||||||
|
lines.pop()
|
||||||
|
|
||||||
|
for line in lines:
|
||||||
|
log_func(line)
|
||||||
|
|
||||||
|
log_func('-' * 28)
|
||||||
|
@@ -2,12 +2,16 @@ import os
|
|||||||
|
|
||||||
|
|
||||||
class Config:
|
class Config:
|
||||||
|
default_backup_command = "source /env.sh && rcb backup > /proc/1/fd/1"
|
||||||
|
default_crontab_schedule = "0 2 * * *"
|
||||||
|
|
||||||
"""Bag for config values"""
|
"""Bag for config values"""
|
||||||
def __init__(self, check=True):
|
def __init__(self, check=True):
|
||||||
# Mandatory values
|
# Mandatory values
|
||||||
self.repository = os.environ.get('RESTIC_REPOSITORY')
|
self.repository = os.environ.get('RESTIC_REPOSITORY')
|
||||||
self.password = os.environ.get('RESTIC_REPOSITORY')
|
self.password = os.environ.get('RESTIC_REPOSITORY')
|
||||||
self.docker_base_url = os.environ.get('DOCKER_BASE_URL') or "unix://tmp/docker.sock"
|
self.cron_schedule = os.environ.get('CRON_SCHEDULE') or self.default_crontab_schedule
|
||||||
|
self.cron_command = os.environ.get('CRON_COMMAND') or self.default_backup_command
|
||||||
|
|
||||||
# Log
|
# Log
|
||||||
self.log_level = os.environ.get('LOG_LEVEL')
|
self.log_level = os.environ.get('LOG_LEVEL')
|
||||||
|
@@ -1,8 +1,11 @@
|
|||||||
import os
|
import os
|
||||||
|
import logging
|
||||||
from pathlib import Path
|
from pathlib import Path
|
||||||
from typing import List
|
from typing import List
|
||||||
|
|
||||||
from restic_compose_backup import utils
|
from restic_compose_backup import enums, utils
|
||||||
|
|
||||||
|
logger = logging.getLogger(__name__)
|
||||||
|
|
||||||
VOLUME_TYPE_BIND = "bind"
|
VOLUME_TYPE_BIND = "bind"
|
||||||
VOLUME_TYPE_VOLUME = "volume"
|
VOLUME_TYPE_VOLUME = "volume"
|
||||||
@@ -27,8 +30,8 @@ class Container:
|
|||||||
if self._labels is None:
|
if self._labels is None:
|
||||||
raise ValueError('Container meta missing Config->Labels')
|
raise ValueError('Container meta missing Config->Labels')
|
||||||
|
|
||||||
self._include = self._parse_pattern(self.get_label('restic-compose-backup.volumes.include'))
|
self._include = self._parse_pattern(self.get_label(enums.LABEL_VOLUMES_INCLUDE))
|
||||||
self._exclude = self._parse_pattern(self.get_label('restic-compose-backup.volumes.exclude'))
|
self._exclude = self._parse_pattern(self.get_label(enums.LABEL_VOLUMES_EXCLUDE))
|
||||||
|
|
||||||
@property
|
@property
|
||||||
def instance(self) -> 'Container':
|
def instance(self) -> 'Container':
|
||||||
@@ -65,6 +68,9 @@ class Container:
|
|||||||
"""All configured env vars for the container as a list"""
|
"""All configured env vars for the container as a list"""
|
||||||
return self.get_config('Env')
|
return self.get_config('Env')
|
||||||
|
|
||||||
|
def remove(self):
|
||||||
|
self._data.remove()
|
||||||
|
|
||||||
def get_config_env(self, name) -> str:
|
def get_config_env(self, name) -> str:
|
||||||
"""Get a config environment variable by name"""
|
"""Get a config environment variable by name"""
|
||||||
# convert to dict and fetch env var by name
|
# convert to dict and fetch env var by name
|
||||||
@@ -107,7 +113,8 @@ class Container:
|
|||||||
|
|
||||||
@property
|
@property
|
||||||
def volume_backup_enabled(self) -> bool:
|
def volume_backup_enabled(self) -> bool:
|
||||||
return utils.is_true(self.get_label('restic-compose-backup.volumes'))
|
"""bool: If the ``restic-compose-backup.volumes`` label is set"""
|
||||||
|
return utils.is_true(self.get_label(enums.LABEL_VOLUMES_ENABLED))
|
||||||
|
|
||||||
@property
|
@property
|
||||||
def database_backup_enabled(self) -> bool:
|
def database_backup_enabled(self) -> bool:
|
||||||
@@ -120,24 +127,27 @@ class Container:
|
|||||||
|
|
||||||
@property
|
@property
|
||||||
def mysql_backup_enabled(self) -> bool:
|
def mysql_backup_enabled(self) -> bool:
|
||||||
return utils.is_true(self.get_label('restic-compose-backup.mysql'))
|
"""bool: If the ``restic-compose-backup.mysql`` label is set"""
|
||||||
|
return utils.is_true(self.get_label(enums.LABEL_MYSQL_ENABLED))
|
||||||
|
|
||||||
@property
|
@property
|
||||||
def mariadb_backup_enabled(self) -> bool:
|
def mariadb_backup_enabled(self) -> bool:
|
||||||
return utils.is_true(self.get_label('restic-compose-backup.mariadb'))
|
"""bool: If the ``restic-compose-backup.mariadb`` label is set"""
|
||||||
|
return utils.is_true(self.get_label(enums.LABEL_MARIADB_ENABLED))
|
||||||
|
|
||||||
@property
|
@property
|
||||||
def postgresql_backup_enabled(self) -> bool:
|
def postgresql_backup_enabled(self) -> bool:
|
||||||
return utils.is_true(self.get_label('restic-compose-backup.postgres'))
|
"""bool: If the ``restic-compose-backup.postgres`` label is set"""
|
||||||
|
return utils.is_true(self.get_label(enums.LABEL_POSTGRES_ENABLED))
|
||||||
|
|
||||||
@property
|
@property
|
||||||
def is_backup_process_container(self) -> bool:
|
def is_backup_process_container(self) -> bool:
|
||||||
"""Is this container the running backup process?"""
|
"""Is this container the running backup process?"""
|
||||||
return self.get_label('restic-compose-backup.backup_process') == 'True'
|
return self.get_label(self.backup_process_label) == 'True'
|
||||||
|
|
||||||
@property
|
@property
|
||||||
def is_running(self) -> bool:
|
def is_running(self) -> bool:
|
||||||
"""Is the container running?"""
|
"""bool: Is the container running?"""
|
||||||
return self._state.get('Running', False)
|
return self._state.get('Running', False)
|
||||||
|
|
||||||
@property
|
@property
|
||||||
@@ -150,6 +160,11 @@ class Container:
|
|||||||
"""Name of the container/service"""
|
"""Name of the container/service"""
|
||||||
return self.get_label('com.docker.compose.service', default='')
|
return self.get_label('com.docker.compose.service', default='')
|
||||||
|
|
||||||
|
@property
|
||||||
|
def backup_process_label(self) -> str:
|
||||||
|
"""str: The unique backup process label for this project"""
|
||||||
|
return f"{enums.LABEL_BACKUP_PROCESS}-{self.project_name}"
|
||||||
|
|
||||||
@property
|
@property
|
||||||
def project_name(self) -> str:
|
def project_name(self) -> str:
|
||||||
"""Name of the compose setup"""
|
"""Name of the compose setup"""
|
||||||
@@ -310,6 +325,7 @@ class RunningContainers:
|
|||||||
self.containers = []
|
self.containers = []
|
||||||
self.this_container = None
|
self.this_container = None
|
||||||
self.backup_process_container = None
|
self.backup_process_container = None
|
||||||
|
self.stale_backup_process_containers = []
|
||||||
|
|
||||||
# Find the container we are running in.
|
# Find the container we are running in.
|
||||||
# If we don't have this information we cannot continue
|
# If we don't have this information we cannot continue
|
||||||
@@ -320,10 +336,20 @@ class RunningContainers:
|
|||||||
if not self.this_container:
|
if not self.this_container:
|
||||||
raise ValueError("Cannot find metadata for backup container")
|
raise ValueError("Cannot find metadata for backup container")
|
||||||
|
|
||||||
# Gather all containers in the current compose setup
|
# Gather all running containers in the current compose setup
|
||||||
for container_data in all_containers:
|
for container_data in all_containers:
|
||||||
container = Container(container_data)
|
container = Container(container_data)
|
||||||
|
|
||||||
|
# Gather stale backup process containers
|
||||||
|
if (self.this_container.image == container.image
|
||||||
|
and not container.is_running
|
||||||
|
and container.is_backup_process_container):
|
||||||
|
self.stale_backup_process_containers.append(container)
|
||||||
|
|
||||||
|
# We only care about running containers after this point
|
||||||
|
if not container.is_running:
|
||||||
|
continue
|
||||||
|
|
||||||
# Detect running backup process container
|
# Detect running backup process container
|
||||||
if container.is_backup_process_container:
|
if container.is_backup_process_container:
|
||||||
self.backup_process_container = container
|
self.backup_process_container = container
|
||||||
@@ -331,7 +357,7 @@ class RunningContainers:
|
|||||||
# Detect containers belonging to the current compose setup
|
# Detect containers belonging to the current compose setup
|
||||||
if (container.project_name == self.this_container.project_name
|
if (container.project_name == self.this_container.project_name
|
||||||
and not container.is_oneoff):
|
and not container.is_oneoff):
|
||||||
if container.id != self.this_container.id:
|
if container != self.backup_process_container:
|
||||||
self.containers.append(container)
|
self.containers.append(container)
|
||||||
|
|
||||||
@property
|
@property
|
||||||
@@ -339,6 +365,11 @@ class RunningContainers:
|
|||||||
"""str: Name of the compose project"""
|
"""str: Name of the compose project"""
|
||||||
return self.this_container.project_name
|
return self.this_container.project_name
|
||||||
|
|
||||||
|
@property
|
||||||
|
def backup_process_label(self) -> str:
|
||||||
|
"""str: The backup process label for this project"""
|
||||||
|
return self.this_container.backup_process_label
|
||||||
|
|
||||||
@property
|
@property
|
||||||
def backup_process_running(self) -> bool:
|
def backup_process_running(self) -> bool:
|
||||||
"""Is the backup process container running?"""
|
"""Is the backup process container running?"""
|
||||||
@@ -358,6 +389,7 @@ class RunningContainers:
|
|||||||
return mounts
|
return mounts
|
||||||
|
|
||||||
def get_service(self, name) -> Container:
|
def get_service(self, name) -> Container:
|
||||||
|
"""Container: Get a service by name"""
|
||||||
for container in self.containers:
|
for container in self.containers:
|
||||||
if container.service_name == name:
|
if container.service_name == name:
|
||||||
return container
|
return container
|
||||||
|
69
src/restic_compose_backup/cron.py
Normal file
69
src/restic_compose_backup/cron.py
Normal file
@@ -0,0 +1,69 @@
|
|||||||
|
"""
|
||||||
|
# ┌───────────── minute (0 - 59)
|
||||||
|
# │ ┌───────────── hour (0 - 23)
|
||||||
|
# │ │ ┌───────────── day of the month (1 - 31)
|
||||||
|
# │ │ │ ┌───────────── month (1 - 12)
|
||||||
|
# │ │ │ │ ┌───────────── day of the week (0 - 6) (Sunday to Saturday;
|
||||||
|
# │ │ │ │ │ 7 is also Sunday on some systems)
|
||||||
|
# │ │ │ │ │
|
||||||
|
# │ │ │ │ │
|
||||||
|
# * * * * * command to execute
|
||||||
|
"""
|
||||||
|
QUOTE_CHARS = ['"', "'"]
|
||||||
|
|
||||||
|
|
||||||
|
def generate_crontab(config):
|
||||||
|
"""Generate a crontab entry for running backup job"""
|
||||||
|
command = config.cron_command.strip()
|
||||||
|
schedule = config.cron_schedule
|
||||||
|
|
||||||
|
if schedule:
|
||||||
|
schedule = schedule.strip()
|
||||||
|
schedule = strip_quotes(schedule)
|
||||||
|
if not validate_schedule(schedule):
|
||||||
|
schedule = config.default_crontab_schedule
|
||||||
|
else:
|
||||||
|
schedule = config.default_crontab_schedule
|
||||||
|
|
||||||
|
return f'{schedule} {command}\n'
|
||||||
|
|
||||||
|
|
||||||
|
def validate_schedule(schedule: str):
|
||||||
|
"""Validate crontab format"""
|
||||||
|
parts = schedule.split()
|
||||||
|
if len(parts) != 5:
|
||||||
|
return False
|
||||||
|
|
||||||
|
for p in parts:
|
||||||
|
if p != '*' and not p.isdigit():
|
||||||
|
return False
|
||||||
|
|
||||||
|
minute, hour, day, month, weekday = parts
|
||||||
|
try:
|
||||||
|
validate_field(minute, 0, 59)
|
||||||
|
validate_field(hour, 0, 23)
|
||||||
|
validate_field(day, 1, 31)
|
||||||
|
validate_field(month, 1, 12)
|
||||||
|
validate_field(weekday, 0, 6)
|
||||||
|
except ValueError:
|
||||||
|
return False
|
||||||
|
|
||||||
|
return True
|
||||||
|
|
||||||
|
|
||||||
|
def validate_field(value, min, max):
|
||||||
|
if value == '*':
|
||||||
|
return
|
||||||
|
|
||||||
|
i = int(value)
|
||||||
|
return min <= i <= max
|
||||||
|
|
||||||
|
|
||||||
|
def strip_quotes(value: str):
|
||||||
|
"""Strip enclosing single or double quotes if present"""
|
||||||
|
if value[0] in QUOTE_CHARS:
|
||||||
|
value = value[1:]
|
||||||
|
if value[-1] in QUOTE_CHARS:
|
||||||
|
value = value[:-1]
|
||||||
|
|
||||||
|
return value
|
11
src/restic_compose_backup/enums.py
Normal file
11
src/restic_compose_backup/enums.py
Normal file
@@ -0,0 +1,11 @@
|
|||||||
|
|
||||||
|
# Labels
|
||||||
|
LABEL_VOLUMES_ENABLED = 'restic-compose-backup.volumes'
|
||||||
|
LABEL_VOLUMES_INCLUDE = 'restic-compose-backup.volumes.include'
|
||||||
|
LABEL_VOLUMES_EXCLUDE = 'restic-compose-backup.volumes.exclude'
|
||||||
|
|
||||||
|
LABEL_MYSQL_ENABLED = 'restic-compose-backup.mysql'
|
||||||
|
LABEL_POSTGRES_ENABLED = 'restic-compose-backup.postgres'
|
||||||
|
LABEL_MARIADB_ENABLED = 'restic-compose-backup.mariadb'
|
||||||
|
|
||||||
|
LABEL_BACKUP_PROCESS = 'restic-compose-backup.process'
|
@@ -40,36 +40,46 @@ def backup_from_stdin(repository: str, filename: str, source_command: List[str])
|
|||||||
])
|
])
|
||||||
|
|
||||||
# pipe source command into dest command
|
# pipe source command into dest command
|
||||||
# NOTE: Using the default buffer size: io.DEFAULT_BUFFER_SIZE = 8192
|
source_process = Popen(source_command, stdout=PIPE, bufsize=65536)
|
||||||
# We might want to tweak that to speed up large dumps.
|
dest_process = Popen(dest_command, stdin=source_process.stdout, stdout=PIPE, stderr=PIPE, bufsize=65536)
|
||||||
# Actual tests tests must be done.
|
|
||||||
source_process = Popen(source_command, stdout=PIPE)
|
|
||||||
dest_process = Popen(dest_command, stdin=source_process.stdout, stdout=PIPE, stderr=PIPE)
|
|
||||||
stdout, stderr = dest_process.communicate()
|
stdout, stderr = dest_process.communicate()
|
||||||
|
|
||||||
if stdout:
|
|
||||||
for line in stdout.decode().split('\n'):
|
|
||||||
logger.debug(line)
|
|
||||||
|
|
||||||
if stderr:
|
|
||||||
for line in stderr.decode().split('\n'):
|
|
||||||
logger.error(line)
|
|
||||||
|
|
||||||
# Ensure both processes exited with code 0
|
# Ensure both processes exited with code 0
|
||||||
source_exit, dest_exit = source_process.poll(), dest_process.poll()
|
source_exit, dest_exit = source_process.poll(), dest_process.poll()
|
||||||
return 0 if (source_exit == 0 and dest_exit == 0) else 1
|
exit_code = 0 if (source_exit == 0 and dest_exit == 0) else 1
|
||||||
|
|
||||||
|
if stdout:
|
||||||
|
commands.log_std('stdout', stdout, logging.DEBUG if exit_code == 0 else logging.ERROR)
|
||||||
|
|
||||||
|
if stderr:
|
||||||
|
commands.log_std('stderr', stderr, logging.ERROR)
|
||||||
|
|
||||||
|
return exit_code
|
||||||
|
|
||||||
|
|
||||||
def snapshots(repository: str, last=True) -> Tuple[str, str]:
|
def snapshots(repository: str, last=True) -> Tuple[str, str]:
|
||||||
|
"""Returns the stdout and stderr info"""
|
||||||
args = ["snapshots"]
|
args = ["snapshots"]
|
||||||
if last:
|
if last:
|
||||||
args.append('--last')
|
args.append('--last')
|
||||||
return commands.run_capture_std(restic(repository, args))
|
return commands.run_capture_std(restic(repository, args))
|
||||||
|
|
||||||
|
|
||||||
|
def is_initialized(repository: str) -> bool:
|
||||||
|
"""
|
||||||
|
Checks if a repository is initialized using snapshots command.
|
||||||
|
Note that this cannot separate between uninitalized repo
|
||||||
|
and other errors, but this method is reccomended by the restic
|
||||||
|
community.
|
||||||
|
"""
|
||||||
|
return commands.run(restic(repository, ["snapshots", '--last'])) == 0
|
||||||
|
|
||||||
|
|
||||||
def forget(repository: str, daily: str, weekly: str, monthly: str, yearly: str):
|
def forget(repository: str, daily: str, weekly: str, monthly: str, yearly: str):
|
||||||
return commands.run(restic(repository, [
|
return commands.run(restic(repository, [
|
||||||
'forget',
|
'forget',
|
||||||
|
'--group-by',
|
||||||
|
'paths',
|
||||||
'--keep-daily',
|
'--keep-daily',
|
||||||
daily,
|
daily,
|
||||||
'--keep-weekly',
|
'--keep-weekly',
|
||||||
@@ -90,6 +100,7 @@ def prune(repository: str):
|
|||||||
def check(repository: str):
|
def check(repository: str):
|
||||||
return commands.run(restic(repository, [
|
return commands.run(restic(repository, [
|
||||||
"check",
|
"check",
|
||||||
|
# "--with-cache",
|
||||||
]))
|
]))
|
||||||
|
|
||||||
|
|
||||||
|
@@ -1,26 +1,54 @@
|
|||||||
import os
|
import os
|
||||||
|
import logging
|
||||||
|
from typing import List
|
||||||
from contextlib import contextmanager
|
from contextlib import contextmanager
|
||||||
import docker
|
import docker
|
||||||
|
|
||||||
from restic_compose_backup.config import Config
|
logger = logging.getLogger(__name__)
|
||||||
|
|
||||||
TRUE_VALUES = ['1', 'true', 'True', True, 1]
|
TRUE_VALUES = ['1', 'true', 'True', True, 1]
|
||||||
|
|
||||||
|
|
||||||
def list_containers():
|
def docker_client():
|
||||||
|
"""
|
||||||
|
Create a docker client from the following environment variables::
|
||||||
|
|
||||||
|
DOCKER_HOST=unix://tmp/docker.sock
|
||||||
|
DOCKER_TLS_VERIFY=1
|
||||||
|
DOCKER_CERT_PATH=''
|
||||||
|
"""
|
||||||
|
# NOTE: Remove this fallback in 1.0
|
||||||
|
if not os.environ.get('DOCKER_HOST'):
|
||||||
|
os.environ['DOCKER_HOST'] = 'unix://tmp/docker.sock'
|
||||||
|
|
||||||
|
return docker.from_env()
|
||||||
|
|
||||||
|
|
||||||
|
def list_containers() -> List[dict]:
|
||||||
"""
|
"""
|
||||||
List all containers.
|
List all containers.
|
||||||
|
|
||||||
Returns:
|
Returns:
|
||||||
List of raw container json data from the api
|
List of raw container json data from the api
|
||||||
"""
|
"""
|
||||||
config = Config()
|
client = docker_client()
|
||||||
client = docker.DockerClient(base_url=config.docker_base_url)
|
all_containers = client.containers.list(all=True)
|
||||||
all_containers = client.containers.list()
|
|
||||||
client.close()
|
client.close()
|
||||||
return [c.attrs for c in all_containers]
|
return [c.attrs for c in all_containers]
|
||||||
|
|
||||||
|
|
||||||
|
def remove_containers(containers: List['Container']):
|
||||||
|
client = docker_client()
|
||||||
|
logger.info('Attempting to delete stale backup process containers')
|
||||||
|
for container in containers:
|
||||||
|
logger.info(' -> deleting %s', container.name)
|
||||||
|
try:
|
||||||
|
c = client.containers.get(container.name)
|
||||||
|
c.remove()
|
||||||
|
except Exception as ex:
|
||||||
|
logger.exception(ex)
|
||||||
|
|
||||||
|
|
||||||
def is_true(value):
|
def is_true(value):
|
||||||
"""
|
"""
|
||||||
Evaluates the truthfullness of a bool value in container labels
|
Evaluates the truthfullness of a bool value in container labels
|
||||||
|
@@ -3,7 +3,7 @@ from setuptools import setup, find_namespace_packages
|
|||||||
setup(
|
setup(
|
||||||
name="restic-compose-backup",
|
name="restic-compose-backup",
|
||||||
url="https://github.com/ZettaIO/restic-compose-backup",
|
url="https://github.com/ZettaIO/restic-compose-backup",
|
||||||
version="0.3.2",
|
version="0.4.2",
|
||||||
author="Einar Forselv",
|
author="Einar Forselv",
|
||||||
author_email="eforselv@gmail.com",
|
author_email="eforselv@gmail.com",
|
||||||
packages=find_namespace_packages(include=['restic_compose_backup']),
|
packages=find_namespace_packages(include=['restic_compose_backup']),
|
||||||
|
@@ -160,7 +160,7 @@
|
|||||||
"OpenStdin": true,
|
"OpenStdin": true,
|
||||||
"StdinOnce": true,
|
"StdinOnce": true,
|
||||||
"Env": [
|
"Env": [
|
||||||
"DOCKER_BASE_URL=unix://tmp/docker.sock",
|
"DOCKER_HOST=unix://tmp/docker.sock",
|
||||||
"RESTIC_REPOSITORY=/tmp/backup",
|
"RESTIC_REPOSITORY=/tmp/backup",
|
||||||
"RESTIC_PASSWORD=password",
|
"RESTIC_PASSWORD=password",
|
||||||
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
|
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
|
||||||
|
@@ -77,7 +77,7 @@ class ResticBackupTests(unittest.TestCase):
|
|||||||
]
|
]
|
||||||
with mock.patch(list_containers_func, fixtures.containers(containers=containers)):
|
with mock.patch(list_containers_func, fixtures.containers(containers=containers)):
|
||||||
result = RunningContainers()
|
result = RunningContainers()
|
||||||
self.assertEqual(len(result.containers), 3, msg="Three containers expected")
|
self.assertEqual(len(result.containers), 4, msg="Three containers expected")
|
||||||
self.assertNotEqual(result.this_container, None, msg="No backup container found")
|
self.assertNotEqual(result.this_container, None, msg="No backup container found")
|
||||||
web_service = result.get_service('web')
|
web_service = result.get_service('web')
|
||||||
self.assertNotEqual(web_service, None)
|
self.assertNotEqual(web_service, None)
|
||||||
@@ -191,7 +191,7 @@ class ResticBackupTests(unittest.TestCase):
|
|||||||
{
|
{
|
||||||
'service': 'backup_runner',
|
'service': 'backup_runner',
|
||||||
'labels': {
|
'labels': {
|
||||||
'restic-compose-backup.backup_process': 'True',
|
'restic-compose-backup.process-default': 'True',
|
||||||
},
|
},
|
||||||
},
|
},
|
||||||
]
|
]
|
||||||
|
2
tox.ini
2
tox.ini
@@ -14,7 +14,7 @@ basepython =
|
|||||||
py37: python3.7
|
py37: python3.7
|
||||||
|
|
||||||
deps =
|
deps =
|
||||||
-r{toxinidir}/tests/requirements.txt
|
-r{toxinidir}/src//tests/requirements.txt
|
||||||
commands =
|
commands =
|
||||||
; coverage run --source=restic_compose_backup -m pytest tests/
|
; coverage run --source=restic_compose_backup -m pytest tests/
|
||||||
; coverage report
|
; coverage report
|
||||||
|
Reference in New Issue
Block a user