[PATCH proxmox-backup 22/28] sync: pull: protect retained snapshot from being overwritten

[Christian Ebner <c.ebner@proxmox.com>]

During a resync, a protected snapshot might be overwritten, which
must not be allowed if it is still protected by a retention timespan.

Signed-off-by: Christian Ebner <c.ebner@proxmox.com>
---
 src/server/pull.rs | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/src/server/pull.rs b/src/server/pull.rs
index 816e64ce7..893b642d4 100644
--- a/src/server/pull.rs
+++ b/src/server/pull.rs
@@ -768,6 +768,17 @@ async fn pull_snapshot<'a>(
         return Ok(None);
     }
 
+    if let Some(manifest) = &existing_target_manifest {
+        if let Some(retain_until) = manifest.retention_timestamp()? {
+            if retain_until > proxmox_time::epoch_i64() {
+                bail!(
+                    "Cannot resync target manifest since retention locked until '{}'",
+                    proxmox_time::epoch_to_rfc3339(retain_until)?,
+                );
+            }
+        }
+    }
+
     let (crypt_config, new_manifest) = match optionally_use_decryption_key(
         Arc::clone(&params),
         &manifest,
-- 
2.47.3