Feedback on immutability
-
Indeed, because if XO is compromised, then it could disable immutability.
-
@olivierlambert We tried adding compliance( prevent any file manipulation for X period) directly into bucket but XOA could not do his backup job correctly and the logs are full of access denied probably because of file merging or manipulation refused , so how we should do this ?
-
@vkeven same problem here, we decided not to proceed with this as it would never work with an incremental delta without doing a full every few weeks. We are going to handle this with s3 and synology internal features.
-
Thanks for your feedback, we'll discuss internally if there's any other possible approach (and I'm not sure).
-
So what is the deal with these guy ?
-
O olivierlambert referenced this topic on
-
@olivierlambert
Any updates on this? We're using Backblaze buckets with compliance turned on at the bucket level, but we keep getting failures once the retention period expires and it starts to remove the old backup chains.We tried setting 28 days of retention at the bucket level, 42 in XenOrchestra, and are running a full backup every 2 weeks. I have a ticket open with support but so far a resolution hasn't been found.
-
In theory that should work
Ping @florent -
@olivierlambert
So it looks like the issue is not related to object lock or immutability but rather Backblaze not handling the merge requests very well. Not sure why this isn't impacting the other backup job without object lock, but anyways.... guess we're in the market for a different storage provider. -
Sadly, Backblaze is often having issues on S3 (timeout, not reliable etc). We are updating our doc to give a "tiering" support.
-
We attempted a similar configuration using Wasabi S3 cloud storage as the target. What we discovered is that the Lifecyle Rule we created wiped out metadata.json and encryption.json in the root of the bucket once those files were outside the retention window. It was a global rule and I'm guessing that we need to be more precise and use scoped rules that target just the xo-vm-backups, xo-config-backups, and xo-pool-metadata-backups folders. Does that sound like it would work? I have a ticket open as well on this.
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login