Revert Pending removal chunks is possible ?

[DC-CA1]

hello im strudling to if in case a customer delete all his backup trough API ( from our customer web interface )

is there a way to retrieve a pending removed backup if they did that by error ?

duplicating our PBS datastore is actually our only safety and we would like to know what other do / suggest

 

[Dunuin]

Pruned backup snapshots are lost even if the GC didn't already delete the chunks. So data is still there as chunks but not the index file that is referencing the chunks in an order that makes sense. Maybe automatic ZFS snapshots (for example one of the many zfs-auto-snapshot scripts) would help? That way you restore the deleted index files and chunks and roll back to a state before the customer deleted them.

 

[DC-CA1]

where is deleted index files resides ?

and proxmox state their PBS is encryption proof. , if its a plain file that retain the index , how can it be encryption proof ?

 

[Dunuin]

where is deleted index files resides ?

and proxmox state their PBS is encryption proof. , if its a plain file that retain the index , how can it be encryption proof ?

Deleting a backup snapshot will delete it's folder containing the catalog, manifest and so on. All thats left then are the chunks in random order which will later be deleted by the GC. But without the index files from the backup snapshot folder its like having a bag full of letters but not knowing anymore how to put them in order to create a book.

Backup Snapshot​

The triplet <type>/<ID>/<time> is called a backup snapshot. It uniquely identifies a specific backup within a namespace.

Backup Snapshot Examples
vm/104/2019-10-09T08:01:06Z
host/elsa/2019-11-08T09:48:14Z

and proxmox state their PBS is encryption proof. , if its a plain file that retain the index , how can it be encryption proof ?

Not sure how this is handled. If the index files are encrypted too or only the chunks. Couldn't find a clear answer in the documentation.

 

[_gabriel]

backup datastore folder except ".chunks" subfolder works for your case. even if they are not human readable, they can be copied back to re-display the backup.
Restore, of course, will works only if GC is not done yet.