Initial commit: Disaster recovery CLI tool
A Go-based CLI tool for recovering servers from backups to new cloud VMs. Features: - Multi-cloud support: Exoscale, Cloudscale, Hetzner Cloud - Backup sources: Local filesystem, Hetzner Storage Box - 6-stage restore pipeline with /etc whitelist protection - DNS migration with safety checks and auto-rollback - Dry-run by default, requires --yes to execute - Cloud-init for SSH key injection Packages: - cmd/recover-server: CLI commands (recover, migrate-dns, list, cleanup) - internal/providers: Cloud provider implementations - internal/backup: Backup source implementations - internal/restore: 6-stage restore pipeline - internal/dns: Exoscale DNS management - internal/ui: Prompts, progress, dry-run display - internal/config: Environment and host configuration 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Olaf Berberich
200
internal/backup/hetzner_storage.go
Normal file
200
internal/backup/hetzner_storage.go
Normal file
@@ -0,0 +1,200 @@
|
||||
package backup
|
||||
|
||||
import (
|
||||
"bytes"
|
||||
"context"
|
||||
"fmt"
|
||||
"os"
|
||||
"os/exec"
|
||||
"strings"
|
||||
"time"
|
||||
)
|
||||
|
||||
// HetznerStorageSource implements BackupSource for Hetzner Storage Box
|
||||
type HetznerStorageSource struct {
|
||||
User string // e.g., u480813
|
||||
Host string // e.g., u480813.your-storagebox.de
|
||||
BasePath string // e.g., /backups
|
||||
Port int // SSH port (default 23 for sftp, 22 for ssh)
|
||||
}
|
||||
|
||||
// NewHetznerStorageSource creates a new Hetzner Storage Box source
|
||||
func NewHetznerStorageSource(user, host string) *HetznerStorageSource {
|
||||
if user == "" {
|
||||
user = "u480813"
|
||||
}
|
||||
if host == "" {
|
||||
host = "u480813.your-storagebox.de"
|
||||
}
|
||||
return &HetznerStorageSource{
|
||||
User: user,
|
||||
Host: host,
|
||||
BasePath: "/backups",
|
||||
Port: 23, // Hetzner uses port 23 for SFTP
|
||||
}
|
||||
}
|
||||
|
||||
func (s *HetznerStorageSource) Name() string {
|
||||
return "hetzner"
|
||||
}
|
||||
|
||||
func (s *HetznerStorageSource) sshAddress() string {
|
||||
return fmt.Sprintf("%s@%s", s.User, s.Host)
|
||||
}
|
||||
|
||||
func (s *HetznerStorageSource) List(ctx context.Context, host string) ([]BackupInfo, error) {
|
||||
var backups []BackupInfo
|
||||
|
||||
// Use sftp to list directories
|
||||
path := s.BasePath
|
||||
if host != "" {
|
||||
path = fmt.Sprintf("%s/%s", s.BasePath, host)
|
||||
}
|
||||
|
||||
// Run sftp ls command
|
||||
cmd := exec.CommandContext(ctx, "sftp", "-P", fmt.Sprintf("%d", s.Port), "-o", "BatchMode=yes", s.sshAddress())
|
||||
cmd.Stdin = strings.NewReader(fmt.Sprintf("ls -la %s\nquit\n", path))
|
||||
|
||||
var stdout, stderr bytes.Buffer
|
||||
cmd.Stdout = &stdout
|
||||
cmd.Stderr = &stderr
|
||||
|
||||
if err := cmd.Run(); err != nil {
|
||||
return nil, fmt.Errorf("sftp failed: %w: %s", err, stderr.String())
|
||||
}
|
||||
|
||||
// Parse output
|
||||
lines := strings.Split(stdout.String(), "\n")
|
||||
for _, line := range lines {
|
||||
fields := strings.Fields(line)
|
||||
if len(fields) < 9 {
|
||||
continue
|
||||
}
|
||||
|
||||
// Skip . and ..
|
||||
name := fields[len(fields)-1]
|
||||
if name == "." || name == ".." {
|
||||
continue
|
||||
}
|
||||
|
||||
// Check if it's a directory
|
||||
if !strings.HasPrefix(fields[0], "d") {
|
||||
continue
|
||||
}
|
||||
|
||||
hostName := name
|
||||
if host != "" {
|
||||
// We're looking at subdirs of a specific host
|
||||
continue
|
||||
}
|
||||
|
||||
info := &BackupInfo{
|
||||
Host: hostName,
|
||||
Source: "hetzner",
|
||||
Path: fmt.Sprintf("%s/%s", s.BasePath, hostName),
|
||||
Timestamp: time.Now(), // Would need additional sftp commands for real timestamp
|
||||
}
|
||||
|
||||
// Check for subdirectories (simplified - assume all exist)
|
||||
info.HasRoot = true
|
||||
info.HasOpt = true
|
||||
info.HasEtc = true
|
||||
|
||||
backups = append(backups, *info)
|
||||
}
|
||||
|
||||
return backups, nil
|
||||
}
|
||||
|
||||
func (s *HetznerStorageSource) SyncTo(ctx context.Context, host string, targetSSH string, sshKeyPath string, dirs []string) error {
|
||||
// For Hetzner Storage Box, we need to rsync from storage box to target
|
||||
// This requires the target VM to pull from storage box
|
||||
// OR we rsync storage->local->target (two-hop)
|
||||
|
||||
// Option 1: Direct rsync from storage box (requires storage box SSH access from target)
|
||||
// Option 2: Two-hop: storage -> local staging -> target
|
||||
|
||||
// We'll use Option 2 for reliability (target may not have storage box access)
|
||||
stagingDir := fmt.Sprintf("/tmp/restore-staging-%s", host)
|
||||
if err := os.MkdirAll(stagingDir, 0700); err != nil {
|
||||
return fmt.Errorf("failed to create staging dir: %w", err)
|
||||
}
|
||||
defer os.RemoveAll(stagingDir)
|
||||
|
||||
srcPath := fmt.Sprintf("%s:%s/%s/", s.sshAddress(), s.BasePath, host)
|
||||
|
||||
for _, dir := range dirs {
|
||||
// Step 1: Rsync from Hetzner to local staging
|
||||
localStaging := fmt.Sprintf("%s/%s/", stagingDir, dir)
|
||||
if err := os.MkdirAll(localStaging, 0700); err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
pullArgs := []string{
|
||||
"-avz",
|
||||
"--progress",
|
||||
"-e", fmt.Sprintf("ssh -p %d -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null", s.Port),
|
||||
fmt.Sprintf("%s%s/", srcPath, dir),
|
||||
localStaging,
|
||||
}
|
||||
|
||||
pullCmd := exec.CommandContext(ctx, "rsync", pullArgs...)
|
||||
pullCmd.Stdout = os.Stdout
|
||||
pullCmd.Stderr = os.Stderr
|
||||
|
||||
if err := pullCmd.Run(); err != nil {
|
||||
// Directory might not exist, continue
|
||||
continue
|
||||
}
|
||||
|
||||
// Step 2: Rsync from local staging to target
|
||||
var targetPath string
|
||||
switch dir {
|
||||
case "root":
|
||||
targetPath = "/root/"
|
||||
case "opt":
|
||||
targetPath = "/opt/"
|
||||
case "etc":
|
||||
targetPath = "/srv/restore/etc/"
|
||||
default:
|
||||
targetPath = "/" + dir + "/"
|
||||
}
|
||||
|
||||
pushArgs := []string{
|
||||
"-avz",
|
||||
"--progress",
|
||||
"-e", fmt.Sprintf("ssh -i %s -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null", sshKeyPath),
|
||||
localStaging,
|
||||
fmt.Sprintf("%s:%s", targetSSH, targetPath),
|
||||
}
|
||||
|
||||
pushCmd := exec.CommandContext(ctx, "rsync", pushArgs...)
|
||||
pushCmd.Stdout = os.Stdout
|
||||
pushCmd.Stderr = os.Stderr
|
||||
|
||||
if err := pushCmd.Run(); err != nil {
|
||||
return fmt.Errorf("rsync to target failed for %s: %w", dir, err)
|
||||
}
|
||||
}
|
||||
|
||||
return nil
|
||||
}
|
||||
|
||||
func (s *HetznerStorageSource) GetPath(host string) string {
|
||||
return fmt.Sprintf("%s@%s:%s/%s", s.User, s.Host, s.BasePath, host)
|
||||
}
|
||||
|
||||
func (s *HetznerStorageSource) Validate(ctx context.Context) error {
|
||||
// Test SFTP connection
|
||||
cmd := exec.CommandContext(ctx, "sftp", "-P", fmt.Sprintf("%d", s.Port), "-o", "BatchMode=yes", "-o", "ConnectTimeout=10", s.sshAddress())
|
||||
cmd.Stdin = strings.NewReader("ls\nquit\n")
|
||||
|
||||
var stderr bytes.Buffer
|
||||
cmd.Stderr = &stderr
|
||||
|
||||
if err := cmd.Run(); err != nil {
|
||||
return fmt.Errorf("cannot connect to Hetzner Storage Box: %w: %s", err, stderr.String())
|
||||
}
|
||||
|
||||
return nil
|
||||
}
|
||||
169
internal/backup/local.go
Normal file
169
internal/backup/local.go
Normal file
@@ -0,0 +1,169 @@
|
||||
package backup
|
||||
|
||||
import (
|
||||
"context"
|
||||
"fmt"
|
||||
"os"
|
||||
"os/exec"
|
||||
"path/filepath"
|
||||
)
|
||||
|
||||
// LocalSource implements BackupSource for local filesystem
|
||||
type LocalSource struct {
|
||||
BasePath string // e.g., /srv/backups
|
||||
}
|
||||
|
||||
// NewLocalSource creates a new local backup source
|
||||
func NewLocalSource(basePath string) *LocalSource {
|
||||
if basePath == "" {
|
||||
basePath = "/srv/backups"
|
||||
}
|
||||
return &LocalSource{BasePath: basePath}
|
||||
}
|
||||
|
||||
func (s *LocalSource) Name() string {
|
||||
return "local"
|
||||
}
|
||||
|
||||
func (s *LocalSource) List(ctx context.Context, host string) ([]BackupInfo, error) {
|
||||
var backups []BackupInfo
|
||||
|
||||
if host != "" {
|
||||
// List specific host
|
||||
info, err := s.getBackupInfo(host)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
if info != nil {
|
||||
backups = append(backups, *info)
|
||||
}
|
||||
} else {
|
||||
// List all hosts
|
||||
entries, err := os.ReadDir(s.BasePath)
|
||||
if err != nil {
|
||||
return nil, fmt.Errorf("failed to read backup directory: %w", err)
|
||||
}
|
||||
|
||||
for _, entry := range entries {
|
||||
if entry.IsDir() {
|
||||
info, err := s.getBackupInfo(entry.Name())
|
||||
if err != nil {
|
||||
continue // Skip invalid backups
|
||||
}
|
||||
if info != nil {
|
||||
backups = append(backups, *info)
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return backups, nil
|
||||
}
|
||||
|
||||
func (s *LocalSource) getBackupInfo(host string) (*BackupInfo, error) {
|
||||
hostPath := filepath.Join(s.BasePath, host)
|
||||
|
||||
stat, err := os.Stat(hostPath)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
info := &BackupInfo{
|
||||
Host: host,
|
||||
Source: "local",
|
||||
Path: hostPath,
|
||||
Timestamp: stat.ModTime(),
|
||||
}
|
||||
|
||||
// Check for subdirectories
|
||||
for _, dir := range SupportedDirs {
|
||||
dirPath := filepath.Join(hostPath, dir)
|
||||
if _, err := os.Stat(dirPath); err == nil {
|
||||
switch dir {
|
||||
case "root":
|
||||
info.HasRoot = true
|
||||
case "opt":
|
||||
info.HasOpt = true
|
||||
case "etc":
|
||||
info.HasEtc = true
|
||||
}
|
||||
|
||||
// Add directory size
|
||||
size, _ := dirSize(dirPath)
|
||||
info.SizeBytes += size
|
||||
}
|
||||
}
|
||||
|
||||
return info, nil
|
||||
}
|
||||
|
||||
func (s *LocalSource) SyncTo(ctx context.Context, host string, targetSSH string, sshKeyPath string, dirs []string) error {
|
||||
hostPath := filepath.Join(s.BasePath, host)
|
||||
|
||||
for _, dir := range dirs {
|
||||
srcPath := filepath.Join(hostPath, dir) + "/"
|
||||
|
||||
// Check source exists
|
||||
if _, err := os.Stat(srcPath); os.IsNotExist(err) {
|
||||
continue // Skip missing directories
|
||||
}
|
||||
|
||||
// Determine target path
|
||||
var targetPath string
|
||||
switch dir {
|
||||
case "root":
|
||||
targetPath = "/root/"
|
||||
case "opt":
|
||||
targetPath = "/opt/"
|
||||
case "etc":
|
||||
targetPath = "/srv/restore/etc/" // Stage /etc, don't overwrite directly
|
||||
default:
|
||||
targetPath = "/" + dir + "/"
|
||||
}
|
||||
|
||||
// Build rsync command
|
||||
args := []string{
|
||||
"-avz",
|
||||
"--progress",
|
||||
"-e", fmt.Sprintf("ssh -i %s -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null", sshKeyPath),
|
||||
srcPath,
|
||||
fmt.Sprintf("%s:%s", targetSSH, targetPath),
|
||||
}
|
||||
|
||||
cmd := exec.CommandContext(ctx, "rsync", args...)
|
||||
cmd.Stdout = os.Stdout
|
||||
cmd.Stderr = os.Stderr
|
||||
|
||||
if err := cmd.Run(); err != nil {
|
||||
return fmt.Errorf("rsync failed for %s: %w", dir, err)
|
||||
}
|
||||
}
|
||||
|
||||
return nil
|
||||
}
|
||||
|
||||
func (s *LocalSource) GetPath(host string) string {
|
||||
return filepath.Join(s.BasePath, host)
|
||||
}
|
||||
|
||||
func (s *LocalSource) Validate(ctx context.Context) error {
|
||||
if _, err := os.Stat(s.BasePath); err != nil {
|
||||
return fmt.Errorf("backup path not accessible: %w", err)
|
||||
}
|
||||
return nil
|
||||
}
|
||||
|
||||
// dirSize calculates the total size of a directory
|
||||
func dirSize(path string) (int64, error) {
|
||||
var size int64
|
||||
err := filepath.Walk(path, func(_ string, info os.FileInfo, err error) error {
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
if !info.IsDir() {
|
||||
size += info.Size()
|
||||
}
|
||||
return nil
|
||||
})
|
||||
return size, err
|
||||
}
|
||||
40
internal/backup/source.go
Normal file
40
internal/backup/source.go
Normal file
@@ -0,0 +1,40 @@
|
||||
package backup
|
||||
|
||||
import (
|
||||
"context"
|
||||
"time"
|
||||
)
|
||||
|
||||
// BackupInfo contains metadata about a backup
|
||||
type BackupInfo struct {
|
||||
Host string
|
||||
Source string // "local" or "hetzner"
|
||||
Path string // Full path to backup
|
||||
Timestamp time.Time // Last modified time
|
||||
SizeBytes int64 // Total size
|
||||
HasRoot bool // Has /root backup
|
||||
HasOpt bool // Has /opt backup
|
||||
HasEtc bool // Has /etc backup
|
||||
}
|
||||
|
||||
// BackupSource defines the interface for backup sources
|
||||
type BackupSource interface {
|
||||
// Name returns the source name
|
||||
Name() string
|
||||
|
||||
// List returns available backups for a host (or all hosts if empty)
|
||||
List(ctx context.Context, host string) ([]BackupInfo, error)
|
||||
|
||||
// SyncTo syncs backup data to target VM via rsync over SSH
|
||||
// targetSSH is user@host, sshKeyPath is path to private key
|
||||
SyncTo(ctx context.Context, host string, targetSSH string, sshKeyPath string, dirs []string) error
|
||||
|
||||
// GetPath returns the base path for a host's backup
|
||||
GetPath(host string) string
|
||||
|
||||
// Validate checks if backup source is accessible
|
||||
Validate(ctx context.Context) error
|
||||
}
|
||||
|
||||
// SupportedDirs lists directories that can be restored
|
||||
var SupportedDirs = []string{"root", "opt", "etc"}
|
||||
Reference in New Issue
Block a user