From mboxrd@z Thu Jan 1 00:00:00 1970
Return-Path: <lindsay.mathieson@gmail.com>
Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
(No client certificate requested)
by lists.proxmox.com (Postfix) with ESMTPS id 7B35771ED0
for <pve-user@lists.proxmox.com>; Sat, 10 Apr 2021 05:23:13 +0200 (CEST)
Received: from firstgate.proxmox.com (localhost [127.0.0.1])
by firstgate.proxmox.com (Proxmox) with ESMTP id 69396C779
for <pve-user@lists.proxmox.com>; Sat, 10 Apr 2021 05:23:13 +0200 (CEST)
Received: from mail-pg1-x52d.google.com (mail-pg1-x52d.google.com
[IPv6:2607:f8b0:4864:20::52d])
(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
(No client certificate requested)
by firstgate.proxmox.com (Proxmox) with ESMTPS id A5827C761
for <pve-user@lists.proxmox.com>; Sat, 10 Apr 2021 05:23:12 +0200 (CEST)
Received: by mail-pg1-x52d.google.com with SMTP id k8so5292288pgf.4
for <pve-user@lists.proxmox.com>; Fri, 09 Apr 2021 20:23:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
h=to:from:subject:message-id:date:user-agent:mime-version
:content-language;
bh=TEqyKRZuOZnSNYGD2zk/Z8ZYm6PWKImChksshPu35Vo=;
b=WWB4TiR/YYbxs6uP2MVmev5/OX/WQ2EBeUsVp5+SvORb3Cn8HHQznWqvISV52tu1Kh
JB43OJGr8NEmmxS3JzlycSipqIXn7cDipdyySJ5Cc4eYd0t7rv90cd1vB+J2N8VS1UmO
UKeDF2Qo1cR32mCB2WnXTYz0zDT4nHuwQVZSQIBkAt/219pZTimPur6+5H7wJMOyO1l6
XxNSfbnRR3jyq+RsTZSIyi0WkK+cSkpqDTkSdi4DHgw11j2k2Rd9MCW2xYNR0pLityN8
DvRt8vTp1cWRkfNDlalXcK/yRyXUDxaPvkEKVTHiksUg1NXQTDv+2PNk85tMTiu2G8/h
Steg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:to:from:subject:message-id:date:user-agent
:mime-version:content-language;
bh=TEqyKRZuOZnSNYGD2zk/Z8ZYm6PWKImChksshPu35Vo=;
b=HyCkn2aqHWsHiTVgsL55Y1KtTa+uKjADmLXRFsCOwy9JXONWBewtV3vEktMi3j9wRP
VhqzzccHuRiI08EKVuwWcDClDNZ7gIo66ltfd+lyHUhelLjAqCC67UcvRgIFVe766+T5
cE81eTQ8ocyXanhFTCKUAKqMSGp4OLSN1brp97L2mciC8GDMPektjI5byQVySDr/D/HC
HLjwWhOrkPLQAo1IjLHiYd95WENRD9gu1rQYaUM1P4694lRsKD/QeQuXe/CIcFLjGiZB
fxQD31AndYYbQTLgoyLt+/kLEWm2+g5eHkbAzdTlBEDyKlSFkqEJfku2hn2Cy0bfijDg
1ZBw==
X-Gm-Message-State: AOAM531cifJMnwpB5RBaX1u3JAIrvOyCijskda7u5BIhVEfdxBRSyz0P
lG3FQChyG7bFoEMYR92lcIXvA+Lo2Nxf5A==
X-Google-Smtp-Source: ABdhPJwtNmigpGMdQJOTlWtcP0s5s6xNLTY/qr2/HrlhHD4GRIcyKn2IgGqfroGSYIXW8nDOKdNp7g==
X-Received: by 2002:a63:f40b:: with SMTP id g11mr16877078pgi.133.1618024984624;
Fri, 09 Apr 2021 20:23:04 -0700 (PDT)
Received: from [192.168.1.11] (167-179-176-9.a7b3b0.bne.nbn.aussiebb.net.
[167.179.176.9])
by smtp.gmail.com with ESMTPSA id gd12sm3441031pjb.48.2021.04.09.20.23.02
for <pve-user@lists.proxmox.com>
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
Fri, 09 Apr 2021 20:23:03 -0700 (PDT)
To: pve-user@lists.proxmox.com
From: Lindsay Mathieson <lindsay.mathieson@gmail.com>
Message-ID: <15e5bfd5-7458-fdbe-5079-ce78a19e0099@gmail.com>
Date: Sat, 10 Apr 2021 13:22:57 +1000
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101
Thunderbird/78.9.0
MIME-Version: 1.0
Content-Language: en-US
X-SPAM-LEVEL: Spam detection results: 0
AWL 0.044 Adjusted score from AWL reputation of From: address
DKIM_SIGNED 0.1 Message has a DKIM or DK signature,
not necessarily valid
DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature
DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's
domain
DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from
domain
FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider
HTML_MESSAGE 0.001 HTML included in message
RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/,
no trust
SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record
SPF_PASS -0.001 SPF: sender matches SPF record
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Content-Filtered-By: Mailman/MimeDel 2.1.29
Subject: [PVE-User] Revisited: External disk backup using PBS - Requesting
Criticism/Advice?
X-BeenThere: pve-user@lists.proxmox.com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Proxmox VE user list <pve-user.lists.proxmox.com>
List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-user>,
<mailto:pve-user-request@lists.proxmox.com?subject=unsubscribe>
List-Archive: <http://lists.proxmox.com/pipermail/pve-user/>
List-Post: <mailto:pve-user@lists.proxmox.com>
List-Help: <mailto:pve-user-request@lists.proxmox.com?subject=help>
List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-user>,
<mailto:pve-user-request@lists.proxmox.com?subject=subscribe>
X-List-Received-Date: Sat, 10 Apr 2021 03:23:13 -0000
TTL;DR - Backup PC is a standalone Proxmox Server, running a PBS lxc
container using its host filesystem for the Backup store. The PBS
container is backed up using vzdump to an attached external hard drive
which is rotated offsite.
Source Data
* 5 Node Proxmox Cluster
* Ceph storage (size = 3)
* 30 VM's
Backup Destination
Standalone Proxmox Server in same server room as main cluster
* 16 GM Ram
* CPU: Intel i5
* Boot - 2 SSD's in ZFS RAID1
* Data - 2 4TB WD NAS Drives in ZFS RAID1
* Bonded 1G * 3
* PBS Container
o Data Store - 4TB, passed through from Host
Schedule
* Proxmox backups up all VM's to PBS Container Weekly
o Will revisit the schedule
* Host proxmox server backs up PBS and its data to external hard drive
o Approx 2 TB Data (we are just an SMB)
o Drive is rotated offsite
Recovery
* VM's can easily be restored from the PBS server as needed (very rare
occurrence - usually a user messed up their VM)
Disaster Recovery
This is the real concern - Fire, Theft etc. All servers and data
including the Standalone Host and PBS server are gone.
* Recreate Proxmox Cluster
* Recreate Proxmox PBS Host
o Restore the PBS Container and data from an offsite backup disk
* Restore the VM's to the Cluster from the PBS Container
Does all this seem practical and safe?
Thanks - Lindsay
--
Lindsay