mirror of
https://github.com/kevinveenbirkenbach/docker-volume-backup.git
synced 2026-08-01 12:34:50 +00:00
Backing up a live volume with rsync copies a moving target: a database
written to mid-copy lands on disk in a state no engine ever committed.
Stopping the container avoids that at the cost of downtime.
A snapshot removes both. `--snapshot {btrfs,zfs}` with `--snapshot-subject`
freezes the docker root once per run, and every volume copy is then read
from that frozen tree while the containers keep serving. A restore of such
a copy is an ordinary crash recovery, which every supported engine performs
on its own at startup.
An unsupported filesystem or an unknown snapshot kind fails loudly rather
than degrading to a live copy, since a silent fallback would return exactly
the torn backup the mode exists to prevent. `--shutdown` is rejected
alongside `--snapshot` instead of being ignored: under a snapshot no
container is ever stopped, so accepting the flag would promise downtime
semantics the run does not deliver.
Copies out of a snapshot skip rsync's --checksum verification. The source
is immutable for the lifetime of the copy, so size-and-mtime cannot race,
and dropping the second full read roughly halves the I/O per volume.
backup/app.py grew past what one module could carry and is split into
layout, policy and dumps along the lines it already had internally.
Tests: unit coverage for the new snapshot, layout, policy, volume and cli
units; e2e cases drive real btrfs, zfs and ext4 filesystems on loop devices
in a privileged container, including a MariaDB that is written to across
the snapshot and must recover from the restored copy without losing a
committed row. CI installs zfs and sets E2E_REQUIRE_FILESYSTEMS so a
missing kernel module fails the build instead of silently skipping a
filesystem.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
88 lines
3.3 KiB
Python
88 lines
3.3 KiB
Python
"""Contract of the rsync invocation that copies a volume."""
|
|
|
|
from __future__ import annotations
|
|
|
|
import tempfile
|
|
import unittest
|
|
from pathlib import Path
|
|
from unittest import mock
|
|
|
|
from baudolo.backup import volume as mod
|
|
|
|
|
|
class TestBackupVolume(unittest.TestCase):
|
|
def copy(self, **kwargs) -> str:
|
|
with tempfile.TemporaryDirectory() as tmp:
|
|
defaults = {
|
|
"versions_dir": tmp,
|
|
"volume_name": "demo",
|
|
"volume_dir": str(Path(tmp) / "gen" / "demo"),
|
|
"authoritative": False,
|
|
"source": "/var/lib/docker/volumes/demo/_data/",
|
|
}
|
|
defaults.update(kwargs)
|
|
with mock.patch.object(mod, "execute_shell_command") as run:
|
|
mod.backup_volume(
|
|
defaults.pop("versions_dir"),
|
|
defaults.pop("volume_name"),
|
|
defaults.pop("volume_dir"),
|
|
**defaults,
|
|
)
|
|
return run.call_args[0][0]
|
|
|
|
def test_the_quick_check_pass_carries_no_checksum(self) -> None:
|
|
self.assertNotIn("--checksum", self.copy(authoritative=False))
|
|
|
|
def test_the_authoritative_pass_compares_by_content(self) -> None:
|
|
self.assertIn("--checksum", self.copy(authoritative=True))
|
|
|
|
def test_it_reads_from_the_given_source(self) -> None:
|
|
command = self.copy(source="/snapshot/volumes/demo/_data/")
|
|
self.assertIn("/snapshot/volumes/demo/_data/", command)
|
|
|
|
def test_it_always_deletes_what_the_source_no_longer_has(self) -> None:
|
|
self.assertIn("--delete", self.copy())
|
|
|
|
def test_it_creates_the_destination(self) -> None:
|
|
with tempfile.TemporaryDirectory() as tmp:
|
|
dest = Path(tmp) / "gen" / "demo"
|
|
with mock.patch.object(mod, "execute_shell_command"):
|
|
mod.backup_volume(
|
|
tmp, "demo", str(dest), authoritative=False, source="/src/"
|
|
)
|
|
self.assertTrue((dest / "files").is_dir())
|
|
|
|
def test_source_is_required(self) -> None:
|
|
with self.assertRaises(TypeError):
|
|
mod.backup_volume("/v", "demo", "/d", authoritative=False)
|
|
|
|
def test_authoritative_is_required(self) -> None:
|
|
with self.assertRaises(TypeError):
|
|
mod.backup_volume("/v", "demo", "/d", source="/src/")
|
|
|
|
|
|
class TestLastBackupDir(unittest.TestCase):
|
|
def test_it_ignores_the_generation_being_written(self) -> None:
|
|
with tempfile.TemporaryDirectory() as tmp:
|
|
current = Path(tmp) / "20260101" / "demo" / "files"
|
|
current.mkdir(parents=True)
|
|
found = mod.get_last_backup_dir(tmp, "demo", str(current) + "/")
|
|
self.assertIsNone(found)
|
|
|
|
def test_it_finds_the_previous_generation(self) -> None:
|
|
with tempfile.TemporaryDirectory() as tmp:
|
|
older = Path(tmp) / "20260101" / "demo" / "files"
|
|
older.mkdir(parents=True)
|
|
current = Path(tmp) / "20260102" / "demo" / "files"
|
|
current.mkdir(parents=True)
|
|
found = mod.get_last_backup_dir(tmp, "demo", str(current) + "/")
|
|
self.assertEqual(found, str(older) + "/")
|
|
|
|
def test_a_first_run_has_no_predecessor(self) -> None:
|
|
with tempfile.TemporaryDirectory() as tmp:
|
|
self.assertIsNone(mod.get_last_backup_dir(tmp, "demo", f"{tmp}/x/"))
|
|
|
|
|
|
if __name__ == "__main__":
|
|
unittest.main()
|