barman recover without ssh possible?

24 views
Skip to first unread message

Paul van Rixel

unread,
Oct 25, 2024, 5:53:02 AM10/25/24
to Barman, Backup and Recovery Manager for PostgreSQL
Hi all,

I use barman 3.11.1 and Postgres 16 instance. Did setup streaming archiving and backup and all that went fine. Now I'm in a proces how to restore the backup and wals made without the use of ssh-keys.  This is a secure environment and because of auditing issues ssh-keys are not accepted. The  barman-wal-archive  and  barman-wal-restore plugins/scripts could not be used because they start a ssh-connection.

So, what are the best steps to restore/recover without ssh?  Do I think the right way to put the failed instance in recovery/standby mode and the try to restore the database and wals?
Do I need to use wal_conninfo and wal_streaming_conninfo too? 
Some help would be appreciated!

Best,
Paul


Jeff Janes

unread,
Oct 25, 2024, 6:22:42 PM10/25/24
to pgba...@googlegroups.com
On Fri, Oct 25, 2024 at 5:53 AM Paul van Rixel <pvan...@gmail.com> wrote:
Hi all,

I use barman 3.11.1 and Postgres 16 instance. Did setup streaming archiving and backup and all that went fine. Now I'm in a proces how to restore the backup and wals made without the use of ssh-keys.  This is a secure environment and because of auditing issues ssh-keys are not accepted. The  barman-wal-archive  and  barman-wal-restore plugins/scripts could not be used because they start a ssh-connection.

You can restore locally (local to the server where barman is installed).  The documentation includes instructions for how to do that.  Then ask your auditor how he recommends getting the data from there to be wherever it needs to go.  Carry it on an external HDD, maybe.

Cheers,

Jeff

Paul van Rixel

unread,
Oct 27, 2024, 10:54:29 AM10/27/24
to pgba...@googlegroups.com
Hi Jeff,

Yes I know that I can locally restore to the barman server, already did that and forgot to mention that in my question.
But that’s not what I want so who has as any idea to restore to a remote server without ssh-keys?

Paul

Op za 26 okt 2024 om 00:22 schreef Jeff Janes <jeff....@gmail.com>
--
--
You received this message because you are subscribed to the "Barman for PostgreSQL" group.
To post to this group, send email to pgba...@googlegroups.com
To unsubscribe from this group, send email to
pgbarman+u...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/pgbarman?hl=en?hl=en-GB

---
You received this message because you are subscribed to a topic in the Google Groups "Barman, Backup and Recovery Manager for PostgreSQL" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/pgbarman/20kY1DeM_Ss/unsubscribe.
To unsubscribe from this group and all its topics, send an email to pgbarman+u...@googlegroups.com.
To view this discussion, visit https://groups.google.com/d/msgid/pgbarman/CAMkU%3D1w4VPqgofTtAf5J73nZj-tYbZRZ0R7FXhFkMajSO049Lg%40mail.gmail.com.

Martin Marques

unread,
Oct 28, 2024, 5:00:09 AM10/28/24
to pgba...@googlegroups.com
Hi Paul,

I would rephrase that question as, discarding ssh/rsync, what other
ways are there to copy a backup to a remote node where Postgres will
be running?

The answer is that besides using network file systems and mounting on
the barman node and then moving the mount to the final postgres node,
there is no other, besides ssh. If you are looking for something
similar to how pg_basebackup operates, that's not available, and IMO,
it would require a lot of work unless we build something at the
library level.
> You received this message because you are subscribed to the Google Groups "Barman, Backup and Recovery Manager for PostgreSQL" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to pgbarman+u...@googlegroups.com.
> To view this discussion, visit https://groups.google.com/d/msgid/pgbarman/CALXfQ0nQiLB0ZMNz%2B7Fn8GB2_ZeojCxGRcmSXEQx4adO82DXAA%40mail.gmail.com.
Reply all
Reply to author
Forward
0 new messages