پشتیبان‌گیری رمزگذاری‌شده با restic و آزمون بازیابی در محیط جدا

خط فرمان؛ فقط در محیطی که مجوز بررسی آن را دارید

unset RESTIC_PASSWORD RESTIC_PASSWORD_COMMAND
export RESTIC_REPOSITORY='sftp:backup@backup.example.com:/srv/restic/academy-repo'
export RESTIC_PASSWORD_FILE='/home/operator/academy-restic-private/repository-password'
restic init
restic cat config
restic snapshots

خط فرمان؛ فقط در محیطی که مجوز بررسی آن را دارید

set -o pipefail
(set -C; : > '/home/operator/academy-restic-private/source-sha256.txt') || exit 1
(cd '/srv/backup-export' && find . -xdev -type f -print0 | sort -z | xargs -0 -r sha256sum --) > '/home/operator/academy-restic-private/source-sha256.txt' || exit 1
test -s '/home/operator/academy-restic-private/source-sha256.txt' || { printf '%s\n' 'No regular files: stop and review source'; exit 1; }

خط فرمان؛ فقط در محیطی که مجوز بررسی آن را دارید

unset RESTIC_PASSWORD RESTIC_PASSWORD_COMMAND
export RESTIC_REPOSITORY='sftp:backup@backup.example.com:/srv/restic/academy-repo'
export RESTIC_PASSWORD_FILE='/home/operator/academy-restic-private/repository-password'
(set -C; : > '/home/operator/academy-restic-private/backup-result.json') || exit 1
restic backup '/srv/backup-export' --host 'app1' --tag academy-restore --one-file-system --json > '/home/operator/academy-restic-private/backup-result.json'
backup_status=$?
test "$backup_status" -eq 0 || { printf 'Backup failed: %s\n' "$backup_status"; exit 1; }
python3 - <<'PY'
import json
from pathlib import Path
p=Path('/home/operator/academy-restic-private')
rows=[json.loads(line) for line in (p/'backup-result.json').read_text().splitlines() if line.strip()]
summaries=[r for r in rows if r.get('message_type')=='summary']
assert len(summaries)==1 and summaries[0].get('snapshot_id'), 'No unique successful summary'
snapshot=summaries[0]['snapshot_id']
assert len(snapshot)==64 and all(c in '0123456789abcdef' for c in snapshot), 'Invalid snapshot ID'
with (p/'snapshot-id').open('x') as f:f.write(snapshot+'\n')
print('Exact snapshot ID retained in protected file')
PY

خط فرمان؛ فقط در محیطی که مجوز بررسی آن را دارید

unset RESTIC_PASSWORD RESTIC_PASSWORD_COMMAND
export RESTIC_REPOSITORY='sftp:backup@backup.example.com:/srv/restic/academy-repo'
export RESTIC_PASSWORD_FILE='/home/operator/academy-restic-private/repository-password'
snapshot=$(cat '/home/operator/academy-restic-private/snapshot-id')
restic snapshots "$snapshot"
restic check
# Optional only after capacity/transfer-budget review:
restic check --read-data

خط فرمان؛ فقط در محیطی که مجوز بررسی آن را دارید

unset RESTIC_PASSWORD RESTIC_PASSWORD_COMMAND
export RESTIC_REPOSITORY='sftp:backup@backup.example.com:/srv/restic/academy-repo'
export RESTIC_PASSWORD_FILE='/home/operator/academy-restic-private/repository-password'
mkdir -m 700 '/srv/academy-restic-restore' || exit 1
snapshot=$(cat '/home/operator/academy-restic-private/snapshot-id')
restic restore "$snapshot" --target '/srv/academy-restic-restore' --verify

خط فرمان؛ فقط در محیطی که مجوز بررسی آن را دارید

cd '/srv/academy-restic-restore/srv/backup-export' || exit 1
sha256sum --check '/home/operator/academy-restic-private/source-sha256.txt' || exit 1
find . -xdev -type f -printf '.' | wc -c
find '/srv/backup-export' -xdev -type f -printf '.' | wc -c