backup – Page 7 – Türker Yıldırım

Binlogs are the difference between nightly and point-in-time

NoteMarch 26, 20192 min read

A nightly dump means the worst case is losing a day, and a day of orders is not an acceptable answer to anybody outside engineering. The binlogs have…

ionice for the backup that starves everything else

NoteFebruary 28, 20191 min read

A nightly dump reading the entire database saturates the disk queue, and every application query behind it waits — so the backup window is also a latency incident…

Restoring to a scratch database on a schedule, automatically

NoteDecember 12, 20182 min read

The restore is the part that fails, and finding that out during an incident is the worst possible moment to discover the dump has been missing a table…

Deleting a user is harder than creating one

Deep diveAugust 16, 20189 min read

The delete request arrived and the row was the easy part. Foreign keys model structure, not ownership — and the person is in six other places.

Retention as a scheduled job, not a policy document

NoteJuly 4, 20182 min read

A retention policy that exists only in a document is a statement of intent, and the data is still there in five years. The legal hold check is…

Wildcard certificates, and the DNS challenge

Deep diveMarch 28, 20189 min read

ACME v2 landed in March and wildcards need a different proof. The certificate is the easy part; the API token that can rewrite your zone is not.

What the regulation actually asks of a schema

Deep diveMarch 24, 201815 min read

The deadline is in May and the work is not a cookie banner. An inventory first, because everything else depends on knowing which tables hold what.

A logrotate config that does not lose the last hour

NoteFebruary 22, 20182 min read

Rotating a log by renaming the file leaves the writing process holding a handle to the renamed inode, so it keeps writing to a file nobody is looking…

A backup you have not restored is not a backup

NoteFebruary 15, 20182 min read

A nightly dump that has run successfully for two years proves that the dump command exits zero, which is a different claim from the data being recoverable. The…

Alerting that people do not learn to ignore

Deep diveDecember 13, 201710 min read

340 alerts in a month, four of which mattered. An alert channel nobody reads is the same as no alerting, and the cause is alerting on causes.