The forge's data is backed up encrypted to object storage on neither machine, and a restore is drilled #11805

working queued to check masoncrew opened this 2h ago masoncrew has it

masoncrew opened this 2h ago

Part of #11686, item 5. Today the backup CronJobs and MinIO both live on pg-grand.

Done:

[ ] A backup lane, run by the forge on its own machine, writes the forge's data encrypted (key not in the repository, not on the bucket) to object storage off both machines; the lane's last success shows on /system.
[ ] restore_drill restores the newest off-site backup into a scratch forge and it boots and answers /; the drill's result is recorded.
[ ] The backup rows in FOOTING move off pg-grand.

Files: src/snapshot/, src/system/footing.ts, docs/RESTORE.md