Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Apps | Demo | Docs | Install
  1. Cloudron Forum
  2. Announcements
  3. What's coming in Cloudron 9

What's coming in Cloudron 9

Scheduled Pinned Locked Moved Announcements
47 Posts 19 Posters 10.2k Views 21 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • P Offline
    P Offline
    p44
    translator
    wrote on last edited by
    #38

    @girish 👏👏👏💪💪

    1 Reply Last reply
    2
    • girishG Offline
      girishG Offline
      girish
      Staff
      wrote last edited by
      #39

      An update on backup integrity: integrity information is now stored in .backupinfo files in the remote along side the backups . The file contains sha256 of the backup . For tgz, it's a single hash. For rsync, it contains individual hashes. Further, the backupinfo file is signed using a private key and the signature is stored in Cloudron database. Using this setup, we can verify the authenticity and integrity of backupinfo file (i.e it was created by the Cloudron backup system and was not altered) and we can also check the backups itself are not corrupt using the sha256.

      While implementing this, I have also added fileCount and size to each of the backup entries. So, you can get an idea of how many files are in the backup and the total aggregated size of an individual backup.

      Currently, working on the integrity verifier i.e you can click some button to say "Check integrity" and it will verify the integrity of the backup. This is a bit complicated because you have to download the backup to check the integrity...

      P robiR jdaviescoatesJ 3 Replies Last reply
      15
      • girishG girish

        An update on backup integrity: integrity information is now stored in .backupinfo files in the remote along side the backups . The file contains sha256 of the backup . For tgz, it's a single hash. For rsync, it contains individual hashes. Further, the backupinfo file is signed using a private key and the signature is stored in Cloudron database. Using this setup, we can verify the authenticity and integrity of backupinfo file (i.e it was created by the Cloudron backup system and was not altered) and we can also check the backups itself are not corrupt using the sha256.

        While implementing this, I have also added fileCount and size to each of the backup entries. So, you can get an idea of how many files are in the backup and the total aggregated size of an individual backup.

        Currently, working on the integrity verifier i.e you can click some button to say "Check integrity" and it will verify the integrity of the backup. This is a bit complicated because you have to download the backup to check the integrity...

        P Offline
        P Offline
        p44
        translator
        wrote last edited by
        #40

        @girish Well done! This is an additional layer of security.

        We can't wait for the test results and the update rollout 👏💪

        1 Reply Last reply
        5
        • girishG girish

          An update on backup integrity: integrity information is now stored in .backupinfo files in the remote along side the backups . The file contains sha256 of the backup . For tgz, it's a single hash. For rsync, it contains individual hashes. Further, the backupinfo file is signed using a private key and the signature is stored in Cloudron database. Using this setup, we can verify the authenticity and integrity of backupinfo file (i.e it was created by the Cloudron backup system and was not altered) and we can also check the backups itself are not corrupt using the sha256.

          While implementing this, I have also added fileCount and size to each of the backup entries. So, you can get an idea of how many files are in the backup and the total aggregated size of an individual backup.

          Currently, working on the integrity verifier i.e you can click some button to say "Check integrity" and it will verify the integrity of the backup. This is a bit complicated because you have to download the backup to check the integrity...

          robiR Offline
          robiR Offline
          robi
          wrote last edited by
          #41

          @girish said in What's coming in Cloudron 9:

          This is a bit complicated because you have to download the backup to check the integrity...

          Why not have a simpler level 1 integrity light check that is online only, with the file sizes and any files one doesn't need to download for example.

          The level 2 deep check is to download and sift through all files.

          Conscious tech

          1 Reply Last reply
          2
          • C Offline
            C Offline
            CBCUN
            wrote last edited by
            #42

            Level 1 sounds better for our 400GB Nextclouds... 🙂

            1 Reply Last reply
            2
            • girishG girish

              An update on backup integrity: integrity information is now stored in .backupinfo files in the remote along side the backups . The file contains sha256 of the backup . For tgz, it's a single hash. For rsync, it contains individual hashes. Further, the backupinfo file is signed using a private key and the signature is stored in Cloudron database. Using this setup, we can verify the authenticity and integrity of backupinfo file (i.e it was created by the Cloudron backup system and was not altered) and we can also check the backups itself are not corrupt using the sha256.

              While implementing this, I have also added fileCount and size to each of the backup entries. So, you can get an idea of how many files are in the backup and the total aggregated size of an individual backup.

              Currently, working on the integrity verifier i.e you can click some button to say "Check integrity" and it will verify the integrity of the backup. This is a bit complicated because you have to download the backup to check the integrity...

              jdaviescoatesJ Offline
              jdaviescoatesJ Offline
              jdaviescoates
              wrote last edited by
              #43

              @girish said in What's coming in Cloudron 9:

              This is a bit complicated because you have to download the backup to check the integrity...

              @robi said in What's coming in Cloudron 9:

              Why not have a simpler level 1 integrity light check that is online only, with the file sizes and any files one doesn't need to download for example.

              Yeah, couldn't Level 1 "Check integrity" just essentially be "do the hashes match"? (although presumably they always will otherwise the backup wouldn't be marked as having successfully completed? 🤷 )

              And a Level 2 "Full Integrity Check" (this will take a Long Time as it requires downloading the full back-up to ensure..."

              🤷

              Either way, all sounds like great progress, thanks!

              I use Cloudron with Gandi & Hetzner

              1 Reply Last reply
              1
              • girishG Offline
                girishG Offline
                girish
                Staff
                wrote last edited by girish
                #44

                The idea was to check for bitrot and give a good feel about the backup. Just checking the sizes doesn't mean much. AFAIK, file metadata is also stored in different sectors of the disk compared to the real data. So accessing file sizes and them matching doesn't mean much. (For tgz, there is also only one file size to check).

                1 Reply Last reply
                0
                • C Offline
                  C Offline
                  CBCUN
                  wrote last edited by
                  #45

                  Hello @girish ,

                  May I kindly ask when version 9 is expected to be released?

                  humptydumptyH 1 Reply Last reply
                  1
                  • C CBCUN

                    Hello @girish ,

                    May I kindly ask when version 9 is expected to be released?

                    humptydumptyH Offline
                    humptydumptyH Offline
                    humptydumpty
                    wrote last edited by
                    #46

                    @CBCUN Any minute now..
                    SussaGIF.gif

                    1 Reply Last reply
                    4
                    • girishG Offline
                      girishG Offline
                      girish
                      Staff
                      wrote last edited by
                      #47

                      There's a final round of UI testing going on (https://git.cloudron.io/platform/box/-/issues/847)

                      1 Reply Last reply
                      7
                      Reply
                      • Reply as topic
                      Log in to reply
                      • Oldest to Newest
                      • Newest to Oldest
                      • Most Votes


                      • Login

                      • Don't have an account? Register

                      • Login or register to search.
                      • First post
                        Last post
                      0
                      • Categories
                      • Recent
                      • Tags
                      • Popular
                      • Bookmarks
                      • Search