Proposed changes to backup and archiving

Current systems

We need more backup space as workstation disks are getting larger and we have acquired several more clusters. We currently have about 3Tb split over three servers. The current system only lets computer officers do restores; it would be an improvement if people could access their own backups. It would also be very useful to be able to keep some backups for longer than the current two weeks.

Our existing archive server is not user accessible. It is unreliable, and has no free space.

New backup system

I want to buy a new backup server with at least 6Tb of space, move the backups onto that, and make them user-accessible. We would have to keep one of the old backup servers running for technical reasons: some of the older machines are configured in such a way that user accessible backups of those machines would be insecure. Eventually this problem will go away as machines are reinstalled.

There is one potential disadvantage to this proposal: having user-restorable backups means that files which are set to be 'world-readable' become readable by anyone in the entire sector, even if they don't have a user account on the machine the original file was on. Anyone who doesn't want this can protect themselves by changing their file permissions to no longer be world-readable. However the default is to have world-readable files, and people forget to change them. If we think this will cause problems then we would have to change the default.

The cost of such a new server would be XXX

New archive system

The other two old backup servers would immediately be free for reuse. I would make those into a new archive system. This would let us clear old homespaces off clusters and workstations as soon as people leave while keeping a read-only copy available. Assuming people set their file permissions appropriately on the original data, the rest of their research group will be able to access it on the archive server. The same issue with world-readable files arises as with the backup server.

The data would be read only so we don't need regular backups of it: the two servers would each contain a copy and be sited a long way apart. Software would regularly check to see if the copies were identical in order to pick up any problems.

There will have to be some sort of time limit on how long we keep the archive data otherwise we will just run out of space again. This might vary from account to account. When the date comes round the leader of the group would be told, and would have a chance to extend the date. I would rather leave it to the leader of the group than the owner of the data because, by the time the date comes round (I would imagine at least a year after the owner leaves) I will probably not have reliable contact details for them.