Adding an Immutable Cloud Location

This task configures an immutable cloud bucket location for archive-to-cloud.

An immutable bucket is one that retains backups in cloud storage for a period specified by the KEEP UNTIL attribute of the backup. An immutable cloud location requires two buckets that must be created in advance using the OCI Console, the ZFS console, or the OCI command line interface. The cloud buckets are:

  • Regulatory Compliance Bucket has retention rule set and locked.

  • Temporary Metadata Bucket without retention rules.

The retention rules apply to the whole bucket. Therefore, it should not use automatic lifecycle rules triggering Delete. The recommendation is one database per immutable cloud location.

  1. Configure the database client with a Recovery Appliance and take a backup on the client.
  2. Install OKV endpoint on the Recovery Appliance.
  3. Create two (2) standard buckets using the OCI console or OCI-CLI.

    The target bucket is used to store the backups. The second bucket is used for temporary metadata during backup operations.

  4. Using the OCI console or OCI-CLI, create a retention rule on the target bucket to make content immutable for the desired period of time.

    No retention rule is required to be set on the temporary metadata bucket.

  5. Use RACLI to create a cloud_location using these buckets specifying the following parameters

    • --immutable

    • --bucket <target bucket with retention rule>

    • --temp_metadata_bucket <temporary metadata bucket>

    To store immutable backups in the object storage archive tier, also use these parameters.

    • --enable_archive=true

    • --archive_after_backup=1:DAYS

    • --retain_after_restore=24:HOURS 

    [root@myComputeNodeX ~]# racli add cloud_location 
--cloud_user=<CLOUD_USER_NAME> 
--host=https://<OPC_STORAGE_LOCATION> 
--bucket=<OCI_BUCKET_NAME> 
--proxy_port=<HOST_PORT> 
--proxy_host=<PROXY_URL> 
--proxy_id=<PROXY_ID>
--proxy_pass=<PROXY_PASS>
--streams=<NUM_STREAMS> 
[--enable_archive=TRUE]
--archive_after_backup=<number>:[YEARS | DAYS]
[--retain_after_restore=<number_hours>:HOURS]
--import_all_trustcert=<X509_CERT_PATH>
--immutable 
--temp_metadata_bucket=<metadata_bucket> 
[--enable_archive=true --archive_after_backup=2:DAYS --retain_after_restore=8:HOURS]
  6. Create SBT_JOB_TEMPLATE for archive to cloud.