Failed backup

[Davidemvm]

Hi,
Someone can help me, i run in this error on PBS:

2021-07-02T09:49:20+02:00: starting new backup on datastore 'Backup': "vm/158226/2021-07-02T07:49:20Z"
2021-07-02T09:49:20+02:00: GET /previous: 400 Bad Request: no valid previous backup
2021-07-02T09:49:20+02:00: created new fixed index 1 ("vm/158226/2021-07-02T07:49:20Z/drive-scsi0.img.fidx")
2021-07-02T09:49:20+02:00: add blob "/mnt/datastore/total/backup/vm/158226/2021-07-02T07:49:20Z/qemu-server.conf.blob" (367 bytes, comp: 367)
2021-07-02T09:49:22+02:00: backup failed: connection error: error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac:../ssl/record/ssl3_record.c:677:
2021-07-02T09:49:22+02:00: removing failed backup
2021-07-02T09:49:22+02:00: POST /fixed_chunk: 400 Bad Request: error reading a body from connection: broken pipe
2021-07-02T09:49:22+02:00: TASK ERROR: connection error: error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac:../ssl/record/ssl3_record.c:677:

on PVE,
pvesm list pbs

Volid Format  Type      Size VMID

pveversion -v

proxmox-ve: 6.4-1 (running kernel: 5.4.114-1-pve)
pve-manager: 6.4-9 (running version: 6.4-9/5f5c0e3f)
pve-kernel-5.4: 6.4-4
pve-kernel-helper: 6.4-4
pve-kernel-5.4.124-1-pve: 5.4.124-1
pve-kernel-5.4.119-1-pve: 5.4.119-1
pve-kernel-5.4.114-1-pve: 5.4.114-1
pve-kernel-5.4.106-1-pve: 5.4.106-1
pve-kernel-5.4.73-1-pve: 5.4.73-1
ceph: 15.2.13-pve1~bpo10
ceph-fuse: 15.2.13-pve1~bpo10
corosync: 3.1.2-pve1
criu: 3.11-3
glusterfs-client: 5.5-3
ifupdown: residual config
ifupdown2: 3.0.0-1+pve3
ksm-control-daemon: 1.3-1
libjs-extjs: 6.0.1-10
libknet1: 1.20-pve1
libproxmox-acme-perl: 1.1.0
libproxmox-backup-qemu0: 1.1.0-1
libpve-access-control: 6.4-3
libpve-apiclient-perl: 3.1-3
libpve-common-perl: 6.4-3
libpve-guest-common-perl: 3.1-5
libpve-http-server-perl: 3.2-3
libpve-storage-perl: 6.4-1
libqb0: 1.0.5-1
libspice-server1: 0.14.2-4~pve6+1
lvm2: 2.03.02-pve4
lxc-pve: 4.0.6-2
lxcfs: 4.0.6-pve1
novnc-pve: 1.1.0-1
proxmox-backup-client: 1.1.10-1
proxmox-mini-journalreader: 1.1-1
proxmox-widget-toolkit: 2.6-1
pve-cluster: 6.4-1
pve-container: 3.3-5
pve-docs: 6.4-2
pve-edk2-firmware: 2.20200531-1
pve-firewall: 4.1-4
pve-firmware: 3.2-4
pve-ha-manager: 3.1-1
pve-i18n: 2.3-1
pve-qemu-kvm: 5.2.0-6
pve-xtermjs: 4.7.0-3
qemu-server: 6.4-2
smartmontools: 7.2-pve2
spiceterm: 3.1-1
vncterm: 1.6-2
zfsutils-linux: 2.0.4-pve1

Thank you!

 

[oguz]

hi,

do you have a custom certificate on your backup server?

the SSL error seems to indicate an invalid certificate:

backup failed: connection error: error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac:../ssl/record/ssl3_record.c:677:

can you show us the relevant part from your /etc/pve/storage.cfg file?

you should also check if the fingerprint is matching the certificate fingerprint of the PBS

 

[Davidemvm]

hi,

do you have a custom certificate on your backup server?

the SSL error seems to indicate an invalid certificate:

backup failed: connection error: error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac:../ssl/record/ssl3_record.c:677:

i don't have any kind of custom certificate on my sistem.

can you show us the relevant part from your /etc/pve/storage.cfg file?

absolutly yes:

cat /etc/pve/storage.cfg
dir: local
        path /var/lib/vz
        content images,iso,backup,rootdir,vztmpl
        shared 0

lvmthin: local-lvm
        thinpool data
        vgname pve
        content rootdir,images

rbd: Storage_ssd
        content images,rootdir
        krbd 0
        pool ssd_pool

pbs: pbs
        datastore backup
        server *****
        content backup
        fingerprint **********
        prune-backups keep-all=1
        username root@pam

you should also check if the fingerprint is matching the certificate fingerprint of the PBS

how can i check this?

 

[jenssen99]

i don't have any kind of custom certificate on my sistem.

absolutly yes:

cat /etc/pve/storage.cfg
dir: local
        path /var/lib/vz
        content images,iso,backup,rootdir,vztmpl
        shared 0

lvmthin: local-lvm
        thinpool data
        vgname pve
        content rootdir,images

rbd: Storage_ssd
        content images,rootdir
        krbd 0
        pool ssd_pool

pbs: pbs
        datastore backup
        server *****
        content backup
        fingerprint **********
        prune-backups keep-all=1
        username root@pam

how can i check this?

see also https://forum.proxmox.com/threads/pbs-sync-failed-each-time.113921/#post-492989