共计 11188 个字符,预计需要花费 28 分钟才能阅读完成。
简介
restic 是一个疾速、高效和平安的备份程序。它反对三大操作系统(Linux、macOS、Windows)和一些较小的操作系统(FreeBSD、OpenBSD)。它应用 go 编程语言编写,应用 AES-256 对数据进行加密,并应用 Poly1305-AES 对数据进行身份验证。
github 地址:https://github.com/restic/restic
设计准则
Restic 是一个能够正确进行备份的程序,其设计遵循以下准则:
- 简略 :备份应该是一个顺畅的过程,否则您可能会想跳过它。Restic 应该易于配置和应用,以便在数据失落的状况下,您能够间接复原它。同样,复原数据不应该很简单。
- 疾速 :应用 restic 备份数据应仅受网络或硬盘带宽的限度,以便您能够每天备份文件。如果须要太多工夫,没有人会进行备份。复原备份应该只传输要复原的文件所需的数据,这样这个过程也很快。
- 可验证 :比备份更重要的是复原,所以 restic 使您能够轻松验证所有数据是否能够复原。
- 平安 :Restic 应用加密技术来保障您数据的机密性和完整性。假如备份数据的存储地位不是受信赖的环境(例如,系统管理员等其他人能够拜访您的备份的共享空间)。Restic 旨在爱护您的数据免受此类攻击者的侵害。
- 高效 :随着数据的增长,额定的快照应该只占用理论增量的存储。更重要的是,在将反复数据理论写入存储后端之前,应该对其进行去重,以节俭贵重的备份空间。
装置
CentOS
[root@centos7 ~]# yum install yum-plugin-copr -y
[root@centos7 ~]# yum copr enable copart/restic -y
Loaded plugins: copr, fastestmirror
copr done
[root@centos7 ~]# yum install restic -y
如果下面的装置呈现谬误,请执行上面的命令解决源的问题
[root@centos7 ~]# yum-config-manager --add-repo https://copr.fedorainfracloud.org/coprs/copart/restic/repo/epel-7/copart-restic-epel-7.repo
Loaded plugins: fastestmirror
adding repo from: https://copr.fedorainfracloud.org/coprs/copart/restic/repo/epel-7/copart-restic-epel-7.repo
grabbing file https://copr.fedorainfracloud.org/coprs/copart/restic/repo/epel-7/copart-restic-epel-7.repo to /etc/yum.repos.d/copart-restic-epel-7.repo
repo saved to /etc/yum.repos.d/copart-restic-epel-7.repo
macOS
# brew
$ brew install restic
# macprots
$ sudo port install restic
更多装置形式请参考:https://restic.readthedocs.io…
配置备份存储库
保留备份的地位称为“存储库”。存储库能够存储在本地,也能够存储在某个近程服务器或服务上。反对以下几种存储形式:
对于主动备份,restic 承受环境变量中的存储库地位 RESTIC_REPOSITORY。Restic 还能够从通过 –repository-file 选项或环境变量指定的文件中读取存储库地位 RESTIC_REPOSITORY_FILE。
对于明码,有几个选项:
- 设置环境变量 RESTIC_PASSWORD
- 通过选项 –password-file 或环境变量指定带有明码的文件门路 RESTIC_PASSWORD_FILE
- 通过选项 –password-command 或环境变量 配置须要明码时调用的程序 RESTIC_PASSWORD_COMMAND
创立本地存储库
以创立本地存储库为例
[root@centos7 ~]# restic init --repo /restic/backup_dir
enter password for new repository:
enter password again:
created restic repository dff64d39c6 at /restic/backup_dir
Please note that knowledge of your password is required to access
the repository. Losing your password means that your data is
irrecoverably lost.
#提醒很明确,让你记住在此处输出的明码,丢掉明码就是丢掉了数据
其它存储库创立形式请参考官网文档:
https://restic.readthedocs.io…
备份实操
备份目录 data 下的内容到存储库
[root@centos7 ~]# restic -r /restic/backup_dir --verbose backup ./data
open repository
enter password for repository:
repository dff64d39 opened successfully, password is correct
created new cache in /root/.cache/restic
lock repository
load index files
no parent snapshot found, will read all files
start scan on [./data]
start backup on [./data]
scan finished in 1.455s: 2922 files, 71.126 MiB
Files: 2922 new, 0 changed, 0 unmodified
Dirs: 99 new, 0 changed, 0 unmodified
Data Blobs: 2889 new
Tree Blobs: 99 new
Added to the repo: 72.083 MiB
processed 2922 files, 71.126 MiB in 0:05 #备份的文件数及大小
snapshot 4d20711e saved #创立了文件快照
--verbose #输入过程信息
也能够备份单个文件
[root@centos7 ~]# ls ./data
goInception-linux-amd64-v1.2.3.tar.gz httpd-2.4.6-95.el7.centos.x86_64.rpm mingongge.z02
httpd-2.4.46 mingongge.file mingongge.zip
httpd-2.4.46.tar.gz mingongge.z01
[root@centos7 ~]# restic -r /restic/backup_dir --verbose backup ./data/mingongge.zip
open repository
enter password for repository:
repository dff64d39 opened successfully, password is correct
lock repository
load index files
no parent snapshot found, will read all files
start scan on [./data/mingongge.zip]
start backup on [./data/mingongge.zip]
scan finished in 0.249s: 1 files, 942.793 KiB
Files: 1 new, 0 changed, 0 unmodified
Dirs: 1 new, 0 changed, 0 unmodified
Data Blobs: 0 new
Tree Blobs: 2 new
Added to the repo: 750 B
processed 1 files, 942.793 KiB in 0:00
snapshot 3e5b7dea saved
如果你再次执行第一步的备份命令,会发现它不再减少内容,只是为以后的数据再减少一个快照。其实,restic 它具备扫描文件的性能(一一文件扫描比对),所以也只会备份存储一次雷同的数据。
文件检测性能
扫描每个文件的全部内容,十分浪费资源,所以 restic 还应用基于文件元数据的更改检测规定来确定文件自上次备份以来是否可能未更改,如果是,则不会再次扫描文件。
在 Unix(包含 Linux 和 Mac)上,鉴于文件与先前备份中的文件位于同一地位,以下文件元数据属性必须匹配能力假设其内容未更改:
- 批改工夫戳(mtime)
- 元数据更改工夫戳 (ctime)
- 文件大小
- inode 编号(用于援用文件系统中的文件的外部编号)
所以,基于上述的起因,引入一些参数,如下:
--force #敞开更改检测,从新扫描全副文件
--ignore-ctime #要求 mtime 匹配,但容许 ctime 不同
--ignore-inode #要求 mtime 匹配,但容许 inode number 和 ctime 不同
排除文件参数
--exclude #指定一次或屡次排除一个或多个项
--iexclude #与 exclude 雷同,但疏忽门路的状况
--exclude-caches #指定一次排除蕴含非凡文件的文件夹
--exclude-file #指定一次排除蕴含非凡文件的文件夹
--iexclude-file #与 exclude-file 雷同,但疏忽门路的状况
--exclude-if-present foo #排除文件夹蕴含名为 foo 的文件
--exclude-larger-than size #指定一次以排除大于给定大小的文件
更多相干的性能请参考:https://restic.readthedocs.io…
存储库应用
既然数据备份到了存储库,所以,咱们也须要去应用存储库,上面来介绍相干的操作。
列出存储库的所有快照
这个性能和平时在零碎上应用 ls 命令雷同,查看显示的性能
[root@centos7 ~]# restic -r /restic/backup_dir/ snapshots
enter password for repository:
repository dff64d39 opened successfully, password is correct
ID Time Host Tags Paths
-------------------------------------------------------------------------------
4d20711e 2021-06-04 03:40:47 centos7 /root/data
3e5b7dea 2021-06-04 03:46:34 centos7 /root/data/mingongge.zip
94c62288 2021-06-04 03:51:21 centos7 /root/data
-------------------------------------------------------------------------------
3 snapshots
#还能够应用上面的参数进行过滤匹配查看
--path="dir_name"
--host hostname
#通过雷同的过滤器(主机、门路、标签)对输入进行分组
--group-by
更多内容请参考:https://restic.readthedocs.io…
检测存储库数据
[root@centos7 ~]# restic -r /restic/backup_dir/ check
using temporary cache in /tmp/restic-check-cache-294136679
enter password for repository:
repository dff64d39 opened successfully, password is correct
created new cache in /tmp/restic-check-cache-294136679
create exclusive lock for repository
load indexes
check all packs
check snapshots, trees and blobs
[0:00] 100.00% 3 / 3 snapshots
no errors were found
数据恢复
这个才是重点啊,复原数据才是王炸。
创立模仿数据删除的环境
[root@centos7 ~]# cd data/
[root@centos7 data]# ll
total 33796
-rw-r--r-- 1 root root 13034487 Aug 30 2020 goInception-linux-amd64-v1.2.3.tar.gz
drwxr-sr-x 11 root 40 4096 Dec 24 22:35 httpd-2.4.46
-rw-r--r-- 1 root root 9363314 Aug 5 2020 httpd-2.4.46.tar.gz
-rw-r--r-- 1 root root 2846172 Oct 14 2020 httpd-2.4.6-95.el7.centos.x86_64.rpm
-rw-r--r-- 1 root root 0 Jan 16 11:32 mingongge.file
-rw-r--r-- 1 root root 4194304 Jan 16 16:24 mingongge.z01
-rw-r--r-- 1 root root 4194304 Jan 16 16:24 mingongge.z02
-rw-r--r-- 1 root root 965420 Jan 16 16:24 mingongge.zip
[root@centos7 data]# rm -rf ./*
[root@centos7 data]# ll
total 0
复原数据
间接从快照复原误删除的数据
[root@centos7 ~]# restic -r /restic/backup_dir/ restore 4d20711e --target /root/
enter password for repository:
repository dff64d39 opened successfully, password is correct
restoring <Snapshot 4d20711e of [/root/data] at 2021-06-04 03:40:47.878873654 -0400 EDT by root@centos7> to /root/
[root@centos7 ~]# ll /root/data/
total 33796
-rw-r--r-- 1 root root 13034487 Aug 30 2020 goInception-linux-amd64-v1.2.3.tar.gz
drwxr-sr-x 11 root 40 4096 Dec 24 22:35 httpd-2.4.46
-rw-r--r-- 1 root root 9363314 Aug 5 2020 httpd-2.4.46.tar.gz
-rw-r--r-- 1 root root 2846172 Oct 14 2020 httpd-2.4.6-95.el7.centos.x86_64.rpm
-rw-r--r-- 1 root root 0 Jan 16 11:32 mingongge.file
-rw-r--r-- 1 root root 4194304 Jan 16 16:24 mingongge.z01
-rw-r--r-- 1 root root 4194304 Jan 16 16:24 mingongge.z02
-rw-r--r-- 1 root root 965420 Jan 16 16:24 mingongge.zip
下面的这种复原办法相当指定从某某快照复原数据,有时候快照较多,你不晓得如何疾速从哪个快照复原的话,能够应用 latest 参数,去从最初一次备份的快照中复原数据。
[root@centos7 ~]# rm -rf /root/data/*
[root@centos7 ~]# ll /root/data/
total 0
[root@centos7 ~]# restic -r /restic/backup_dir/ restore latest --target /root/
enter password for repository:
repository dff64d39 opened successfully, password is correct
restoring <Snapshot 94c62288 of [/root/data] at 2021-06-04 03:51:21.232686491 -0400 EDT by root@centos7> to /root/
[root@centos7 ~]# ll /root/data/
total 33796
-rw-r--r-- 1 root root 13034487 Aug 30 2020 goInception-linux-amd64-v1.2.3.tar.gz
drwxr-sr-x 11 root 40 4096 Dec 24 22:35 httpd-2.4.46
-rw-r--r-- 1 root root 9363314 Aug 5 2020 httpd-2.4.46.tar.gz
-rw-r--r-- 1 root root 2846172 Oct 14 2020 httpd-2.4.6-95.el7.centos.x86_64.rpm
-rw-r--r-- 1 root root 0 Jan 16 11:32 mingongge.file
-rw-r--r-- 1 root root 4194304 Jan 16 16:24 mingongge.z01
-rw-r--r-- 1 root root 4194304 Jan 16 16:24 mingongge.z02
-rw-r--r-- 1 root root 965420 Jan 16 16:24 mingongge.zip
其它治理介绍
删除快照
这里的快照和备份的文件名义是雷同的,快照多了,可能就须要定期删除,个别对于数据的备份工夫要求基本上 30 天是一个周期,除了特地重要的数据可能更久一点,这个依据理论状况定。
[root@centos7 ~]# restic -r /restic/backup_dir/ snapshots
enter password for repository:
repository dff64d39 opened successfully, password is correct
ID Time Host Tags Paths
-------------------------------------------------------------------------------
4d20711e 2021-06-04 03:40:47 centos7 /root/data
3e5b7dea 2021-06-04 03:46:34 centos7 /root/data/mingongge.zip
94c62288 2021-06-04 03:51:21 centos7 /root/data
-------------------------------------------------------------------------------
3 snapshots
[root@centos7 ~]# restic -r /restic/backup_dir/ forget 4d20711e
enter password for repository:
repository dff64d39 opened successfully, password is correct
[0:00] 100.00% 1 / 1 files deleted
[root@centos7 ~]# restic -r /restic/backup_dir/ snapshots
enter password for repository:
repository dff64d39 opened successfully, password is correct
ID Time Host Tags Paths
-------------------------------------------------------------------------------
3e5b7dea 2021-06-04 03:46:34 centos7 /root/data/mingongge.zip
94c62288 2021-06-04 03:51:21 centos7 /root/data
-------------------------------------------------------------------------------
2 snapshots
#这个形式和复原雷同,都是指定快照 ID
这种形式的删除,只是将快照删除了,然而援用的文件依然在存储库中,也就是说存储库的大小没有变动,须要应用 prune 参数来革除数据。
[root@centos7 ~]# restic -r /restic/backup_dir/ prune
enter password for repository:
repository dff64d39 opened successfully, password is correct
loading indexes...
loading all snapshots...
finding data that is still in use for 2 snapshots
[0:00] 100.00% 2 / 2 snapshots
searching used packs...
collecting packs for deletion and repacking
[0:00] 100.00% 19 / 19 packs processed
to repack: 0 blobs / 0 B
this removes 0 blobs / 0 B
to delete: 0 blobs / 0 B
total prune: 0 blobs / 0 B
remaining: 2990 blobs / 72.175 MiB
unused size after prune: 0 B (0.00% of remaining size)
done
还能够应用上面的命令同时执行下面两步的操作,相当于合并操作
restic forget --keep-last 1 --prune
#--keep-last 1 不删除最初一次的快照
更多对于快照删除请参考:https://restic.readthedocs.io…
存储库的明码治理
咱们能够应用 key 命令来为同一个存储库设置多个明码,还能够应用 add、list、remove、passwd 来治理明码。
- 查看明码
[root@centos7 ~]# restic -r /restic/backup_dir/ key list
enter password for repository:
repository dff64d39 opened successfully, password is correct
ID User Host Created
---------------------------------------------
*d216779f root centos7 2021-06-04 03:28:34
---------------------------------------------
- 新增明码
[root@centos7 ~]# restic -r /restic/backup_dir/ key add
enter password for repository:
repository dff64d39 opened successfully, password is correct
enter new password:
enter password again:
saved new key as <Key of root@centos7, created on 2021-06-04 04:43:18.024358447 -0400 EDT m=+18.001857421>
[root@centos7 ~]# restic -r /restic/backup_dir/ key list
enter password for repository:
repository dff64d39 opened successfully, password is correct
ID User Host Created
---------------------------------------------
*d216779f root centos7 2021-06-04 03:28:34
33d0b428 root centos7 2021-06-04 04:43:18
---------------------------------------------
-
删除
[root@centos7 ~]# restic -r /restic/backup_dir/ key remove 33d0b428 enter password for repository: repository dff64d39 opened successfully, password is correct removed key 33d0b428cba5c62585f1190432e61d46b88b4a6418c693d09ec47db596eace1f [root@centos7 ~]# restic -r /restic/backup_dir/ key list enter password for repository: repository dff64d39 opened successfully, password is correct ID User Host Created --------------------------------------------- *d216779f root centos7 2021-06-04 03:28:34 ---------------------------------------------
-
更改明码
[root@centos7 ~]# restic -r /restic/backup_dir/ key passwd enter password for repository: repository dff64d39 opened successfully, password is correct enter new password: enter password again: saved new key as <Key of root@centos7, created on 2021-06-04 04:51:13.658184739 -0400 EDT m=+27.022974479> [root@centos7 ~]# restic -r /restic/backup_dir/ key list enter password for repository: repository dff64d39 opened successfully, password is correct ID User Host Created --------------------------------------------- *a62168f6 root centos7 2021-06-04 04:51:13 --------------------------------------------- #明码已更新实现,ID 变动上能够看进去
常见问题
https://restic.readthedocs.io…
更多相干的性能,及其操作,有趣味的读者能够自行装置体验。民工哥我一圈体验下来,感觉这个 restic 的确是一款十分弱小、疾速、平安高效的备份神器,要害的要害是开源收费,太香了,强裂举荐。