]>
Commit | Line | Data |
---|---|---|
80c0adcb | 1 | [[chapter_vzdump]] |
82b4917a | 2 | ifdef::manvolnum[] |
b2f242ab DM |
3 | vzdump(1) |
4 | ========= | |
5f09af76 DM |
5 | :pve-toplevel: |
6 | ||
82b4917a DM |
7 | NAME |
8 | ---- | |
9 | ||
10 | vzdump - Backup Utility for VMs and Containers | |
11 | ||
12 | ||
49a5e11c | 13 | SYNOPSIS |
82b4917a DM |
14 | -------- |
15 | ||
16 | include::vzdump.1-synopsis.adoc[] | |
17 | ||
18 | ||
19 | DESCRIPTION | |
20 | ----------- | |
21 | endif::manvolnum[] | |
82b4917a DM |
22 | ifndef::manvolnum[] |
23 | Backup and Restore | |
24 | ================== | |
5f09af76 | 25 | :pve-toplevel: |
194d2f29 | 26 | endif::manvolnum[] |
5f09af76 | 27 | |
a35aad4a | 28 | Backups are a requirement for any sensible IT deployment, and {pve} |
94e50bf6 DM |
29 | provides a fully integrated solution, using the capabilities of each |
30 | storage and each guest system type. This allows the system | |
31 | administrator to fine tune via the `mode` option between consistency | |
32 | of the backups and downtime of the guest system. | |
33 | ||
34 | {pve} backups are always full backups - containing the VM/CT | |
35 | configuration and all data. Backups can be started via the GUI or via | |
ff4ae052 | 36 | the `vzdump` command-line tool. |
12b04941 | 37 | |
c7678c11 EK |
38 | .Backup Storage |
39 | ||
c8e632b6 FE |
40 | Before a backup can run, a backup storage must be defined. Refer to the |
41 | xref:chapter_storage[storage documentation] on how to add a storage. It can | |
42 | either be a Proxmox Backup Server storage, where backups are stored as | |
43 | de-duplicated chunks and metadata, or a file-level storage, where backups are | |
44 | stored as regular files. Using Proxmox Backup Server on a dedicated host is | |
45 | recommended, because of its advanced features. Using an NFS server is a good | |
46 | alternative. In both cases, you might want to save those backups later to a tape | |
47 | drive, for off-site archiving. | |
12b04941 | 48 | |
c7678c11 EK |
49 | .Scheduled Backup |
50 | ||
7f938fdb FE |
51 | Backup jobs can be scheduled so that they are executed automatically on specific |
52 | days and times, for selectable nodes and guest systems. See the | |
53 | xref:vzdump_jobs[Backup Jobs] section for more. | |
b0bd9011 | 54 | |
764a3285 | 55 | Backup Modes |
c7678c11 | 56 | ------------ |
94e50bf6 | 57 | |
12b04941 EK |
58 | There are several ways to provide consistency (option `mode`), |
59 | depending on the guest type. | |
82b4917a | 60 | |
c7678c11 | 61 | .Backup modes for VMs: |
01d37422 DM |
62 | |
63 | `stop` mode:: | |
94e50bf6 DM |
64 | |
65 | This mode provides the highest consistency of the backup, at the cost | |
d25a50b9 | 66 | of a short downtime in the VM operation. It works by executing an |
c730e973 | 67 | orderly shutdown of the VM, and then runs a background QEMU process to |
d25a50b9 DM |
68 | backup the VM data. After the backup is started, the VM goes to full |
69 | operation mode if it was previously running. Consistency is guaranteed | |
70 | by using the live backup feature. | |
01d37422 DM |
71 | |
72 | `suspend` mode:: | |
73 | ||
94e50bf6 DM |
74 | This mode is provided for compatibility reason, and suspends the VM |
75 | before calling the `snapshot` mode. Since suspending the VM results in | |
76 | a longer downtime and does not necessarily improve the data | |
77 | consistency, the use of the `snapshot` mode is recommended instead. | |
01d37422 DM |
78 | |
79 | `snapshot` mode:: | |
80 | ||
94e50bf6 | 81 | This mode provides the lowest operation downtime, at the cost of a |
64caa401 | 82 | small inconsistency risk. It works by performing a {pve} live |
94e50bf6 DM |
83 | backup, in which data blocks are copied while the VM is running. If the |
84 | guest agent is enabled (`agent: 1`) and running, it calls | |
8c1189b6 | 85 | `guest-fsfreeze-freeze` and `guest-fsfreeze-thaw` to improve |
c7678c11 | 86 | consistency. |
01d37422 | 87 | |
64caa401 | 88 | A technical overview of the {pve} live backup for QemuServer can |
01d37422 | 89 | be found online |
d929c5a6 | 90 | https://git.proxmox.com/?p=pve-qemu.git;a=blob_plain;f=backup.txt[here]. |
01d37422 | 91 | |
64caa401 | 92 | NOTE: {pve} live backup provides snapshot-like semantics on any |
94e50bf6 | 93 | storage type. It does not require that the underlying storage supports |
7d9754a6 | 94 | snapshots. Also please note that since the backups are done via |
c730e973 FE |
95 | a background QEMU process, a stopped VM will appear as running for a |
96 | short amount of time while the VM disks are being read by QEMU. | |
7d9754a6 | 97 | However the VM itself is not booted, only its disk(s) are read. |
01d37422 | 98 | |
c7678c11 | 99 | .Backup modes for Containers: |
82b4917a DM |
100 | |
101 | `stop` mode:: | |
102 | ||
94e50bf6 DM |
103 | Stop the container for the duration of the backup. This potentially |
104 | results in a very long downtime. | |
82b4917a DM |
105 | |
106 | `suspend` mode:: | |
107 | ||
01d37422 | 108 | This mode uses rsync to copy the container data to a temporary |
94e50bf6 DM |
109 | location (see option `--tmpdir`). Then the container is suspended and |
110 | a second rsync copies changed files. After that, the container is | |
111 | started (resumed) again. This results in minimal downtime, but needs | |
112 | additional space to hold the container copy. | |
0006064d | 113 | + |
5eba0743 | 114 | When the container is on a local file system and the target storage of |
de14ebff | 115 | the backup is an NFS/CIFS server, you should set `--tmpdir` to reside on a |
5eba0743 | 116 | local file system too, as this will result in a many fold performance |
94e50bf6 DM |
117 | improvement. Use of a local `tmpdir` is also required if you want to |
118 | backup a local container using ACLs in suspend mode if the backup | |
119 | storage is an NFS server. | |
82b4917a DM |
120 | |
121 | `snapshot` mode:: | |
122 | ||
01d37422 | 123 | This mode uses the snapshotting facilities of the underlying |
b74af7b6 FG |
124 | storage. First, the container will be suspended to ensure data consistency. |
125 | A temporary snapshot of the container's volumes will be made and the | |
126 | snapshot content will be archived in a tar file. Finally, the temporary | |
127 | snapshot is deleted again. | |
128 | ||
129 | NOTE: `snapshot` mode requires that all backed up volumes are on a storage that | |
8c1189b6 | 130 | supports snapshots. Using the `backup=no` mount point option individual volumes |
b74af7b6 | 131 | can be excluded from the backup (and thus this requirement). |
82b4917a | 132 | |
1eeff3be | 133 | // see PVE::VZDump::LXC::prepare() |
470d4313 | 134 | NOTE: By default additional mount points besides the Root Disk mount point are |
1eeff3be EK |
135 | not included in backups. For volume mount points you can set the *Backup* option |
136 | to include the mount point in the backup. Device and bind mounts are never | |
137 | backed up as their content is managed outside the {pve} storage library. | |
82b4917a | 138 | |
1ca0f96a FE |
139 | VM Backup Fleecing |
140 | ~~~~~~~~~~~~~~~~~~ | |
141 | ||
142 | WARNING: Backup fleecing is still being worked on (also in upstream QEMU) and is | |
143 | currently only a technology preview. | |
144 | ||
145 | When a backup for a VM is started, QEMU will install a "copy-before-write" | |
146 | filter in its block layer. This filter ensures that upon new guest writes, old | |
147 | data still needed for the backup is sent to the backup target first. The guest | |
148 | write blocks until this operation is finished so guest IO to not-yet-backed-up | |
149 | sectors will be limited by the speed of the backup target. | |
150 | ||
151 | With backup fleecing, such old data is cached in a fleecing image rather than | |
152 | sent directly to the backup target. This can help guest IO performance and even | |
153 | prevent hangs in certain scenarios, at the cost of requiring more storage space. | |
154 | Use e.g. `vzdump 123 --fleecing enabled=1,storage=local-lvm` to enable backup | |
155 | fleecing, with fleecing images created on the storage `local-lvm`. | |
156 | ||
157 | The fleecing storage should be a fast local storage, with thin provisioning and | |
158 | discard support. Examples are LVM-thin, RBD, ZFS with `sparse 1` in the storage | |
159 | configuration, many file-based storages. Ideally, the fleecing storage is a | |
160 | dedicated storage, so it running full will not affect other guests and just fail | |
161 | the backup. Parts of the fleecing image that have been backed up will be | |
162 | discarded to try and keep the space usage low. | |
163 | ||
164 | For file-based storages that do not support discard (e.g. NFS before version | |
165 | 4.2), you should set `preallocation off` in the storage configuration. In | |
166 | combination with `qcow2` (used automatically as the format for the fleecing | |
167 | image when the storage supports it), this has the advantage that already | |
168 | allocated parts of the image can be re-used later, which can still help save | |
169 | quite a bit of space. | |
170 | ||
171 | WARNING: On a storage that's not thinly provisioned, e.g. LVM or ZFS without the | |
172 | `sparse` option, the full size of the original disk needs to be reserved for the | |
173 | fleecing image up-front. On a thinly provisioned storage, the fleecing image can | |
174 | grow to the same size as the original image only if the guest re-writes a whole | |
175 | disk while the backup is busy with another disk. | |
176 | ||
82b4917a DM |
177 | Backup File Names |
178 | ----------------- | |
179 | ||
8e4bb261 | 180 | Newer versions of vzdump encode the guest type and the |
82b4917a DM |
181 | backup time into the filename, for example |
182 | ||
183 | vzdump-lxc-105-2009_10_09-11_04_43.tar | |
184 | ||
3a976366 FE |
185 | That way it is possible to store several backup in the same directory. You can |
186 | limit the number of backups that are kept with various retention options, see | |
187 | the xref:vzdump_retention[Backup Retention] section below. | |
82b4917a | 188 | |
4edb84ec AA |
189 | Backup File Compression |
190 | ----------------------- | |
191 | ||
192 | The backup file can be compressed with one of the following algorithms: `lzo` | |
193 | footnote:[Lempel–Ziv–Oberhumer a lossless data compression algorithm | |
194 | https://en.wikipedia.org/wiki/Lempel-Ziv-Oberhumer], `gzip` footnote:[gzip - | |
195 | based on the DEFLATE algorithm https://en.wikipedia.org/wiki/Gzip] or `zstd` | |
196 | footnote:[Zstandard a lossless data compression algorithm | |
197 | https://en.wikipedia.org/wiki/Zstandard]. | |
198 | ||
199 | Currently, Zstandard (zstd) is the fastest of these three algorithms. | |
200 | Multi-threading is another advantage of zstd over lzo and gzip. Lzo and gzip | |
201 | are more widely used and often installed by default. | |
202 | ||
203 | You can install pigz footnote:[pigz - parallel implementation of gzip | |
204 | https://zlib.net/pigz/] as a drop-in replacement for gzip to provide better | |
205 | performance due to multi-threading. For pigz & zstd, the amount of | |
206 | threads/cores can be adjusted. See the | |
207 | xref:vzdump_configuration[configuration options] below. | |
208 | ||
209 | The extension of the backup file name can usually be used to determine which | |
210 | compression algorithm has been used to create the backup. | |
211 | ||
212 | |=== | |
213 | |.zst | Zstandard (zstd) compression | |
214 | |.gz or .tgz | gzip compression | |
215 | |.lzo | lzo compression | |
216 | |=== | |
217 | ||
218 | If the backup file name doesn't end with one of the above file extensions, then | |
219 | it was not compressed by vzdump. | |
220 | ||
1658c673 FE |
221 | Backup Encryption |
222 | ----------------- | |
223 | ||
224 | For Proxmox Backup Server storages, you can optionally set up client-side | |
225 | encryption of backups, see xref:storage_pbs_encryption[the corresponding section.] | |
4edb84ec | 226 | |
7f938fdb | 227 | [[vzdump_jobs]] |
764a3285 TL |
228 | Backup Jobs |
229 | ----------- | |
230 | ||
231 | Besides triggering a backup manually, you can also setup periodic jobs that | |
17125f65 FE |
232 | backup all, or a selection of virtual guest to a storage. You can manage the |
233 | jobs in the UI under 'Datacenter' -> 'Backup' or via the `/cluster/backup` API | |
7f938fdb FE |
234 | endpoint. Both will generate job entries in `/etc/pve/jobs.cfg`, which are |
235 | parsed and executed by the `pvescheduler` daemon. | |
17125f65 FE |
236 | |
237 | A job is either configured for all cluster nodes or a specific node, and is | |
238 | executed according to a given schedule. The format for the schedule is very | |
239 | similar to `systemd` calendar events, see the | |
240 | xref:chapter_calendar_events[calendar events] section for details. The | |
241 | 'Schedule' field in the UI can be freely edited, and it contains several | |
242 | examples that can be used as a starting point in its drop-down list. | |
243 | ||
244 | You can configure job-specific xref:vzdump_retention[retention options] | |
245 | overriding those from the storage or node configuration, as well as a | |
246 | xref:vzdump_notes[template for notes] for additional information to be saved | |
247 | together with the backup. | |
248 | ||
7f938fdb FE |
249 | Since scheduled backups miss their execution when the host was offline or the |
250 | pvescheduler was disabled during the scheduled time, it is possible to configure | |
cb3fe201 FE |
251 | the behaviour for catching up. By enabling the `Repeat missed` option (in the |
252 | 'Advanced' tab in the UI, `repeat-missed` in the config), you can tell the | |
253 | scheduler that it should run missed jobs as soon as possible. | |
7f938fdb | 254 | |
848c7b1b FE |
255 | There are a few settings for tuning backup performance (some of which are |
256 | exposed in the 'Advanced' tab in the UI). The most notable is `bwlimit` for | |
257 | limiting IO bandwidth. The amount of threads used for the compressor can be | |
258 | controlled with the `pigz` (replacing `gzip`), respectively, `zstd` setting. | |
259 | Furthermore, there are `ionice` (when the BFQ scheduler is used) and, as part of | |
501744f7 AZ |
260 | the `performance` setting, `max-workers` (affects VM backups only) and |
261 | `pbs-entries-max` (affects container backups only). See the | |
17125f65 | 262 | xref:vzdump_configuration[configuration options] for details. |
764a3285 | 263 | |
3a976366 FE |
264 | [[vzdump_retention]] |
265 | Backup Retention | |
266 | ---------------- | |
267 | ||
268 | With the `prune-backups` option you can specify which backups you want to keep | |
269 | in a flexible manner. The following retention options are available: | |
270 | ||
271 | `keep-all <boolean>` :: | |
272 | Keep all backups. If this is `true`, no other options can be set. | |
273 | ||
274 | `keep-last <N>` :: | |
275 | Keep the last `<N>` backups. | |
276 | ||
277 | `keep-hourly <N>` :: | |
278 | Keep backups for the last `<N>` hours. If there is more than one | |
279 | backup for a single hour, only the latest is kept. | |
280 | ||
281 | `keep-daily <N>` :: | |
282 | Keep backups for the last `<N>` days. If there is more than one | |
283 | backup for a single day, only the latest is kept. | |
284 | ||
285 | `keep-weekly <N>` :: | |
286 | Keep backups for the last `<N>` weeks. If there is more than one | |
287 | backup for a single week, only the latest is kept. | |
288 | ||
289 | NOTE: Weeks start on Monday and end on Sunday. The software uses the | |
290 | `ISO week date`-system and handles weeks at the end of the year correctly. | |
291 | ||
292 | `keep-monthly <N>` :: | |
293 | Keep backups for the last `<N>` months. If there is more than one | |
294 | backup for a single month, only the latest is kept. | |
295 | ||
296 | `keep-yearly <N>` :: | |
297 | Keep backups for the last `<N>` years. If there is more than one | |
298 | backup for a single year, only the latest is kept. | |
299 | ||
300 | The retention options are processed in the order given above. Each option | |
301 | only covers backups within its time period. The next option does not take care | |
302 | of already covered backups. It will only consider older backups. | |
303 | ||
304 | Specify the retention options you want to use as a | |
305 | comma-separated list, for example: | |
306 | ||
307 | # vzdump 777 --prune-backups keep-last=3,keep-daily=13,keep-yearly=9 | |
308 | ||
309 | While you can pass `prune-backups` directly to `vzdump`, it is often more | |
310 | sensible to configure the setting on the storage level, which can be done via | |
311 | the web interface. | |
312 | ||
313 | NOTE: The old `maxfiles` option is deprecated and should be replaced either by | |
314 | `keep-last` or, in case `maxfiles` was `0` for unlimited retention, by | |
315 | `keep-all`. | |
316 | ||
57c4d6b8 TL |
317 | |
318 | Prune Simulator | |
319 | ~~~~~~~~~~~~~~~ | |
320 | ||
321 | You can use the https://pbs.proxmox.com/docs/prune-simulator[prune simulator | |
322 | of the Proxmox Backup Server documentation] to explore the effect of different | |
323 | retention options with various backup schedules. | |
324 | ||
3a976366 FE |
325 | Retention Settings Example |
326 | ~~~~~~~~~~~~~~~~~~~~~~~~~~ | |
327 | ||
328 | The backup frequency and retention of old backups may depend on how often data | |
329 | changes, and how important an older state may be, in a specific work load. | |
330 | When backups act as a company's document archive, there may also be legal | |
331 | requirements for how long backups must be kept. | |
332 | ||
333 | For this example, we assume that you are doing daily backups, have a retention | |
334 | period of 10 years, and the period between backups stored gradually grows. | |
335 | ||
336 | `keep-last=3` - even if only daily backups are taken, an admin may want to | |
337 | create an extra one just before or after a big upgrade. Setting keep-last | |
338 | ensures this. | |
339 | ||
340 | `keep-hourly` is not set - for daily backups this is not relevant. You cover | |
341 | extra manual backups already, with keep-last. | |
342 | ||
343 | `keep-daily=13` - together with keep-last, which covers at least one | |
344 | day, this ensures that you have at least two weeks of backups. | |
345 | ||
346 | `keep-weekly=8` - ensures that you have at least two full months of | |
347 | weekly backups. | |
348 | ||
349 | `keep-monthly=11` - together with the previous keep settings, this | |
350 | ensures that you have at least a year of monthly backups. | |
351 | ||
352 | `keep-yearly=9` - this is for the long term archive. As you covered the | |
353 | current year with the previous options, you would set this to nine for the | |
354 | remaining ones, giving you a total of at least 10 years of coverage. | |
355 | ||
356 | We recommend that you use a higher retention period than is minimally required | |
357 | by your environment; you can always reduce it if you find it is unnecessarily | |
358 | high, but you cannot recreate backups once they have been removed. | |
359 | ||
65c21123 FE |
360 | [[vzdump_protection]] |
361 | Backup Protection | |
362 | ----------------- | |
363 | ||
364 | You can mark a backup as `protected` to prevent its removal. Attempting to | |
6bc5d54d TL |
365 | remove a protected backup via {pve}'s UI, CLI or API will fail. However, this |
366 | is enforced by {pve} and not the file-system, that means that a manual removal | |
367 | of a backup file itself is still possible for anyone with write access to the | |
368 | underlying backup storage. | |
369 | ||
370 | NOTE: Protected backups are ignored by pruning and do not count towards the | |
371 | retention settings. | |
65c21123 FE |
372 | |
373 | For filesystem-based storages, the protection is implemented via a sentinel file | |
374 | `<backup-name>.protected`. For Proxmox Backup Server, it is handled on the | |
6bc5d54d | 375 | server side (available since Proxmox Backup Server version 2.1). |
65c21123 | 376 | |
2db55d5d FE |
377 | Use the storage option `max-protected-backups` to control how many protected |
378 | backups per guest are allowed on the storage. Use `-1` for unlimited. The | |
379 | default is unlimited for users with `Datastore.Allocate` privilege and `5` for | |
380 | other users. | |
381 | ||
3cb107b7 FE |
382 | [[vzdump_notes]] |
383 | Backup Notes | |
384 | ------------ | |
385 | ||
386 | You can add notes to backups using the 'Edit Notes' button in the UI or via the | |
3b5307ff TL |
387 | storage content API. |
388 | ||
389 | It is also possible to specify a template for generating notes dynamically for | |
390 | a backup job and for manual backup. The template string can contain variables, | |
391 | surrounded by two curly braces, which will be replaced by the corresponding | |
392 | value when the backup is executed. | |
393 | ||
394 | Currently supported are: | |
395 | ||
396 | * `{{cluster}}` the cluster name, if any | |
397 | * `{{guestname}}` the virtual guest's assigned name | |
398 | * `{{node}}` the host name of the node the backup is being created | |
399 | * `{{vmid}}` the numerical VMID of the guest | |
400 | ||
401 | When specified via API or CLI, it needs to be a single line, where newline and | |
402 | backslash need to be escaped as literal `\n` and `\\` respectively. | |
3cb107b7 | 403 | |
922569a5 | 404 | [[vzdump_restore]] |
82b4917a DM |
405 | Restore |
406 | ------- | |
407 | ||
922569a5 TL |
408 | A backup archive can be restored through the {pve} web GUI or through the |
409 | following CLI tools: | |
82b4917a DM |
410 | |
411 | ||
871e1fd6 | 412 | `pct restore`:: Container restore utility |
82b4917a | 413 | |
922569a5 | 414 | `qmrestore`:: Virtual Machine restore utility |
82b4917a DM |
415 | |
416 | For details see the corresponding manual pages. | |
417 | ||
922569a5 TL |
418 | Bandwidth Limit |
419 | ~~~~~~~~~~~~~~~ | |
420 | ||
421 | Restoring one or more big backups may need a lot of resources, especially | |
422 | storage bandwidth for both reading from the backup storage and writing to | |
b26b1d12 | 423 | the target storage. This can negatively affect other virtual guests as access |
922569a5 TL |
424 | to storage can get congested. |
425 | ||
426 | To avoid this you can set bandwidth limits for a backup job. {pve} | |
3802f512 | 427 | implements two kinds of limits for restoring and archive: |
922569a5 TL |
428 | |
429 | * per-restore limit: denotes the maximal amount of bandwidth for | |
430 | reading from a backup archive | |
431 | ||
432 | * per-storage write limit: denotes the maximal amount of bandwidth used for | |
433 | writing to a specific storage | |
434 | ||
435 | The read limit indirectly affects the write limit, as we cannot write more | |
436 | than we read. A smaller per-job limit will overwrite a bigger per-storage | |
437 | limit. A bigger per-job limit will only overwrite the per-storage limit if | |
438 | you have `Data.Allocate' permissions on the affected storage. | |
439 | ||
440 | You can use the `--bwlimit <integer>` option from the restore CLI commands | |
e8889c3f | 441 | to set up a restore job specific bandwidth limit. KiB/s is used as unit |
3802f512 | 442 | for the limit, this means passing `10240' will limit the read speed of the |
922569a5 | 443 | backup to 10 MiB/s, ensuring that the rest of the possible storage bandwidth |
3802f512 TL |
444 | is available for the already running virtual guests, and thus the backup |
445 | does not impact their operations. | |
922569a5 TL |
446 | |
447 | NOTE: You can use `0` for the `bwlimit` parameter to disable all limits for | |
448 | a specific restore job. This can be helpful if you need to restore a very | |
3802f512 | 449 | important virtual guest as fast as possible. (Needs `Data.Allocate' |
922569a5 TL |
450 | permissions on storage) |
451 | ||
452 | Most times your storage's generally available bandwidth stays the same over | |
453 | time, thus we implemented the possibility to set a default bandwidth limit | |
454 | per configured storage, this can be done with: | |
455 | ||
456 | ---- | |
b03b8bb6 | 457 | # pvesm set STORAGEID --bwlimit restore=KIBs |
922569a5 TL |
458 | ---- |
459 | ||
4b94ddd7 SR |
460 | Live-Restore |
461 | ~~~~~~~~~~~~ | |
462 | ||
463 | Restoring a large backup can take a long time, in which a guest is still | |
464 | unavailable. For VM backups stored on a Proxmox Backup Server, this wait | |
465 | time can be mitigated using the live-restore option. | |
466 | ||
467 | Enabling live-restore via either the checkbox in the GUI or the `--live-restore` | |
468 | argument of `qmrestore` causes the VM to start as soon as the restore | |
469 | begins. Data is copied in the background, prioritizing chunks that the VM is | |
470 | actively accessing. | |
471 | ||
472 | Note that this comes with two caveats: | |
473 | ||
474 | * During live-restore, the VM will operate with limited disk read speeds, as | |
475 | data has to be loaded from the backup server (once loaded, it is immediately | |
476 | available on the destination storage however, so accessing data twice only | |
477 | incurs the penalty the first time). Write speeds are largely unaffected. | |
478 | * If the live-restore fails for any reason, the VM will be left in an | |
479 | undefined state - that is, not all data might have been copied from the | |
480 | backup, and it is _most likely_ not possible to keep any data that was written | |
481 | during the failed restore operation. | |
482 | ||
483 | This mode of operation is especially useful for large VMs, where only a small | |
484 | amount of data is required for initial operation, e.g. web servers - once the OS | |
485 | and necessary services have been started, the VM is operational, while the | |
c7941ea5 | 486 | background task continues copying seldom used data. |
4b94ddd7 | 487 | |
1e03e70f SR |
488 | Single File Restore |
489 | ~~~~~~~~~~~~~~~~~~~ | |
490 | ||
491 | The 'File Restore' button in the 'Backups' tab of the storage GUI can be used to | |
492 | open a file browser directly on the data contained in a backup. This feature | |
493 | is only available for backups on a Proxmox Backup Server. | |
494 | ||
495 | For containers, the first layer of the file tree shows all included 'pxar' | |
496 | archives, which can be opened and browsed freely. For VMs, the first layer shows | |
497 | contained drive images, which can be opened to reveal a list of supported | |
498 | storage technologies found on the drive. In the most basic case, this will be an | |
499 | entry called 'part', representing a partition table, which contains entries for | |
500 | each partition found on the drive. Note that for VMs, not all data might be | |
501 | accessible (unsupported guest file systems, storage technologies, etc...). | |
502 | ||
503 | Files and directories can be downloaded using the 'Download' button, the latter | |
504 | being compressed into a zip archive on the fly. | |
505 | ||
506 | To enable secure access to VM images, which might contain untrusted data, a | |
507 | temporary VM (not visible as a guest) is started. This does not mean that data | |
508 | downloaded from such an archive is inherently safe, but it avoids exposing the | |
509 | hypervisor system to danger. The VM will stop itself after a timeout. This | |
510 | entire process happens transparently from a user's point of view. | |
511 | ||
613b6eff FG |
512 | NOTE: For troubleshooting purposes, each temporary VM instance generates a log |
513 | file in `/var/log/proxmox-backup/file-restore/`. The log file might contain | |
514 | additional information in case an attempt to restore individual files or | |
515 | accessing file systems contained in a backup archive fails. | |
516 | ||
4edb84ec | 517 | [[vzdump_configuration]] |
82b4917a DM |
518 | Configuration |
519 | ------------- | |
520 | ||
8c1189b6 | 521 | Global configuration is stored in `/etc/vzdump.conf`. The file uses a |
d083d3d3 DM |
522 | simple colon separated key/value format. Each line has the following |
523 | format: | |
524 | ||
525 | OPTION: value | |
526 | ||
8c1189b6 | 527 | Blank lines in the file are ignored, and lines starting with a `#` |
956afd0a DM |
528 | character are treated as comments and are also ignored. Values from |
529 | this file are used as default, and can be overwritten on the command | |
530 | line. | |
d083d3d3 DM |
531 | |
532 | We currently support the following options: | |
533 | ||
534 | include::vzdump.conf.5-opts.adoc[] | |
535 | ||
536 | ||
8c1189b6 | 537 | .Example `vzdump.conf` Configuration |
d083d3d3 DM |
538 | ---- |
539 | tmpdir: /mnt/fast_local_disk | |
540 | storage: my_backup_storage | |
541 | mode: snapshot | |
542 | bwlimit: 10000 | |
543 | ---- | |
82b4917a DM |
544 | |
545 | Hook Scripts | |
546 | ------------ | |
547 | ||
548 | You can specify a hook script with option `--script`. This script is | |
549 | called at various phases of the backup process, with parameters | |
550 | accordingly set. You can find an example in the documentation | |
8c1189b6 | 551 | directory (`vzdump-hook-script.pl`). |
82b4917a DM |
552 | |
553 | File Exclusions | |
554 | --------------- | |
555 | ||
8e4bb261 FG |
556 | NOTE: this option is only available for container backups. |
557 | ||
8c1189b6 | 558 | `vzdump` skips the following files by default (disable with the option |
8e4bb261 | 559 | `--stdexcludes 0`) |
82b4917a | 560 | |
bf01f882 WB |
561 | /tmp/?* |
562 | /var/tmp/?* | |
563 | /var/run/?*pid | |
82b4917a | 564 | |
8e4bb261 | 565 | You can also manually specify (additional) exclude paths, for example: |
82b4917a | 566 | |
bf01f882 | 567 | # vzdump 777 --exclude-path /tmp/ --exclude-path '/var/foo*' |
82b4917a | 568 | |
98e5a1a4 FE |
569 | excludes the directory `/tmp/` and any file or directory named `/var/foo`, |
570 | `/var/foobar`, and so on. | |
571 | ||
572 | Paths that do not start with a `/` are not anchored to the container's root, | |
573 | but will match relative to any subdirectory. For example: | |
574 | ||
575 | # vzdump 777 --exclude-path bar | |
576 | ||
3a433e9b | 577 | excludes any file or directory named `/bar`, `/var/bar`, `/var/foo/bar`, and |
98e5a1a4 | 578 | so on, but not `/bar2`. |
82b4917a DM |
579 | |
580 | Configuration files are also stored inside the backup archive | |
65647b07 | 581 | (in `./etc/vzdump/`) and will be correctly restored. |
82b4917a DM |
582 | |
583 | Examples | |
584 | -------- | |
585 | ||
c31f32a9 | 586 | Simply dump guest 777 - no snapshot, just archive the guest private area and |
82b4917a | 587 | configuration files to the default dump directory (usually |
8c1189b6 | 588 | `/var/lib/vz/dump/`). |
82b4917a DM |
589 | |
590 | # vzdump 777 | |
591 | ||
871e1fd6 | 592 | Use rsync and suspend/resume to create a snapshot (minimal downtime). |
82b4917a DM |
593 | |
594 | # vzdump 777 --mode suspend | |
595 | ||
c31f32a9 | 596 | Backup all guest systems and send notification mails to root and admin. |
dd5a4927 LW |
597 | Due to `mailto` being set and `notification-mode` being set to `auto` by |
598 | default, the notification mails are sent via the system's `sendmail` | |
599 | command instead of the notification system. | |
82b4917a DM |
600 | |
601 | # vzdump --all --mode suspend --mailto root --mailto admin | |
602 | ||
b74af7b6 | 603 | Use snapshot mode (no downtime) and non-default dump directory. |
82b4917a DM |
604 | |
605 | # vzdump 777 --dumpdir /mnt/backup --mode snapshot | |
606 | ||
c31f32a9 | 607 | Backup more than one guest (selectively) |
82b4917a DM |
608 | |
609 | # vzdump 101 102 103 --mailto root | |
610 | ||
c31f32a9 | 611 | Backup all guests excluding 101 and 102 |
82b4917a DM |
612 | |
613 | # vzdump --mode suspend --exclude 101,102 | |
614 | ||
c31f32a9 | 615 | Restore a container to a new CT 600 |
82b4917a DM |
616 | |
617 | # pct restore 600 /mnt/backup/vzdump-lxc-777.tar | |
618 | ||
c31f32a9 | 619 | Restore a QemuServer VM to VM 601 |
82b4917a DM |
620 | |
621 | # qmrestore /mnt/backup/vzdump-qemu-888.vma 601 | |
622 | ||
623 | Clone an existing container 101 to a new container 300 with a 4GB root | |
624 | file system, using pipes | |
625 | ||
626 | # vzdump 101 --stdout | pct restore --rootfs 4 300 - | |
627 | ||
628 | ||
629 | ifdef::manvolnum[] | |
630 | include::pve-copyright.adoc[] | |
631 | endif::manvolnum[] |