From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id 7B35771ED0 for ; Sat, 10 Apr 2021 05:23:13 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 69396C779 for ; Sat, 10 Apr 2021 05:23:13 +0200 (CEST) Received: from mail-pg1-x52d.google.com (mail-pg1-x52d.google.com [IPv6:2607:f8b0:4864:20::52d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by firstgate.proxmox.com (Proxmox) with ESMTPS id A5827C761 for ; Sat, 10 Apr 2021 05:23:12 +0200 (CEST) Received: by mail-pg1-x52d.google.com with SMTP id k8so5292288pgf.4 for ; Fri, 09 Apr 2021 20:23:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=to:from:subject:message-id:date:user-agent:mime-version :content-language; bh=TEqyKRZuOZnSNYGD2zk/Z8ZYm6PWKImChksshPu35Vo=; b=WWB4TiR/YYbxs6uP2MVmev5/OX/WQ2EBeUsVp5+SvORb3Cn8HHQznWqvISV52tu1Kh JB43OJGr8NEmmxS3JzlycSipqIXn7cDipdyySJ5Cc4eYd0t7rv90cd1vB+J2N8VS1UmO UKeDF2Qo1cR32mCB2WnXTYz0zDT4nHuwQVZSQIBkAt/219pZTimPur6+5H7wJMOyO1l6 XxNSfbnRR3jyq+RsTZSIyi0WkK+cSkpqDTkSdi4DHgw11j2k2Rd9MCW2xYNR0pLityN8 DvRt8vTp1cWRkfNDlalXcK/yRyXUDxaPvkEKVTHiksUg1NXQTDv+2PNk85tMTiu2G8/h Steg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version:content-language; bh=TEqyKRZuOZnSNYGD2zk/Z8ZYm6PWKImChksshPu35Vo=; b=HyCkn2aqHWsHiTVgsL55Y1KtTa+uKjADmLXRFsCOwy9JXONWBewtV3vEktMi3j9wRP VhqzzccHuRiI08EKVuwWcDClDNZ7gIo66ltfd+lyHUhelLjAqCC67UcvRgIFVe766+T5 cE81eTQ8ocyXanhFTCKUAKqMSGp4OLSN1brp97L2mciC8GDMPektjI5byQVySDr/D/HC HLjwWhOrkPLQAo1IjLHiYd95WENRD9gu1rQYaUM1P4694lRsKD/QeQuXe/CIcFLjGiZB fxQD31AndYYbQTLgoyLt+/kLEWm2+g5eHkbAzdTlBEDyKlSFkqEJfku2hn2Cy0bfijDg 1ZBw== X-Gm-Message-State: AOAM531cifJMnwpB5RBaX1u3JAIrvOyCijskda7u5BIhVEfdxBRSyz0P lG3FQChyG7bFoEMYR92lcIXvA+Lo2Nxf5A== X-Google-Smtp-Source: ABdhPJwtNmigpGMdQJOTlWtcP0s5s6xNLTY/qr2/HrlhHD4GRIcyKn2IgGqfroGSYIXW8nDOKdNp7g== X-Received: by 2002:a63:f40b:: with SMTP id g11mr16877078pgi.133.1618024984624; Fri, 09 Apr 2021 20:23:04 -0700 (PDT) Received: from [192.168.1.11] (167-179-176-9.a7b3b0.bne.nbn.aussiebb.net. [167.179.176.9]) by smtp.gmail.com with ESMTPSA id gd12sm3441031pjb.48.2021.04.09.20.23.02 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 09 Apr 2021 20:23:03 -0700 (PDT) To: pve-user@lists.proxmox.com From: Lindsay Mathieson Message-ID: <15e5bfd5-7458-fdbe-5079-ce78a19e0099@gmail.com> Date: Sat, 10 Apr 2021 13:22:57 +1000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.9.0 MIME-Version: 1.0 Content-Language: en-US X-SPAM-LEVEL: Spam detection results: 0 AWL 0.044 Adjusted score from AWL reputation of From: address DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider HTML_MESSAGE 0.001 HTML included in message RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.29 Subject: [PVE-User] Revisited: External disk backup using PBS - Requesting Criticism/Advice? X-BeenThere: pve-user@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE user list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Apr 2021 03:23:13 -0000 TTL;DR - Backup PC is a standalone Proxmox Server, running a PBS lxc container using its host filesystem for the Backup store. The PBS container is backed up using vzdump to an attached external hard drive which is rotated offsite. Source Data * 5 Node Proxmox Cluster * Ceph storage (size = 3) * 30 VM's Backup Destination Standalone Proxmox Server in same server room as main cluster * 16 GM Ram * CPU: Intel i5 * Boot - 2 SSD's in ZFS RAID1 * Data - 2 4TB WD NAS Drives in ZFS RAID1 * Bonded 1G * 3 * PBS Container o Data Store - 4TB, passed through from Host Schedule * Proxmox backups up all VM's to PBS Container Weekly o Will revisit the schedule * Host proxmox server backs up PBS and its data to external hard drive o Approx 2 TB Data (we are just an SMB) o Drive is rotated offsite Recovery * VM's can easily be restored from the PBS server as needed (very rare occurrence - usually a user messed up their VM) Disaster Recovery This is the real concern - Fire, Theft etc. All servers and data including the Standalone Host and PBS server are gone. * Recreate Proxmox Cluster * Recreate Proxmox PBS Host o Restore the PBS Container and data from an offsite backup disk * Restore the VM's to the Cluster from the PBS Container Does all this seem practical and safe? Thanks - Lindsay -- Lindsay