Restic Backup Worker¶
restic 0.19.1 on Ubuntu 24.04 LTS, set up as a backup worker. A daily timer backs up the folders you choose into an encrypted restic repository, with scripts to check the repository and restore safely. The repository starts on the instance's own disk, and you can move it to your own Amazon S3 bucket. This page covers what is on the image, its defaults and how billing works.
Launch on AWS Marketplace Getting started
What is on the image¶
- restic 0.19.1, the official Linux binary, at
/usr/local/bin/restic. - A daily backup timer,
restic-backup.timer, that runsrestic-backup.serviceas the unprivilegedresticuser. - Scripts in
/opt/sushi/bin:restic-backup.sh,restic-check.shandrestic-restore.sh. - First-boot setup that creates this instance's repository password and initializes a local encrypted repository. Nothing secret is baked into the image.
- A walkthrough script,
/opt/sushi/docs/demo.sh.
Defaults¶
| Setting | Default |
|---|---|
| What is backed up | /var/lib/restic/include |
| Repository | /var/lib/restic/repo, on the instance's root volume |
| Schedule | Daily, with a random delay of up to 15 minutes |
| Retention | None. Snapshots are kept until you remove them. |
| Network ports | None. restic does not listen on any port. |
| AWS access | None until you point the repository at your own S3 bucket |
Recommended instance¶
t3.medium with an encrypted gp3 root volume of at least 16 GiB and at least
2 GiB of memory. Size the volume for your data, the repository and restic's
cache if the repository stays local. No inbound security group rules are
needed: you connect with AWS Systems Manager Session Manager.
Billing¶
You pay an hourly software fee while the instance runs, as shown in the offer terms on the listing. AWS bills EC2, EBS and data transfer separately, and S3 storage and requests if you use an S3 repository.
Where to go next¶
- Getting started: subscribe, launch, connect and make your first backup and restore.
- Configuration: what to back up, S3 repositories, retention and the schedule.
- Operations: security model, the repository password, logs, updates and support.
- Troubleshooting: common errors and how to fix them.
Upstream project¶
restic is open source under the BSD-2-Clause license. See the restic documentation for commands and repository types. Software Sushi packages the image; the restic project does not endorse or support it.