coulomb/railiance-cluster
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(backup): SQLite hot backup instead of etcd snapshot

Browse source 
k3s runs in SQLite mode (no --cluster-init). Replace etcd-snapshot
with sqlite3 .backup for a WAL-aware hot copy of state.db.
Update restore guide to match. Cron installed under root crontab.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Bernd Worsch 2026-03-26 21:56:19 +00:00
parent ee6d7b149e
commit 2420915d30
2 changed files with 25 additions and 27 deletions
Download patch file Download diff file Expand all files Collapse all files

30
tools/cmd/railiance-backup-s2
View file

@ -13,7 +13,7 @@ source "${ROOT}/lib/railiance-print.sh"
AGE_PUBLIC_KEY="age1aq8twfd78wvpra0had8cezcnj96tj4q0068edrz5jez8d6xwmflqdepsh4"
BACKUP_DIR="/opt/backup/railiance/cluster"
KUBECONFIG_PATH="/etc/rancher/k3s/k3s.yaml"
ETCD_SNAP_DIR="/var/lib/rancher/k3s/server/db/snapshots"
K3S_STATE_DB="/var/lib/rancher/k3s/server/db/state.db"
KEEP=7
TS="$(date -u +%Y%m%dT%H%M%SZ)"
@ -27,22 +27,18 @@ fi
mkdir -p "${BACKUP_DIR}"
# ── 1. k3s etcd snapshot ───────────────────────────────────────────────────────
if k3s etcd-snapshot ls &>/dev/null; then
ok "etcd" "taking snapshot…"
SNAP_NAME="railiance-${TS}"
k3s etcd-snapshot save --name "${SNAP_NAME}" &>/dev/null
SNAP_FILE="${ETCD_SNAP_DIR}/${SNAP_NAME}"
if [[ ! -f "${SNAP_FILE}" ]]; then
# k3s may append a suffix — find the most recent matching file
SNAP_FILE="$(find "${ETCD_SNAP_DIR}" -name "${SNAP_NAME}*" | sort -r | head -1)"
fi
age -r "${AGE_PUBLIC_KEY}" -o "${BACKUP_DIR}/etcd-${TS}.snap.age" "${SNAP_FILE}"
ok "etcd" "encrypted → etcd-${TS}.snap.age"
# Prune old snapshots from k3s store (keep last KEEP)
k3s etcd-snapshot prune --snapshot-retention "${KEEP}" &>/dev/null || true
# ── 1. k3s state (SQLite hot backup) ──────────────────────────────────────────
# This cluster runs k3s in SQLite mode (no --cluster-init).
# sqlite3 .backup performs a WAL-aware hot copy — no k3s stop required.
if [[ -f "${K3S_STATE_DB}" ]]; then
ok "state-db" "taking hot backup…"
TMP_STATE="$(mktemp /tmp/k3s-state-XXXXXX.db)"
sqlite3 "${K3S_STATE_DB}" ".backup ${TMP_STATE}"
age -r "${AGE_PUBLIC_KEY}" -o "${BACKUP_DIR}/k3s-state-${TS}.db.age" "${TMP_STATE}"
rm -f "${TMP_STATE}"
ok "state-db" "encrypted → k3s-state-${TS}.db.age"
else
warn "etcd" "k3s etcd not available (SQLite mode?) — skipping snapshot"
warn "state-db" "${K3S_STATE_DB} not found — skipping"
fi
# ── 2. Helm release values ─────────────────────────────────────────────────────
@ -73,7 +69,7 @@ else
fi
# ── 4. Prune local cache ───────────────────────────────────────────────────────
for pattern in "etcd-*.snap.age" "helm-values-*.tar.gz.age" "kubeconfig-*.yaml.age"; do
for pattern in "k3s-state-*.db.age" "helm-values-*.tar.gz.age" "kubeconfig-*.yaml.age"; do
find "${BACKUP_DIR}" -name "${pattern}" | sort -r | tail -n +$((KEEP + 1)) | xargs -r rm -f
done
ok "prune" "kept last ${KEEP} of each type"