docker/ucp backupEstimated reading time: 3 minutes
This topic applies to Docker Enterprise.
The Docker Enterprise platform business, including products, customers, and employees, has been acquired by Mirantis, inc., effective 13-November-2019. For more information on the acquisition and how it may affect you and your business, refer to the Docker Enterprise Customer FAQ.
Create a backup of a UCP manager node.
docker container run \ --rm \ --interactive \ --name ucp \ --log-driver none \ --volume /var/run/docker.sock:/var/run/docker.sock \ docker/ucp \ backup [command options] > backup.tar
This command creates a tar file with the contents of the volumes used by
this UCP manager node, and prints it. You can then use the
restore command to
restore the data from an existing backup.
To create backups of a multi-node cluster, you only need to back up a single manager node. The restore operation will reconstitute a new UCP installation from the backup of any previous manager.
The backup contains private keys and other sensitive information. Use the
--passphraseflag to encrypt the backup with PGP-compatible encryption or
--no-passphraseto opt out (not recommended).
If using the
--fileoption, the path to the file must be bind mounted onto the container that is performing the backup, and the filepath must be relative to the container’s file tree. For example:
docker run <other options> --mount type=bind,src=/home/user/backup:/backup docker/ucp --file /backup/backup.tar
If you are installing UCP on a manager node with SELinunx enabled at the daemon
and operating system level, you will need to pass
label=disable in to your install command. This flag will disable SELinux
policies on the installation container. The UCP installation container mounts
and configures the Docker Socket as part of the UCP installation container,
therefore the UCP installation will fail with a permission denied error if you
fail to pass in this flag.
FATA unable to get valid Docker client: unable to ping Docker daemon: Got permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Get http://%2Fvar%2Frun%2Fdocker.sock/_ping: dial unix /var/run/docker.sock: connect: permission denied - If SELinux is enabled on the Docker daemon, make sure you run UCP with "docker run --security-opt label=disable -v /var/run/docker.sock:/var/run/docker.sock ..."
An installation command for a system with SELinux enabled at the daemon level would be:
docker container run \ --rm \ --interactive \ --name ucp \ --security-opt label=disable \ --volume /var/run/docker.sock:/var/run/docker.sock \ docker/ucp \ backup [command options] > backup.tar
||Enable debug mode|
||Name of the file to write the backup contents to. Ignored in interactive mode|
||Produce json formatted output for easier parsing|
||Only relevant if
||Run in interactive mode and prompt for configuration values|
||Opt out to encrypt the tar file with a passphrase (not recommended)|
||Encrypt the tar file with a passphrase|