Encrypted Backups from PVE -> lokal PBS -> remote PBS

[BastiFantasti]

Hi @all,

by now I backup the VMs and LXC containers to a local NFS Share which I have added as a storage to PVE.

I'm now planning to adjust my backup strategy of my containers and VMs as shown in the Title.

I've set up a local PBS to store my encrypted backups from PVE.
As a Push job I want to sync the backups to a remote PBS.

So far I think this should work and the encryption should be consistent.

But how can I restore in the case when my local hardware crashes and I have to do a disaster recovery from the remote pbs?

I think I'd do that:
- set up a new PVE instance
- mount the remote PBS directly as a storage for the restore using the same Encryption key as previously set for the local PBS?
- restore the containers / VMs directly from remote pbs
- setup a new local PBS and set up Push jobs as before

Would this procedure work?

Best regards
Bastian

 

[Hannes Laimer]

Hey,

both will work, using the remote directly, or first syncing the encrypted data from the remote to a local PBS. Then adding the local PBS as storage to the new PVE(with the encryption key of course).

 

[BastiFantasti]

Hi Hannes,

thanks for your feedback. Then I think I will set it up accordingly and do some restore tests

Best regards
Bastian