Backup Service

The service is provided "as is" and the operator disclaims all warranties with regard to this service including all implied warranties of merchantability and fitness. In no event shall the operator be liable for any special, direct, indirect, or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in an action of contract, negligence or other tortious action, arising out of or in connection with the use or performance of this service.

Every OpenBSD Amsterdam user gets 1G 10G of remote backup storage for free, to make sure you can backup your most precious files.

There is currently a single backup machine available. Please keep in mind, there is no backup of the backup.

In order to get access to your account, we create a unique username for each user on the host. This is in the form of sXvmXX, where sX is for the server you are on and vmXX your VMID. For example: s3vm12, s12vm31

During deployment of your VM we also copy the provided SSH key to this account. So you can reach the backup machine with the same SSH key as your VM.

For example:

$ ssh s12vm13@wingman1.openbsd.amsterdam

NOTE: It listens on the same SSH port as the hosts.

To use the remote backup you can use openrsync(1). For example:

vmXX$ openrsync -ae 'ssh' project sXXvmXX@wingman1.openbsd.amsterdam:backup
vmXX$

Easiest would be to create a new ssh-key on the VM and copy this to the .ssh/authorized_keys file in your account on wingman1.openbsd.amsterdam.

vmXX$ ssh-keygen -t ed25519 -f .ssh/id_ed25519_wm1
Generating public/private ed25519 key pair.
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in .ssh/id_ed25519_wm1
Your public key has been saved in .ssh/id_ed25519_wm1.pub
The key fingerprint is:
SHA256:coH8DMU9P5oxBpj7LcGfrjahg4PfWQ9epsDxNfN0q alice@vmXX.openbsd.amsterdam
The key's randomart image is:
+--[ED25519 256]--+
|o+++o+..*..E     |
|.=.+...* o .     |
|=o*.   =. = .    |
|+o..o+ + o =     |
|.   ..+ S o      |
|      .o   o     |
|     .    o o    |
|      .  + o .   |
|       .o+.=     |
+----[SHA256]-----+
vmXX$

If you want to use this in a script you need to create an ssh key without a passphrase.

We use something like the below script to sync all configuration.

#!/bin/sh
OPTIONS=${1:--a}
if [ -f /home/alice/exclude.txt ]; then
        EXCLUDE="--exclude-from /home/alice/exclude.txt"
fi
/usr/bin/openrsync ${OPTIONS} -e 'ssh -i /home/alice/.ssh/id_ed25519_wm1' --del ${EXCLUDE} /home/alice /etc /var/nsd /var/unbound /var/www sXXvmXX@wingman1.openbsd.amsterdam:backup

You can add the script to your crontab(5) like:

#minute hour    mday    month   wday    [flags] command
~       0       *       *       *       -n  /home/alice/sync-it.sh

Backup Servers

wingman1.openbsd.amsterdam

Dell PowerEdge R430 w/ 2 x Intel(R) Xeon(R) CPU E5-2630 v3 @ 2.40GHz
128G RAM
Dell PERC H330 Mini
4 x 14TB 7.2K SAS (RAID 5, cold spares available)