From: Christian Ebner <c.ebner@proxmox.com>
To: pbs-devel@lists.proxmox.com
Subject: [PATCH proxmox-backup 16/28] datastore: conditionally treat missing manifest as error or bening
Date: Thu, 13 Aug 2026 19:09:50 +0200 [thread overview]
Message-ID: <20260813171002.809441-17-c.ebner@proxmox.com> (raw)
In-Reply-To: <20260813171002.809441-1-c.ebner@proxmox.com>
A backup snapshot without a manifest is generally a transient state
during ongoing backups. In other cases it must however be treated
as error.
Therefore, refactor the manifest and blob loading logic to
conditionally allow for missing manifest blob files. By this the
caller is in control whether to treat the missing file as error or
regular operation.
Signed-off-by: Christian Ebner <c.ebner@proxmox.com>
---
pbs-datastore/src/backup_info.rs | 52 +++++++++++++++++++++++++++-----
src/tools/mod.rs | 13 ++------
2 files changed, 47 insertions(+), 18 deletions(-)
diff --git a/pbs-datastore/src/backup_info.rs b/pbs-datastore/src/backup_info.rs
index be4ec8b3e..f476d4469 100644
--- a/pbs-datastore/src/backup_info.rs
+++ b/pbs-datastore/src/backup_info.rs
@@ -648,11 +648,26 @@ impl BackupDir {
let mut path = self.full_path();
path.push(filename);
- proxmox_lang::try_block!({
- let mut file = std::fs::File::open(&path)?;
- DataBlob::load_from_reader(&mut file)
- })
- .map_err(|err| format_err!("unable to load blob '{:?}' - {}", path, err))
+ self.load_blob_conditionally(&path, true)
+ .map_err(|err| format_err!("unable to load blob '{path:?}' - {err}"))?
+ .ok_or(format_err!("unable to load missing blob '{path:?}'"))
+ }
+
+ /// Load the `DataBlob` from given full path, to be constructed and verified by the caller.
+ ///
+ /// If the blob file does not exist and `not_found_is_error` is `true`, propagates the error
+ /// while otherwise `Ok(None)` is returned.
+ fn load_blob_conditionally(
+ &self,
+ full_path: &Path,
+ not_found_is_error: bool,
+ ) -> Result<Option<DataBlob>, Error> {
+ let opt_data_blob = match std::fs::File::open(full_path) {
+ Ok(mut file) => Some(DataBlob::load_from_reader(&mut file)?),
+ Err(err) if err.kind() == std::io::ErrorKind::NotFound && !not_found_is_error => None,
+ Err(err) => return Err(err.into()),
+ };
+ Ok(opt_data_blob)
}
/// Generate the full archive file path with given archive name including server side type
@@ -989,11 +1004,34 @@ impl BackupDir {
}
/// Load the manifest without a lock. Must not be written back.
+ ///
+ /// A missing manifest file for the snapshot is treated as error.
pub fn load_manifest(&self) -> Result<(BackupManifest, u64), Error> {
- let blob = self.load_blob(MANIFEST_BLOB_NAME.as_ref())?;
+ self.load_manifest_optionally(true)?.ok_or_else(|| {
+ format_err!(
+ "unable to load missing manifest '{:?}'",
+ self.full_path().join(MANIFEST_BLOB_NAME.as_ref()),
+ )
+ })
+ }
+
+ /// Load the manifest without a lock. Must not be written back.
+ ///
+ /// If the manifest file for the snapshot is missing and `missing_manifest_is_error` is
+ /// `true`, propagates the error while otherwise `Ok(None)` is returned.
+ pub fn load_manifest_optionally(
+ &self,
+ missing_manifest_is_error: bool,
+ ) -> Result<Option<(BackupManifest, u64)>, Error> {
+ let mut full_path = self.full_path();
+ full_path.push(MANIFEST_BLOB_NAME.as_ref());
+ let Some(blob) = self.load_blob_conditionally(&full_path, missing_manifest_is_error)?
+ else {
+ return Ok(None);
+ };
let raw_size = blob.raw_size();
let manifest = BackupManifest::try_from(blob)?;
- Ok((manifest, raw_size))
+ Ok(Some((manifest, raw_size)))
}
/// Update the manifest of the specified snapshot. Never write a manifest directly,
diff --git a/src/tools/mod.rs b/src/tools/mod.rs
index ab624d7a6..4e2dd38e8 100644
--- a/src/tools/mod.rs
+++ b/src/tools/mod.rs
@@ -47,17 +47,8 @@ pub fn setup_safe_path_env() {
pub(crate) fn read_backup_index(
backup_dir: &BackupDir,
) -> Result<Option<(BackupManifest, Vec<BackupContent>)>, Error> {
- let (manifest, index_size) = match backup_dir.load_manifest() {
- Ok((manifest, index_size)) => (manifest, index_size),
- Err(err) => {
- let mut manifest_path = backup_dir.full_path();
- manifest_path.push(MANIFEST_BLOB_NAME.as_ref());
- if !manifest_path.exists() {
- return Ok(None);
- } else {
- return Err(err);
- }
- }
+ let Some((manifest, index_size)) = backup_dir.load_manifest_optionally(false)? else {
+ return Ok(None);
};
let mut result = Vec::new();
--
2.47.3
next prev parent reply other threads:[~2026-08-13 17:11 UTC|newest]
Thread overview: 29+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-08-13 17:09 [PATCH proxmox{,-backup} 00/28] append-only sync jobs and snapshot retention timespan Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox 01/28] pbs-api-types: add append only permission and role Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox 02/28] pbs-api-types: add remote datastore append privs " Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox 03/28] pbs-api-types: extend snapshot list items by retention timestamp Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox 04/28] pbs-api-types: extend sync job config by retention-timespan parameter Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox 05/28] pbs-api-types: add maximum retention timespan property to datastore Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox-backup 06/28] api: config: extend sync job config by new retention-timespan Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox-backup 07/28] api: admin: improve code style for status endpoint Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox-backup 08/28] client: avoid error in status if user lacks permissions Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox-backup 09/28] server: allow iterating contents for Datastore.Append permissions Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox-backup 10/28] api: backup: fix possible information leak in multi-tenant datastores Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox-backup 11/28] api: backup: allow backup for user/token with append permission Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox-backup 12/28] api: allow namespace creation on append permissions Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox-backup 13/28] api: sync: allow pull to target for user/token with append permission Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox-backup 14/28] sync: pull: allow pulling " Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox-backup 15/28] sync: push: allow push and ns creation on Remote.DatastoreAppend Christian Ebner
2026-08-13 17:09 ` Christian Ebner [this message]
2026-08-13 17:09 ` [PATCH proxmox-backup 17/28] api: backup: provide retain-until timestamp for extended prune protection Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox-backup 18/28] tools: include retain-until timestamp in snapshot list items Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox-backup 19/28] client: backup writer: allow to send retain-until timestamp on backup Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox-backup 20/28] sync: push: allow to set retention timestamp for synced snapshots Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox-backup 21/28] sync: pull: " Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox-backup 22/28] sync: pull: protect retained snapshot from being overwritten Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox-backup 23/28] api: config: allow to set or delete reteniton timespan for sync jobs Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox-backup 24/28] ui: add retention timespan form and use it for sync job edit window Christian Ebner
2026-08-13 17:09 ` [PATCH proxmox-backup 25/28] datastore/config: parse and enforce maximum retention timespan Christian Ebner
2026-08-13 17:10 ` [PATCH proxmox-backup 26/28] ui: allow datastore wide max retention timespan configuration Christian Ebner
2026-08-13 17:10 ` [PATCH proxmox-backup 27/28] api: admin: allow to update snapshot retention for root user Christian Ebner
2026-08-13 17:10 ` [PATCH proxmox-backup 28/28] ui: show retention in datastore contents Christian Ebner
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260813171002.809441-17-c.ebner@proxmox.com \
--to=c.ebner@proxmox.com \
--cc=pbs-devel@lists.proxmox.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox