13 lines
699 B
Markdown
13 lines
699 B
Markdown
# Repository recovery runbook
|
|
|
|
1. Stop `worker` before inspecting or repairing a repository; never edit a live
|
|
repository behind an active lease.
|
|
2. Preserve the repository directory and its metadata volume before remediation.
|
|
3. Verify repository state through the operator API and verify individual backups
|
|
before any restore. Treat a corrupt verification result as an incident, not a
|
|
deletion request.
|
|
4. Mount replacement repository roots at the same allowlisted path, restore metadata,
|
|
then start `migrate`, `web`, `scheduler`, and finally `worker`.
|
|
5. Keep archived repositories mounted until retention and restore obligations expire.
|
|
Do not remove manifests or blobs manually.
|