LibrePortal/scripts/backup/engine/restic_backup.sh
librelad d9f2feef05 feat(backup): consistent live database backups with auto strategy
Adds a logical-dump path so apps with a database can be backed up with zero
downtime and full consistency, instead of stopping the container.

- backup_db.sh: dump each declared DB live (mysqldump --single-transaction /
  pg_dump / sqlite3 .backup), exclude the raw data dir from the snapshot, and
  replay the dump on restore (pre-start rehydrate for sqlite, post-start load
  for server engines).
- Databases are declared via a 'libreportal.backup.db' compose label so the
  metadata travels with the app in the snapshot.
- New 'auto' strategy (now the default): live where a DB is dumpable or the app
  is marked live-safe, stop-snapshot-start otherwise. Explicit stop/pause/live
  remain as overrides.
- restic/borg/kopia adapters honour an exclude list on the live path.
- Manifest records the resolved per-app strategy and dumped databases.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Signed-off-by: librelad <librelad@digitalangels.vip>
2026-05-23 15:09:14 +01:00

89 lines
2.4 KiB
Bash

#!/bin/bash
resticBackupAppToLocation()
{
local idx="$1"
local app_name="$2"
local manifest_sha="$3"
local source_path="$containers_dir$app_name"
if [[ ! -d "$source_path" ]]; then
isError "Source path missing for $app_name: $source_path"
return 1
fi
resticEnvExport "$idx" || return 1
local host_tag="${CFG_INSTALL_NAME:-libreportal}"
local extra_tags=(
--tag "app=$app_name"
--tag "host=$host_tag"
--tag "engine=libreportal"
)
[[ -n "$manifest_sha" ]] && extra_tags+=(--tag "manifest=$manifest_sha")
# On the live path backup_app_start sets $backup_exclude_paths to the raw
# DB data dirs the dumps replace; keep them out of the snapshot.
local exclude_args=()
local p
while IFS= read -r p; do
[[ -n "$p" ]] && exclude_args+=(--exclude "$p")
done <<< "${backup_exclude_paths:-}"
local loc_name
loc_name=$(resticLocationName "$idx")
isNotice "Snapshotting $app_name$loc_name"
local output
output=$(sudo -E -u "$docker_install_user" restic backup \
--host "$host_tag" \
"${extra_tags[@]}" \
"${exclude_args[@]}" \
--exclude-caches \
--json \
"$source_path" 2>&1)
local rc=$?
local snapshot_id
snapshot_id=$(echo "$output" | grep -o '"snapshot_id":"[^"]*"' | tail -1 | cut -d'"' -f4)
if [[ $rc -eq 0 ]]; then
isSuccessful "Backup created in $loc_name: ${snapshot_id:0:8}"
echo "$snapshot_id"
else
isError "Backup to $loc_name failed for $app_name"
echo "$output" | tail -10
fi
resticEnvUnset
return $rc
}
resticBackupAppAllLocations()
{
local app_name="$1"
local manifest_sha="$2"
local failed=0
local succeeded=0
local idx
while IFS= read -r idx; do
[[ -z "$idx" ]] && continue
if resticBackupAppToLocation "$idx" "$app_name" "$manifest_sha" >/dev/null; then
succeeded=$((succeeded + 1))
else
failed=$((failed + 1))
fi
done < <(resticEnabledLocations)
if [[ $succeeded -eq 0 ]]; then
isError "All backup targets failed for $app_name"
return 1
fi
if [[ $failed -gt 0 ]]; then
isNotice "Backup of $app_name succeeded on $succeeded location(s), failed on $failed"
else
isSuccessful "Backup of $app_name succeeded on $succeeded location(s)"
fi
return 0
}