Proxmox, known for developing Proxmox Virtual Environment and Proxmox Mail Gateway, has released version 3.1 of the Proxmox Backup Server distribution, which is presented as a complete solution for backing up and restoring virtual environments, containers, and server components. The installation ISO image is available for free download. Distribution-specific components are released under the AGPLv3 license. Both a paid Enterprise repository and two free repositories with different levels of update stabilization are available for installing updates.
The system part of the distribution is based on the Debian package base and OpenZFS. The software stack for managing backups is written in Rust and supports incremental backups (only changed data is transferred to the server), deduplication (only one copy is kept if duplicates exist), compression (ZSTD is used), and encryption of backups. The system is designed based on a client-server architecture – Proxmox Backup Server can be used both for working with local backups and as a centralized server for backing up data from different hosts. It provides modes for fast selective recovery and data synchronization between servers.
Proxmox Backup Server supports integration with Proxmox VE for backup of of virtual machines and containers. Backup management and data recovery are conducted through a web interface. There is an option to restrict user access to their data. All traffic transmitted from clients to server is encrypted using AES-256 in GCM mode, and backups are transmitted already encrypted using asymmetric encryption with public keys (encryption is performed on the client side, so compromising the server with backups will not lead to data leakage). The integrity of the backups is checked using SHA-256 hashes.
In the new release:
- Synchronized with the Debian 12.2 package base. The Linux kernel has been updated to version 6.5. The ZFS file system implementation has been updated to OpenZFS 2.2.0, incorporating fixes from the 2.2.2 branch.
- Support for verified boot in UEFI Secure Boot mode has been added, ensuring that only verified components with correct digital signatures are used during boot. A shim boot loader, signed with a digital signature recognized by most hardware with UEFI, is provided for UEFI Secure Boot.
- Support for local synchronized jobs (sync-jobs) has been added, allowing the organization of snapshot copying with backups between multiple local storage systems. Practically, this new mode enables configurations where backups are initially saved to fast storage and then transferred to slower storage for maintaining a long-term archive.
- Automatic replacement of HTTP connections with HTTPS has been ensured.
- The backup storage capabilities for tape drives have been expanded. Support has been added for streamers compatible with the LTO 9 (Linear Tape-Open) standard. Compatibility has been improved with tape libraries that do not support DVCID for transmitting manufacturer and model information, such as Qualstar. The graphical interface for recovery from tape backups has been enhanced.
- A disk cleanup function has been added to the Storage/Disks section in the web interface.
- Support for two-factor authentication has been expanded.
Source: opennet.ru
