admin
766500dfc3
Spike-proven that backup/restore-to-PBS reuse Phase A unchanged; the only new code is the verify capability, a small PBS-API client, and PBSSnapshot reporting. - internal/pbs: fingerprint-pinned, token-authed PBS-API client (Verify/Snapshots/ TaskStatus, node-from-UPID; secret read from /etc/pve/priv/storage/<id>.pw at runtime, never logged) + the verify maintenance loop (own cadence, default 6h, NOT gated/journaled, like the watchdog) + SnapshotStore. - hub: PBSSnapshot filled (namespace/type/id/time/size/owner/protected/encrypted/ verify_state/verify_upid); PBSReporter collector seam; cross-repo golden + bidirectional key-set tests; hub handler parses pbs_snapshots + logs a failed-verify WARN. - backup: report the ACTUAL vzdump mode (parsed from the task log; PVE may downgrade snapshot->stop). proxmox.Storage.Username. config PBSVerifyCadence/secret-dir. --selftest=pbs-verify. Backup/restore-to-PBS unchanged. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
50 lines
1.3 KiB
JSON
50 lines
1.3 KiB
JSON
{
|
|
"proxmox": {
|
|
"endpoint": "https://127.0.0.1:8006",
|
|
"node": "demo-felhom",
|
|
"token": "felhom-agent@pve!agent=REPLACE_WITH_SECRET",
|
|
"tls": {
|
|
"ca_file": "",
|
|
"fingerprint": "BA:7C:99:7D:45:D0:67:91:E2:F2:72:74:6E:D6:9F:83:51:D1:61:E5:C3:BD:F6:A0:B8:0B:E3:D8:DB:89:5B:CF",
|
|
"insecure_skip_verify": false
|
|
}
|
|
},
|
|
"privileged": {
|
|
"mode": "sudo",
|
|
"sudo_path": "sudo"
|
|
},
|
|
"authz": {
|
|
"nonce_store_path": "/var/lib/felhom-agent/nonces.log",
|
|
"signers": [
|
|
{
|
|
"key_id": "felhom-op-1",
|
|
"role": "operational",
|
|
"public_key": "ssh-ed25519 AAAA... felhom-op-1"
|
|
},
|
|
{
|
|
"key_id": "felhom-recovery-1",
|
|
"role": "recovery",
|
|
"public_key": "ssh-ed25519 AAAA... felhom-recovery-1"
|
|
}
|
|
]
|
|
},
|
|
"hub": {
|
|
"url": "https://hub.felhom.eu",
|
|
"host_id": "demo-host-01",
|
|
"api_key": "REPLACE_WITH_PER_HOST_HUB_KEY",
|
|
"poll_seconds": 900,
|
|
"timeout_seconds": 30,
|
|
"ca_file": ""
|
|
},
|
|
"backup": {
|
|
"local_backup_target": "local",
|
|
"restore_storage": "local-lvm",
|
|
"restore_test_cadence_seconds": 0,
|
|
"scratch_vmid_min": 990000,
|
|
"scratch_vmid_max": 990009,
|
|
"pbs_verify_cadence_seconds": 0,
|
|
"pbs_secret_dir": "/etc/pve/priv/storage"
|
|
},
|
|
"log_level": "info"
|
|
}
|