I have one more thought about your issue. Your solution unfortunately is not really practical and your repo can be attacked anyway.
Thx to rustic no lock files operations you can create WORM (write once read many times) repository using your locked GCS bucket. But it also means you will never be able do delete anything (forget won’t work). Does it make your repo safe? Nope. As after 60 days in your example attacker can delete older files - effectively crippling all repo. You could only avoid it if your lock has no expiry. It means that your repo will grow forever… or is only safe for 60 days… It is not good IMO.
I think this thread is not the best place to discuss it further. I suggest you open new thread. I have some ideas how to implement it using any backup program.
Testing a full backup with rustic.
Called 2 times rustic backup and this lead to a full backup, but every time the backup is done fully, not only changed files, as you can see from the snapshot lists. (and it takes 20 minutes every time):
@guestisp First, please use a cache with a remote backend (remove the no-cache = true line). It could be that your backup is just slow bacause you don’t use a cache.
Can you give the output of rustic snapshots --long? This should show us what rustic really did here…
No - never got a bug report of this kind. In general bugs which might lead to repository inconsistencies or even data loss are always rated highes priority and would be fixed very soon.
But so far almost all bugs were about rustic not doing things as expected, but not about critical stuff with respect to repository or data integrity.
Besides the already announced milestones - many remote storages natively supported and the new webdav command - there are several other enhancements, e.g.:
New options for backup: --custom-ignorefile, --skip-identical-backup, --no-scan, --quiet.
Allow better and more configuration of repository storage via the config file.
Even more memory reduction in case of large repositories.
New option prune --early-delete-index (which is like restic prune --unsafe-recover-no-free-space)
New option ls --numeric-id (in combination with --long)
FYI, we have collected an in-depth feature comparison between restic and rustic (general features and detailed feature-compare for important commands):
Storage backends… this one is tricky and I am not sure myself what is the best way to compare it.
Let’s say S3 - both restic and rustic support it out of the box. “via opendal” for rustic suggests that some extra software is needed which is not true. It is just technical implementation detail. restic I bet is using some 3rd party library here as well.
rustic supports much more backends without need to install and configure additional software. But both support rclone for whatever this handy utility supports.
From end user perspective this is what I am interested about - what I can use for repo without anything extra. And with rustic for example I can use onedrive when with restic I would have to install and configure rclone