Move to coreos-config directory

This commit is contained in:
2022-07-14 00:21:40 +02:00
parent bb9c2d5eef
commit ec43fe2fd3
48 changed files with 0 additions and 0 deletions

View File

@ -0,0 +1,68 @@
#!/bin/sh
# Setting this, so the repo does not need to be given on the commandline:
PUSH_KEY={{ backup.pushkey }}
# See the section "Passphrase notes" for more infos.
export BORG_PASSPHRASE='{{ backup.password }}'
export BORG_REPO=ssh://{{ backup.remote.user }}@{{ backup.remote.url }}
export BORG_RSH='ssh -i /root/.ssh/storagebox'
# some helpers and error handling:
info() { printf "\n%s %s\n\n" "$( date )" "$*" >&2; }
trap 'echo $( date ) Backup interrupted >&2; exit 2' INT TERM
info "Initialize Repo"
borg init -e repokey
info "Starting backup"
# Backup the most important directories into an archive named after
# the machine this script is currently running on:
borg create \
--verbose \
--filter AME \
--list \
--stats \
--show-rc \
--compression none \
--exclude-caches \
--one-file-system \
--exclude "re:^/var/lib/docker/volumes/[a-z0-9]{64}/.*" \
::'{hostname}-{now}' \
/var/lib/docker/volumes
backup_exit=$?
info "Pruning repository"
# Use the `prune` subcommand to maintain 7 daily, 4 weekly and 6 monthly
# archives of THIS machine. The '{hostname}-' prefix is very important to
# limit prune's operation to this machine's archives and not apply to
# other machines' archives also:
borg prune \
--list \
--prefix '{hostname}-' \
--show-rc \
--keep-daily 7 \
--keep-weekly 4 \
--keep-monthly 6
prune_exit=$?
# use highest exit code as global exit code
global_exit=$(( backup_exit > prune_exit ? backup_exit : prune_exit ))
if [ ${global_exit} -eq 0 ]; then
info "Backup and Prune finished successfully"
/usr/bin/curl -fsS -m 10 --retry 5 -o /dev/null https://monitor.chaoswg.org/api/push/${PUSH_KEY}?msg=OK&ping=
elif [ ${global_exit} -eq 1 ]; then
info "Backup and/or Prune finished with warnings"
/usr/bin/curl -fsS -m 10 --retry 5 -o /dev/null https://monitor.chaoswg.org/api/push/${PUSH_KEY}?msg=OK&ping=
else
info "Backup and/or Prune finished with errors"
fi
exit ${global_exit}

View File

@ -0,0 +1,11 @@
$ANSIBLE_VAULT;1.2;AES256;secrets
32643032393961616163376565363738383166373031393037306436383037663736613439326166
6439663833356435653161636132616133663062333063640a373137646539616561376535313739
31373932393934666133356332646237636563623631316233303962393637386534313966353839
6164343438666539390a643032333839633737336162383830386436653462363963643639616164
66656233643639613639663962383261356661343232663365353031623533643238303838373764
35633838383533666662636263656562633865396330653733616366386232353162656362626161
32383830346363313536336632656265636437323665316362303966366439316533333934373039
36633531383831363533323734373936633339373562633563663863623733346662613435636664
36633233333961396633313234303962376535616139323062316137616536326235346231666238
6231363536663534653466633730316637313162303837626366

View File

@ -0,0 +1,53 @@
#!/bin/sh
# Setting this, so the repo does not need to be given on the commandline:
# See the section "Passphrase notes" for more infos.
export BORG_PASSPHRASE='{{ backup.password }}'
export BORG_REPO=ssh://{{ backup.remote.user }}@{{ backup.remote.url }}
export BORG_RSH='ssh -i /root/.ssh/storagebox'
{% if provision.from_backup.name is defined %}
RESTORE_FROM={{ provision.from_backup.name }}
{% else %}
RESTORE_FROM=$(borg list --short --sort-by timestamp --last 1)
{% endif %}
{% raw %}
# some helpers and error handling:
info() { printf "\n%s %s\n\n" "$( date )" "$*" >&2; }
trap 'echo $( date ) Backup interrupted >&2; exit 2' INT TERM
# Backup the most important directories into an archive named after
# the machine this script is currently running on:
# Starting restore
info "Starting Restore from backup"
cd /
borg extract \
--list \
--exclude "re:^/var/lib/docker/volumes/[a-z0-9]{64}/.*" \
"::${RESTORE_FROM}"
restore_exit=$?
# use highest exit code as global exit code
global_exit=$restore_exit
if [ ${global_exit} -eq 0 ]; then
info "Restore finished successfully"
elif [ ${global_exit} -eq 1 ]; then
info "Restore finished with warnings"
else
info "Restore finished with errors"
fi
exit ${global_exit}
{% endraw %}

View File

@ -0,0 +1 @@
{{ backup.remote.keyfile }}