From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id 589181FF187 for ; Mon, 28 Jul 2025 20:12:56 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 08F3739CA9; Mon, 28 Jul 2025 20:14:20 +0200 (CEST) Authentication-Results: garm.ovh; auth=pass (GARM-102R00428e6a05e-10c7-4a10-bca6-9521c7573c7d, 68624090F3B3FBC1D361225CCB86D50B15EAB9B9) smtp.auth=laurent@guerby.net X-OVh-ClientIp: 91.224.148.165 Message-ID: <6a26a66c82ef30f355d77dece90221ab8138c6e7.camel@guerby.net> From: Laurent GUERBY To: Proxmox Backup Server development discussion Date: Mon, 28 Jul 2025 20:08:02 +0200 In-Reply-To: <2ee98bc8-d3b4-4664-b6ba-a9a80296bb81@proxmox.com> References: <20250723143152.3829064-1-d.csapak@proxmox.com> <931c8fa8-694e-43fe-9354-7ba752063b2c@proxmox.com> <2ee98bc8-d3b4-4664-b6ba-a9a80296bb81@proxmox.com> User-Agent: Evolution 3.46.4-2 MIME-Version: 1.0 X-Originating-IP: [37.59.142.102] X-ClientProxiedBy: DAG6EX1.mxp7.local (172.16.2.51) To DAG3EX1.mxp7.local (172.16.2.21) X-Ovh-Tracer-GUID: f20fea8c-93e6-44e2-8930-3a4c2b318509 X-Ovh-Tracer-Id: 13583982378279771671 X-VR-SPAMSTATE: OK X-VR-SPAMSCORE: 0 X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeeffedrtdefgdelvdekhecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemucehtddtnecunecujfgurhepkffuhffvffgjfhgtgfgfgghisehtqhertddtreejnecuhfhrohhmpefnrghurhgvnhhtucfifgfgtfeujgcuoehlrghurhgvnhhtsehguhgvrhgshidrnhgvtheqnecuggftrfgrthhtvghrnheptdduhffhffeitdettdetfefgkeffteevudejhfeiieekieevjedujefhhfegiedvnecuffhomhgrihhnpehprhhogihmohigrdgtohhmnecukfhppeduvdejrddtrddtrddupdefjedrheelrddugedvrddutddvpdeluddrvddvgedrudegkedrudeiheenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduvdejrddtrddtrddupdhmrghilhhfrhhomheplhgruhhrvghnthesghhuvghrsgihrdhnvghtpdhnsggprhgtphhtthhopedupdhrtghpthhtohepphgsshdquggvvhgvlheslhhishhtshdrphhrohigmhhogidrtghomhdpoffvtefjohhsthepmhhoheegkegmpdhmohguvgepshhmthhpohhuth DKIM-Signature: a=rsa-sha256; bh=iDWCgsBspBNpN1r2MWbknnqe5kEyusFZBiZVM6xE40c=; c=relaxed/relaxed; d=guerby.net; h=From; s=ovhmo40022-selector1; t=1753726084; v=1; b=ixy5js3MomojLz82WpbcL0xmS//Iv1m+wk30GXc8JnlrnGYqqcVxdGvXfG9lqIQYfvqfg4zV 7d+zWpZGKB8gEHBSgHCNjkHrLyh0KPzrTTSQz5LfkLmTqU3iHaVooRLY0GaPQvpqGLGElRNLrBx imIbtNAlnq6ZzmXCnimhE+ggOkSooOsx8m6tGdpyG0C3WKb7uhUjit9TrqweXysOJTK8mRzilHz Kc++f5U52gD2c7f56U/Pf4i64qzZqFTV/TuVJEZvbms48ZoQXcAqQog8yP2cDq6zrVBslMNk215 O7YWW05on3u4pXrelefirmRa1RA4lIT+I6FsLPmzo3Wdg== X-SPAM-LEVEL: Spam detection results: 0 AWL 0.136 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain DMARC_MISSING 0.1 Missing DMARC policy RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_RPBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_SAFE_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Subject: Re: [pbs-devel] [PATCH] tape: forbid operations on a s3 datastore X-BeenThere: pbs-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox Backup Server development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Proxmox Backup Server development discussion Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: pbs-devel-bounces@lists.proxmox.com Sender: "pbs-devel" On Mon, 2025-07-28 at 09:25 +0200, Christian Ebner wrote: > On 7/27/25 12:37 AM, Laurent GUERBY wrote: > > On Thu, 2025-07-24 at 08:50 +0200, Dominik Csapak wrote: > > > Hi > > > > > > On 7/23/25 21:51, Thomas Lamprecht wrote: > > > > This was fine and I applied it but still have some comments on one > > > > of the arguments that would indicate that this never makes sense to > > > > have, as IMO it can. > > > > > > > > Am 23.07.25 um 16:31 schrieb Dominik Csapak: > > > > > namely: > > > > > * backup to tape from s3 (including a configuring such a job) > > > > > * restore to s3 from tape > > > > > > > > > > It does not work currently, but it probably does not make sense to allow > > > > > that at all for several reasons: > > > > > * both are designed to be 'off-site', so copying data from one off-site > > > > > location to another directly does not make sense most of the time > > > > Hi, > > > > With my CISO hat on I see tapes physically removed from the tape > > library as an essential security tool providing the "offline" property > > to one copy of the backups, this is orthogonal to "off-site" being > > discussed here. > > > > S3 is typically online, even if some providers offer S3 to > > tape/offline. > > > > Bandwith/delay constraints especially for full restore after a > > successful deep cyberattack might favor an "on-site "offline" tape > > backup for many organization. > > > > Backup solutions like Veeam already provide "object to tape". > > > > I think it would be nice to have this feature in the PBS roadmap if > > there's no technical roadblock to having the same feature set for S3 > > and directory datastore, including tape. > > Hi, > > please do open an issue on https://bugzilla.proxmox.com for this, maybe > also linking to this thread via the following link: > https://lore.proxmox.com/pbs-devel/ad4d893fad70444ed36ebcd1cefbf58081d905e5.camel@guerby.net/T > > By this you can get also notifications on status progress, I will have a > look at how to implement S3 <-> tape as well. Done : https://bugzilla.proxmox.com/show_bug.cgi?id=6582 Sincerely, Laurent GUERBY _______________________________________________ pbs-devel mailing list pbs-devel@lists.proxmox.com https://lists.proxmox.com/cgi-bin/mailman/listinfo/pbs-devel