Why encrpyted backups sometimes show as "Encrypted" and sometimes as "Mixed"?
The index.json.block is not encrypted but has a grey "Signed" icon, whereas the client.log.blob has nothing.
Is this a bug?
Works fine. Very nice tool. Standard port forwarding with ssh does not work, because it needs a local port different from 8007, which cannot be specificied in PBS. With sshuttle however, it is very eas,y the remote host is specified with its remote internal lan IP, so port 8007 can be used.
The documenation says: "You can also use proxmox-backup-client key to create an RSA public/private key pair, which can be used to store an encrypted version of the symmetric backup encryption key alongside each backup and recover it later."
Without RSA I have to store the backup-key in a safe...
By again checking the data transfer with iftop, it seems to transfer 378MB instead of 2GB so it seems to be differential. Is there any means to see the data transfer by in the job or GUI?
Thanks. Now the error is gone.
It still seems that the the container package (2GB) is transfered in total every time. Is this correct? Should't it be a differential transfer?
This is not possible because the local port 8007 is already taken by the local PBS. Therefore the local port must be different,
ssh -L 8008:localhost:8007 user@pbs-host
But not it is not possible to specficy localhost:8008 in the remote host in PBS, because the port 8007 seems to be fixed. It...
I minimize data transfer over the internet (multi terabytes), I backed up all VMs to a second PBS while this PBS server was on the local intranet.
Then I moved the server to a another location and want to sync the backups from the main site to this remote site. However the sync job gives errors...
Thanks for this interesting software tip, and I will try.
However it would prefer to only open the one neccessary port to the remote PBS not the whole network. For this I need to change the remote port from 8007 to something else. Any suggestion how to do this?
To remote sync I have to open up the port 8007 on the internet which is the management GUI. This shows lot of information what is service running at this port, which is a security risk. Also it possible to restrict users like root@pam to only the local net? For the internal management form LAN...
Man hat die mit PVE die bessere Technologie und will nun auf eine Hardwarekiste mit Single-Point-Of-Failure wechseln? Welche Probleme sollte man damit lösen, die nicht besser mit einer VM besser lösbar wären?
The remote server is behind a firewall but public key SSH access is possible, so I could set up an simple SSH tunnel with
ssh -L 9007:localhost:8007 remoteserver to forward connections to "localhost port 9007" to the "remote host port 8007" and then specificy "localhost:9007" as the remote host...
I just have to decide whether I need the newer snapshots at all. If not, I can do a "revert", if I need then, I have to clone. So everything is possible.
Thanks, this is the part I was missing.
Replication is very nice and I use it. Unfortuntely it currently does not work with encrypted ZFS...
Thanks. Some questions about security (PBS is installed on a proxmox server):
1) The cert fingerprint is used to ensure the remote identity, only correct?
2) Is fingerprint is from the public visible certificate?
3) If port 8007 is open to the public, the password is the only means to protect...
Currently I use znapzend. WIth this I can:
1) Start a VM directory from the backup at any remote location
2) Restore a previous version of the VM by just reverting to the snapshot
3) Clone a snapshot to start a previous version directly from the backup for testing.
4) Clone a snapshot and...
I have a backup server which can reach a remove server via ssh and public key authentifcation when logged in as root (using an alias in .ssh/config).
When I start a sync job however it gives an error, that the server is not reachable. Does it not use ssh to connect? With which user is the sync...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.