Restore del backup di Proxmox Backup Client

#!/bin/bash

# Exit immediately if a command exits with a non-zero status, or if an unset variable is referenced
set -Eeuo pipefail

########################################
# CONFIGURATION
########################################

# Encrypted configuration file
readonly ENCRYPTED_CONFIG="pve01-config.gpg"
# Temporary decrypted config path (RAM disk)
readonly DECRYPTED_CONFIG="/dev/shm/pve01-config-$(date +%s).tmp"

########################################
# FUNCTIONS
########################################

# Cleanup temporary decrypted config file
cleanup() {
    if [ -f "$DECRYPTED_CONFIG" ]; then
        # Overwrite file with zeros and delete file
        shred -uz "$DECRYPTED_CONFIG" 2> /dev/null
    fi
    
    # Kill gpg-agent to avoid caching issues
    gpgconf --kill gpg-agent 2> /dev/null
}

# Check for required dependencies

check_dependencies() {
    for cmd in gnupg proxmox-backup-client tree; do
        if ! command -v "$cmd" &> /dev/null; then

        CODENAME=$(. /etc/os-release && echo "$VERSION_CODENAME")
        REPO_FILE="/etc/apt/sources.list.d/pbs-client.list"
        KEY_FILE="/etc/apt/trusted.gpg.d/proxmox-release-${CODENAME}.gpg"

        if [ ! -f "$REPO_FILE" ]; then
            wget "https://enterprise.proxmox.com/debian/proxmox-release-trixie.gpg" -O "$KEY_FILE"
            echo "deb http://download.proxmox.com/debian/pbs-client trixie main" > "$REPO_FILE"
            apt update
        fi

        apt -y install gnupg proxmox-backup-client tree

        fi
    done
}

# Load configuration from decrypted file
load_config() {
    source "$DECRYPTED_CONFIG"
    export PBS_PASSWORD
}

# Unmount the current mount point if mounted
unmount_snapshot() {
    echo -e "\nUnmounting $PBS_MOUNT_POINT"
    find /mnt/pbs_restore -mindepth 1 -maxdepth 1 -type d -exec umount {} \; || true
}

# List available snapshots
list_snapshots() {
    echo -e "\nFetching snapshots..."
    proxmox-backup-client snapshot list --repository "$PBS_REPOSITORY" --ns "$PBS_NAMESPACE"

}

# Mount the selected snapshot
mount_snapshot() {
    local snapshot_name="$1"
    local pxar_list="etc.pxar pve-cluster.pxar pve-manager.pxar pve.pxar"
    export PBS_ENCRYPTION_PASSWORD

    echo -e "\nMounting snapshot...\n"

    for pxar_name in $pxar_list; do
            local target="$PBS_MOUNT_POINT/${pxar_name%.pxar}"
            mkdir -p "$target"
    
            echo "Mounting $pxar_name -> $target"
    
            proxmox-backup-client mount \
                "$snapshot_name" \
                "$pxar_name" \
                "$target" \
                --repository "$PBS_REPOSITORY" \
                --ns "$PBS_NAMESPACE" \
                --keyfile <(echo "$PBS_ENCRYPTION_KEY") 2> /dev/null
                # Pass the encryption key to the client.
                # <(...) creates a virtual temporary file
                # containing the value of the variable PBS_ENCRYPTION_KEY.
                # This way, there is no need to save the key to disk.
    done

    if [ $? -eq 0 ]; then
        echo -e "\nSnapshot mounted successfully at:\n\n$PBS_MOUNT_POINT"
    else
        echo -e "\nError: Failed to mount the snapshot."
        exit 1
    fi
}

# Show the entries of the mount point
show_mount_contents() {
    echo -e "\n---------------------------------------------"
    echo "Entries at $PBS_MOUNT_POINT:"
    echo "---------------------------------------------"
    sudo tree -L 2 $PBS_MOUNT_POINT | head -n 10
    echo "[...]"
}

########################################
# MAIN SCRIPT into a subshell
########################################

(

    # Set trap for cleanup on exit or error
    trap cleanup EXIT ERR SIGINT SIGTERM

    clear

    # Elevate to root if not already
    if [[ $EUID -ne 0 ]]; then
        echo "Root privileges required. Re-running with sudo..."
        exec sudo --preserve-env=HOME "$0" "$@"
    fi

    # Check for required dependencies
    check_dependencies

    # Decrypt the config file temporarily
    echo "Decrypting configuration file (you will be prompted for the GPG password)..."
    gpg --decrypt --output "$DECRYPTED_CONFIG" "$ENCRYPTED_CONFIG" 2>/dev/null
    if [ $? -ne 0 ]; then
        echo "Error: Failed to decrypt the configuration file. Wrong password?"
        exit 1
    fi

    # Load configuration
    load_config

    # Unmount if already mounted
    unmount_snapshot

    # List available snapshots
    list_snapshots

    # Prompt user for snapshot name
    read -p "Enter the snapshot name to mount: " SNAPSHOT_NAME
    if [ -z "$SNAPSHOT_NAME" ]; then
        echo -e "Error: No snapshot name provided."
        exit 1
    fi

    # Check if mount point exists, if not create it
    if [ ! -d "$PBS_MOUNT_POINT" ]; then
        echo "Creating $PBS_MOUNT_POINT directory..."
        mkdir -p "$PBS_MOUNT_POINT"
    fi

    # Mount the selected snapshot
    mount_snapshot "$SNAPSHOT_NAME"

    show_mount_contents

)

gpg -c --cipher-algo AES256 /path/to/config

PBS_REPOSITORY=''
PBS_PASSWORD=''
PBS_FINGERPRINT=''
PBS_ENCRYPTION_PASSWORD=''
PBS_ENCRYPTION_KEY=''
ID=''
PBS_NAMESPACE=''
PBS_MOUNT_POINT='/mnt/pbs_restore'

systemctl stop pve-cluster
systemctl stop pvedaemon
systemctl stop pveproxy
systemctl stop pvestatd

cp /var/lib/pve-cluster/config.db /var/lib/pve-cluster/config.db.bak