Questions
How Vaultwitness works on your servers.
Which backup tools are supported?
Proxmox Backup Server, restic and Borg Backup (1.2 and 1.4). restic works with any backend it supports — local disk, SFTP, REST server, S3 and other clouds — whether it runs from your own scripts or through resticprofile or autorestic. Borg works with local and ssh repositories, from your own scripts or through borgmatic (how it works with Borg). In every case the agent reads the configuration and finds the repositories by itself; both tools show side by side in one dashboard.
Does it work with Proxmox Backup Server?
Yes. Install one agent on the Proxmox Backup Server and give it a read-only token — the dashboard shows the commands. It finds every datastore and lists each VM, container and host it backs up by the machine's own name. A VM's disk is opened read-only and a real file is read from the guest's filesystem; container and host backups are read the same way. The results of Proxmox Backup Server's own verify jobs are shown too. How it works with Proxmox.
Do I need to install anything on the VMs?
No. The agent on the Proxmox Backup Server checks the backups stored there. For the license, each VM, container or host backed up counts as one server; the backup server itself doesn't.
What about encrypted Proxmox backups?
Without its encryption key a backup can't be read, so it is shown as not testable — never as passed. Proxmox Backup Server's verify jobs still check the data, and their results are shown.
Which systems does it run on?
Linux with systemd: Debian, Ubuntu, RHEL, Rocky Linux, AlmaLinux and other current distributions. The dashboard server runs on x86-64 (amd64). The agents run on x86-64 and on ARM64, such as a Raspberry Pi or an ARM-based NAS. The programs are single static files, so no extra packages are needed. Windows and macOS are not supported yet.
Will the checks slow my servers down?
The agent runs at low CPU and disk priority, one check at a time, at a start time you choose. The heavy full data re-read can be spread over many nights: restic re-reads a part each night, Borg re-reads everything once in that period.
Does a restore test cost money on S3 or other clouds?
A restore test downloads one small file — pennies at most. A full data re-read downloads everything, so the dashboard warns you before you turn it on for a cloud repository.
Does it run as root?
The agent does: restic and Borg keys are usually readable only by root. It runs at low priority, only reads, and never opens a port. The dashboard server runs as its own unprivileged user.
Does it need internet access?
No. The dashboard, agents and updates all stay inside your network. A license can be activated with a file on a machine that has no internet.
Questions about licenses and payment are on the pricing page. Anything else: [email protected].