How I accidentally wiped my server by having a typo in my Nextcloud docker config

Submitted ⁨⁨11⁩ ⁨months⁩ ago⁩ by ⁨Moonrise2473@feddit.it⁩ to ⁨selfhosted@lemmy.world⁩

So, I moved my nextcloud directory from a local SATA drive to a NFS mount from a nvme array on a 10G network

“I just need to change /docker/nextcloud to /mnt/nfs/nextcloud in the docker-compose.yml, what’s the issue, i do it live” - i tell myself

So i stop the container, copy /docker/nextcloud to /mnt/nfs/nextcloud, then edit the docker-compose.yml… and… because I’m doing it during a phone call without paying too much attention i change the main directory to /docker

I rebuild the container and I immediately hear a flood of telegram notifications from my uptime-kuma bot… oh oh…

Looks like the nextcloud docker has an initialization script that if it doesn’t find the files in the directory, it will delete everything and install a fresh copy of nextcloud… so it deleted everything on my server

Luckily i had a very recent full borg backup and i’m restoring it (i kinda love-hate borg, i always forget the restore commands when in panic and the docs are a bit cryptic for me)

Lessons learned:

always double check everything
offsite backups are a must (if i accidentally wrote / as path, i would have lost also the borg backups!)
learn how to use and schedule filesystem snapshots, so the recovery wouldn’t take ages like it’s taking right now (2+ hours and i’m not even half way…)

source

Comments

Sort:hotnew top

Octavius@lemmy.world ⁨11⁩ ⁨months⁩ ago
Test your backup/restore procedures regularly. An untested backup is as good as no backup.
source
- Moonrise2473@feddit.it ⁨11⁩ ⁨months⁩ ago
  yes i should keep a text document with the recovery plan, with all the commands that i have to type, on my nextcloud. Oh, wait… :D
  
  source
plague_sapiens@lemmy.world ⁨11⁩ ⁨months⁩ ago
Some years ago, being a linux noob, I have created a VM to setup aBitcoin Lightning node. The blockchain is huge and my idea was to passthrough a 2 TB (/dev/sdc). Had to restart my homeserver because of some hoste settings I’ve changed. Didn’t see that sdc changed to sda and sdb (8TB fully encrpyted drive with my smb shares on it(seperate VM) to sdc. So far no problem. Because I didnt’t knew that the device names changed, I started the initilization process which formats the passthrouged HDD. Oh boy, when I heared the 8TB HDD spin up and doing it’s thing, the 2 TB HDD was still in spin-down, I panicked and shut down the server. End of story, 8 TB data was unrecoverable. Never use /dev/sdX device paths, use UUIDs, they exist for a reason. I now know why xD

source
- Bakkoda@sh.itjust.works ⁨11⁩ ⁨months⁩ ago
  
  Never use /dev/sdX device paths, use UUIDs. They exist for a reason.>
  
  This is absolutely fantastic advice.
  
  source
  - yiliu@informis.land ⁨11⁩ ⁨months⁩ ago
    You can label your devices. When formatting, do mkfs.ext4 -l my-descriptive-name /dev/whatever. Now, refer to it exclusively by /dev/disk/by-label/my-descriptive-name. Much harder to mix up home and swap than sdc2 and sdc3 (or, for that matter, two UUIDs).
    
    source
  - plague_sapiens@lemmy.world ⁨11⁩ ⁨months⁩ ago
    That and permissions are likely the main problem, dependencies are the next xD
    
    source
- AnUnusualRelic@lemmy.world ⁨11⁩ ⁨months⁩ ago
  We all went through some educational episodes like yours.
  
  Wisdom has to be earned the hard way. If we’re lucky, we’re just given a good scare.
  
  source
  - plague_sapiens@lemmy.world ⁨11⁩ ⁨months⁩ ago
    Wise words!
    
    source
Moonrise2473@feddit.it ⁨11⁩ ⁨months⁩ ago
If anyone else is reading this in the future:

After 8 hours the backup is restored (of course i stored it on a wd green…) but then nextcloud gave error 500 with lots of errors like:

Doctrine\DBAL\Exception: Failed to connect to the database: An exception occurred in the driver: SQLSTATE[HY000] [1129] Host ‘172.26.0.1’ is blocked because of many connection errors; unblock with ‘mariadb-admin flush-hosts’ in /var/www/html…

DON’T PANIC. You didn’t screw up the restore!

Just access your database with heidisql or your favorite tool and query FLUSH HOSTS;

source
- WhyAUsername_1@lemmy.world ⁨11⁩ ⁨months⁩ ago
  
  if any one else reading this in the future
  
  My guy just documenting for his future self, if it ever happens again.
  
  Haha
  
  Been there 🤣
  
  source
  - computergeek125@lemmy.world ⁨11⁩ ⁨months⁩ ago
    Can’t tell you how many times I’ve googled things and found my own posts and bug reports.
    
    source
lemmyvore@feddit.nl ⁨11⁩ ⁨months⁩ ago
Welp that’s it, I’m never using Nextcloud.

source
- quackers@lemmy.blahaj.zone ⁨11⁩ ⁨months⁩ ago
  yeah thats what im taking away from this too… you dont just rm -rf shit in any application without some good ass verification from the user
  
  source
- anzo@programming.dev ⁨11⁩ ⁨months⁩ ago
  OP said he’s been using a Docker image that it’s “official by Docker”, and not the AIO image official by Nextcloud. The issue here is a random contributor on GitHub’s docker organization. Afaik those images are not carefully tested, docker, as many floss organizations rely primarily on contributors, and plenty of these are amateurs or students trying to build a profile…
  
  source
  - lemmyvore@feddit.nl ⁨11⁩ ⁨months⁩ ago
    On an unrelated note: yeah it’s confusing that the official Nextcloud AIO docker image is not on Docker Hub and what you get when you search for nextcloud is a “Docker official image” that’s actually community-maintained. But as I said in my other comment in this particular case the problem exists in both images.
    
    source
  - lemmyvore@feddit.nl ⁨11⁩ ⁨months⁩ ago
    The script that killed OP’s files (entrypoint.sh) also exists in the official Nextcloud AIO image, and the offending line is there as well:
    
    rsync -rlD --delete --exclude-from=/upgrade.exclude /usr/src/nextcloud/ /var/www/html/
    
    I believe the –delete option is the problem here, it will delete all files in the target dir that aren’t in the source dir.
    
    Ironically, the script even has a directory_empty function it could use to double-check the target dir, but it doesn’t use it for this particular dir. 😆
    
    So, bottom line, a Nextcloud install will wipe out the target dir if you’re not careful and I stand by my decision to not touch it with a ten-foot pole.
    
    source
4am@lemm.ee ⁨11⁩ ⁨months⁩ ago
Always run prod services in a VM or LXC

Snapshot before touching anything

Fucking up in EZ mode just becomes an hour wasted.

Having full backups is good too, of course.
source
- nik282000@lemmy.ca ⁨11⁩ ⁨months⁩ ago
  I ham-fistedly use LXC to keep my services separate and out of dependancy hell, but would you go as far as putting docker run services in them as well just to keep them away from the host?
  
  source
  - LufyCZ@lemmy.world ⁨11⁩ ⁨months⁩ ago
    I do that, each separate docker stack has its own unprivileged LXC as a base
    
    source
    -> View More Comments
- Pete90@feddit.de ⁨11⁩ ⁨months⁩ ago
  I’m currently setting up proxmox just for that. Since I’m still quite new to self hosting, I fuck up from time to time. Deleted my root file system once. Updated Nginx proxy manager and took down my services with it. I once fucked up iptables, scary stuff.
  
  In the future, it’ll be one click and everything works again. It’s so easy on novices, once you get everything going.
  
  source
guitarsarereal@sh.itjust.works ⁨11⁩ ⁨months⁩ ago
Come back after you rm -rf / or remove glibc, you whipper-snapper! shakes cane

source
- Pete90@feddit.de ⁨11⁩ ⁨months⁩ ago
  I did that when I started working with Linux. I thought / meant the current directory, boy was I wrong!
  
  source
  - guitarsarereal@sh.itjust.works ⁨11⁩ ⁨months⁩ ago
    Hey, it can be the current directory!
    
    source
TORFdot0@lemmy.world ⁨11⁩ ⁨months⁩ ago
I did the exact same thing 3 or so years ago. Thankfully I already had a backup but it was a bit nerve wracking to log in to next cloud and it was empty and then browsing the mount and having it also be empty

source
- Moonrise2473@feddit.it ⁨11⁩ ⁨months⁩ ago
  there’s user error in this case, but imho it’s a bug that the initialization scripts deletes hundreds of gb without any warning or an override command. Files weren’t even owned by www-data! Ok to copy new install files, but not wipe clean…
  
  if one day some web exploit manages to delete/rename/move the file that the script detects as “installation done”, it could lead to a worldwide massive data loss when the server reboots
  
  source
TechAdmin@lemmy.world ⁨11⁩ ⁨months⁩ ago
Was it the official container image or 3rd party? Whichever it was, they should get notified so that init script can get fixed to prevent similar happening to others.

source
- Moonrise2473@feddit.it ⁨11⁩ ⁨months⁩ ago
  Official image
  
  source
- lemmyvore@feddit.nl ⁨11⁩ ⁨months⁩ ago
  3rd party, but the official image will do the same (rsync --delete). The 3rd party project has an issue open for it. I couldn’t find a similar issue for the AIO image (but maybe I didn’t search for the right thing).
  
  source
TelegramDev@lemm.ee ⁨8⁩ ⁨months⁩ ago
I was ask who is the best Telegram Bot Developer, the truth is I also did not know but I meet somebody last 2 weeks and he build something for me. You can also read about him here.

I wonder if there is another good developer like this man, young and wise ):___

source
piet@feddit.de ⁨11⁩ ⁨months⁩ ago
Using snapshots on a copy-on-write filesystem such as zfs or btrfs is actually a very good idea. There exist auto-snapshot services that are quite easy to set up and take snapshots with different granularity and maximum number of kept snapshots e.g. every 15m, hour, day, week.

Please note that even snapshots and RAID never replace an off-site backup. When setting up Nextcloud I was even so paranoid and configured the backups to be pulled by the remote machine where they will be stored (and the Nextcloud machine does not even have credentials to access it).

source
Decronym@lemmy.decronym.xyz ⁨11⁩ ⁨months⁩ ago
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:

Fewer Letters More Letters

IP Internet Protocol

LXC Linux Containers

RAID Redundant Array of Independent Disks for mass storage

[Thread #273 for this sub, first seen 11th Nov 2023, 02:20] [FAQ] [Full list] [Contact] [Source code]

source
JC1@lemmy.ca ⁨11⁩ ⁨months⁩ ago
The worst I did is wanting to replace the WAN interface on my Opnsense router. I didn’t check properly and replaced my LAN interface instead, rendering the router inaccessible and fucking up my network. Luckily, its a VM on proxmox that was still accessible from IP. I just opened a console to the VM and found out that the whole configuration is in a file. Also, a copy is saved with every configuration change. I just found the right one to restore and voilà! My network was back up.

source
dartanjinn@lemm.ee ⁨11⁩ ⁨months⁩ ago
This is why I use OMV and Nextcloud. A daily backup job duplicates everything to OMV. A weekly OMV backup job goes into Skiff drive. Fool me once…

source
raldone01@lemmy.world ⁨11⁩ ⁨months⁩ ago
Borg supports a remote append only mode but you need a borg client on the remote machine.

source

Fewer Letters	More Letters
IP	Internet Protocol
LXC	Linux Containers
RAID	Redundant Array of Independent Disks for mass storage