Tapebackup

This program downloads files via SSH/Rsync from remote server, encrypt them using openssl and stores them on tape devices.

It stores all necessary information into a SQLite database. It stores original filenames, encrypted filenames, hashsums, tapedevices and Timestamps of operations

If you want to backup different "projects" with the same library, either clone the repository again or specify different configfile and databasefile.Then specify "lto-whitelist" instead blacklisting tapes.

Caution: It will not detect changes on same filename. Use it only for non changing files, like mediafiles or pictures.

Help

user@server ~ (git)-[master] # ./main.py --help
usage: main.py [-h] [-v] [--debug] [--info] [--quiet] [--local] [-c CONFIG] [-D DATABASE] [-s SERVER] [-d DATA_DIR] [-l TAPELIB] [-t TAPEDRIVE] [-m TAPE_MOUNT]
               {get,encrypt,write,verify,restore,files,log,db,tape,config,debug,develop} ...

Tape backup from remote or local server to tape library

optional arguments:
  -h, --help            show this help message and exit
  -v, --version         Show version and exit

  --debug               Set log level to debug
  --info                Set log level to info
  --quiet               Set log level to error

  --local               Use 'local-data-dir' as data source, not syncing from remote server, only adding to database and not deleting source files
  -c CONFIG, --config CONFIG
                        Specify configuration yaml file [Default: config.yml]
  -D DATABASE, --database DATABASE
                        Specify database [Default: Read from config file]
  -s SERVER, --server SERVER
                        Specify remote server [Default: Read from config file]
  -d DATA_DIR, --data-dir DATA_DIR
                        Specify 'local data directory' [Default: Read from config file]
  -l TAPELIB, --tapelib TAPELIB
                        Specify tape library device [Default: Read from config file]
  -t TAPEDRIVE, --tapedrive TAPEDRIVE
                        Specify tape drive device [Default: Read from config file]
  -m TAPE_MOUNT, --tape-mount TAPE_MOUNT
                        Specify 'tape mount directory' [Default: Read from config file]

Commands:
  {get,encrypt,write,verify,restore,files,log,db,tape,config,debug,develop}
    get                 Get Files from remote Server
    encrypt             Enrypt files and build directory for one tape media size
    write               Write directory into
    verify              Verify Files (random or given filename) on Tape
    restore             Restore File from Tape
    files               File operations
    log                 Log operations
    db                  Database operations
    tape                Tapelibrary operations
    config              Configuration operations
    debug               Print debug information
    develop             Generic function for developing new stuff

Gettings started

Prerequisites

It is written in Python 3. Install necessary tape software via distribution package manager. Install Python modules via pip, you may want to use venv.

Python modules:

• pyyaml

Kernel modules:

• sg
• st

Tools:

• mt (Archlinux mt-st-git)
• mtx
• LTFS
  • [IBM Drives] OpenLTFS
  • [HP/HPE Drives] HPE StoreOpen und Linear Tape File System (LTFS) Software https://buy.hpe.com/de/de/storage/storage-software/storage-device-management-software/storeever-tape-device-management-software/hpe-storeopen-linear-tape-file-system-ltfs-software/p/4249221
• openssl
• rsync
• sqlite

Install LTFS (Linear Tape File System

• [IBM Drives] OpenLTFS
• [HP/HPE Drives] HPE StoreOpen und Linear Tape File System (LTFS) Software https://buy.hpe.com/de/de/storage/storage-software/storage-device-management-software/storeever-tape-device-management-software/hpe-storeopen-linear-tape-file-system-ltfs-software/p/4249221

Follow install instructions from LTFS package

Install tools via package management

Arch Linux

pacman -S mt-st-git rsync 

## Install mtx via AUR, if you are using yay:
yay -S mtx-svn

Debian based OS

apt install mt-st mtx rsync

Python venv

python3 -m virtualenv venv
venv/bin/pip install -r requirements.txt

Change the configuration file!

In order to use the tapebackup script, you need to modify the config.yml file to your needs.

Download Files from remote server

To download files via rsync from remote server execute:

./main.py get

To use it for a local directory add --local (It will write the database entries only):

./main.py --local get

Encrypt files with openssl

To encrypt files with openssl execute:

./main.py encrypt

It will create generated names with will to saved in the database.

To use it for a local directory add --local (Then the data are nor deleted):

./main.py --local encrypt

Write encrypted files to tape

To write the encrypted files to tape, execute the following:

./main.py write

It will find unused tapes in library and write data to it. If there are no free tapes, or tape is full, it will inform you.

More functions

There are many more function around database or verifying files. Use ./main.py --help to see all functions.

Tested with following Devices / OS

• Arch Linux
• TANDBERG StorageLoader with 1x HP Ultrium 5-SCSI Drive
• TANDBERG Tape Library T40 with 1x HP Ultrium 6-Fibrechannel Drive

Known limitations

• Tapelibraries with more than 1 drive possibly not working (I have no media to test with)
• Verify backup by md5sum not yet implemented

Howto test tapelibrary from linux

List Tape Devices

root@wuerfel /home/jonas # lsscsi --generic
[0:0:0:0]    tape    HP       Ultrium 5-SCSI   Z51U  /dev/st0   /dev/sg4 
[0:0:0:1]    mediumx TANDBERG StorageLoader    0495  /dev/sch0  /dev/sg5 
[1:0:0:0]    disk    ATA      WDC WD100EFAX-68 0A83  /dev/sda   /dev/sg0 
[2:0:0:0]    disk    ATA      WDC WD100EFAX-68 0A83  /dev/sdb   /dev/sg1 
[3:0:0:0]    disk    ATA      WDC WD100EFAX-68 0A83  /dev/sdc   /dev/sg2 
[5:0:0:0]    disk    ATA      Samsung SSD 840  DB6Q  /dev/sdd   /dev/sg3 

If is does not return the changer and tape device, check if modul sg is loaded.

Show Tape Device Status

root@wuerfel /home/jonas # mt-st -f /dev/st0 status                                                                                                                                                                                      :(
SCSI 2 tape drive:
File number=-1, block number=-1, partition=0.
Tape block size 0 bytes. Density code 0x0 (default).
Soft error count since last status=0
General status bits on (50000):
 DR_OPEN IM_REP_EN

Show Tape Library (Changer) Status

root@wuerfel /home/jonas # mtx -f /dev/sg5 status                                                                                                                                                                                        :(
mtx: Request Sense: Long Report=yes
mtx: Request Sense: Valid Residual=no
mtx: Request Sense: Error Code=70 (Current)
mtx: Request Sense: Sense Key=Unit Attention
mtx: Request Sense: FileMark=no
mtx: Request Sense: EOM=no
mtx: Request Sense: ILI=no
mtx: Request Sense: Additional Sense Code = 28
mtx: Request Sense: Additional Sense Qualifier = 00
mtx: Request Sense: BPV=no
mtx: Request Sense: Error in CDB=no
mtx: Request Sense: SKSV=no
Mode sense (0x1A) for Page 0x1D failed
  Storage Changer /dev/sg5:1 Drives, 7 Slots ( 0 Import/Export )
Data Transfer Element 0:Empty
      Storage Element 1:Full :VolumeTag=000711L4                        
      Storage Element 2:Full :VolumeTag=A00008L5                        
      Storage Element 3:Full :VolumeTag=A00034L5                        
      Storage Element 4:Full :VolumeTag=A00014L5                        
      Storage Element 5:Full :VolumeTag=A00036L5                        
      Storage Element 6:Full :VolumeTag=A00025L5                        
      Storage Element 7:Full :VolumeTag=000218L5                        

Read Product Information from Drive

root@wuerfel /home/jonas # mtx -f /dev/sg4 inquiry                                                                                                                                                                                       :(
Product Type: Tape Drive
Vendor ID: 'HP      '
Product ID: 'Ultrium 5-SCSI  '
Revision: 'Z51U'
Attached Changer API: No

Erase Tape

root@wuerfel /home/jonas # mt-st -f /dev/st0 erase

Mount and umount

mtx -f /dev/sg5 unload
mtx -f /dev/sg5 load 4
mkltfs -d /dev/st0
ltfs /mnt/lto5
umount /mnt/lto5

Show Tape Blocksize

Important: The Tape Blocksize is not saved on tape. You will need to set it everytime using a tape!

root@testserver# mt-st -f /dev/nst0 status
[ .. ]
Tape block size 65536 bytes. Density code 0x46 (LTO-4).
[ .. ]

Seek to specific position

mt-st -f /dev/nst0 seek 1093636 

Position tape to end of data (Appending more data)

mt-st -f /dev/nst0 eod

Position commands

       fsf    Forward space count files.  The tape is positioned on the first block of the next file.
       fsfm   Forward space count files.  The tape is positioned on the last block of the previous file.
       bsf    Backward space count files.  The tape is positioned on the last block of the previous file.
       bsfm   Backward space count files.  The tape is positioned on the first block of the next file.
       asf    The tape is positioned at the beginning of the count file. Positioning is done by first rewinding the tape and then spacing forward over count filemarks.
       fsr    Forward space count records.
       bsr    Backward space count records.
       fss    (SCSI tapes) Forward space count setmarks.
       bss    (SCSI tapes) Backward space count setmarks.

mt-st -f /dev/nst0 fsf 1 #go forward 1 file/tape
mt-st -f /dev/nst0 bsf 1 #go backward 1 file/tape

Show current tape position

root@testserver# mt-st -f /dev/nst0 tell 
At block 13164.

Using tar for LTO < LTO5

Procedure for writing backups

1. Set 'scsi2logical' option
2. Set Blocksize. We are using 64k
3. Write file
4. Set 'end-of-file-mark' NOT necessary, as it got written automaticaly

/dev/nst0: Input/output error

Set 'scsi2logical' option:

mt-st -f /dev/nst0 stsetoptions scsi2logical

Set Blocksize (otherwise the speed is at a few kB/s)

mt-st -f /dev/nst0 setblk 64k

Write with tar

Important: Specify block size (-b | --blocking-factor). It is using a multiple of 512Byte. In order to use 64k Blocksize put 128 as blocking factor.

Use -C to create relativ file path.

tar -c -b128 -f /dev/nst0 -C <FOLDER_WHICH_CONTAINS_FILES> <FILE1> <FILE2>

Set end of file mark

mt-st -f /dev/nst0 weof

List files of this archive (You must move tape before to correct position)

tar -b128 -tvf /dev/nst0

Extract files of this archive (You must move tape before to correct position)

tar -x -b128 -f /dev/nst0 -C /tmp

Write with tar and show progress (for testing only)

tar -vc -b128 -f - -C <FOLDER_WHICH_CONTAINS_FILES> <FILE1> <FILE2> | (pv -p --timer --rate --bytes > /dev/nst0)