Coverage for bzfs_main/argparse_cli.py: 100%

1# Copyright 2024 Wolfgang Hoschek AT mac DOT com 

2# 

3# Licensed under the Apache License, Version 2.0 (the "License"); 

4# you may not use this file except in compliance with the License. 

5# You may obtain a copy of the License at 

6# 

7# http://www.apache.org/licenses/LICENSE-2.0 

8# 

9# Unless required by applicable law or agreed to in writing, software 

10# distributed under the License is distributed on an "AS IS" BASIS, 

11# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 

12# See the License for the specific language governing permissions and 

13# limitations under the License. 

14# 

15"""Documentation, definition of input data and ArgumentParser used by the 'bzfs' CLI.""" 

16 

17from __future__ import ( 

18 annotations, 

19) 

20import argparse 

21import dataclasses 

22import itertools 

23from typing import ( 

24 Final, 

25) 

26 

27from bzfs_main.argparse_actions import ( 

28 CheckPercentRange, 

29 DatasetPairsAction, 

30 DeleteDstSnapshotsExceptPlanAction, 

31 FileOrLiteralAction, 

32 IncludeSnapshotPlanAction, 

33 NewSnapshotFilterGroupAction, 

34 NonEmptyStringAction, 

35 SafeDirectoryNameAction, 

36 SafeFileNameAction, 

37 SSHConfigFileNameAction, 

38 TimeRangeAndRankRangeAction, 

39) 

40from bzfs_main.detect import ( 

41 DISABLE_PRG, 

42 DUMMY_DATASET, 

43) 

44from bzfs_main.period_anchors import ( 

45 PeriodAnchors, 

46) 

47from bzfs_main.util.check_range import ( 

48 CheckRange, 

49) 

50from bzfs_main.util.utils import ( 

51 ENV_VAR_PREFIX, 

52 PROG_NAME, 

53 format_dict, 

54) 

55 

56# constants: 

57__version__: Final[str] = "1.24.0.dev0" 

58PROG_AUTHOR: Final[str] = "Wolfgang Hoschek" 

59EXCLUDE_DATASET_REGEXES_DEFAULT: Final[str] = r"(?:.*/)?[Tt][Ee]?[Mm][Pp][-_]?[0-9]*" # skip tmp datasets by default 

60LOG_DIR_DEFAULT: Final[str] = PROG_NAME + "-logs" 

61SKIP_ON_ERROR_DEFAULT: Final[str] = "dataset" 

62CMP_CHOICES_ITEMS: Final[tuple[str, str, str]] = ("src", "dst", "all") 

63ZFS_RECV_O: Final[str] = "zfs_recv_o" 

64ZFS_RECV_X: Final[str] = "zfs_recv_x" 

65ZFS_RECV_GROUPS: Final[dict[str, str]] = {ZFS_RECV_O: "-o", ZFS_RECV_X: "-x", "zfs_set": ""} 

66ZFS_RECV_O_INCLUDE_REGEX_DEFAULT: Final[str] = "|".join( 

67 [ 

68 "aclinherit", 

69 "aclmode", 

70 "acltype", 

71 "atime", 

72 "checksum", 

73 "compression", 

74 "copies", 

75 "logbias", 

76 "primarycache", 

77 "recordsize", 

78 "redundant_metadata", 

79 "relatime", 

80 "secondarycache", 

81 "snapdir", 

82 "sync", 

83 "xattr", 

84 ] 

85) 

86 

87 

88def argument_parser() -> argparse.ArgumentParser: 

89 """Returns the CLI parser used by bzfs.""" 

90 create_src_snapshots_plan_example1: str = str({"test": {"": {"adhoc": 1}}}).replace(" ", "") 

91 create_src_snapshots_plan_example2: str = str({"prod": {"us-west": {"minutely": 40, "hourly": 36, "daily": 31}}}) 

92 create_src_snapshots_plan_example2 = create_src_snapshots_plan_example2.replace(" ", "") 

93 delete_dst_snapshots_except_plan_example1: str = str( 

94 { 

95 "prod": { 

96 "us-west": { 

97 "secondly": 40, 

98 "minutely": 40, 

99 "hourly": 36, 

100 "daily": 31, 

101 "weekly": 12, 

102 "monthly": 18, 

103 "yearly": 5, 

104 } 

105 } 

106 } 

107 ).replace(" ", "") 

108 monitor_snapshots_example: str = str( 

109 { 

110 "prod": { 

111 "us-west": { 

112 "minutely": {"latest": {"warning": "30 seconds", "critical": "300 seconds"}}, 

113 "hourly": {"latest": {"warning": "30 minutes", "critical": "300 minutes"}}, 

114 "daily": {"latest": {"warning": "4 hours", "critical": "8 hours"}}, 

115 }, 

116 }, 

117 } 

118 ).replace(" ", "") 

119 

120 # fmt: off 

121 parser: argparse.ArgumentParser = argparse.ArgumentParser( 

122 prog=PROG_NAME, 

123 allow_abbrev=False, 

124 formatter_class=argparse.RawTextHelpFormatter, 

125 description=rf""" 

126On the first run, {PROG_NAME} replicates the source dataset and all its snapshots to the destination. 

127On subsequent runs, it sends only changes since the previous run by incrementally replicating snapshots 

128created on the source after that run. Source snapshots older than the most recent common snapshot 

129on the destination are skipped automatically. 

130 

131Unless {PROG_NAME} is told to create snapshots or bookmarks on the source, it treats the source as read-only. With 

132`--dryrun`, it also treats the destination as read-only. In normal operation, the destination is 

133append-only. Optional flags can delete destination snapshots and datasets if you want to manage storage 

134space consumption, reconcile divergence, restore production from backup, or resync backup from production. 

135 

136{PROG_NAME} supports include/exclude filters that can be combined to choose which datasets, 

137snapshots, and properties to create, replicate, delete, or compare. 

138 

139A common setup uses scheduled `cron` jobs: one to create and prune source snapshots, one to prune 

140destination snapshots, and one to replicate recently created snapshots from source to destination. 

141Schedules can run every N milliseconds, seconds, minutes, hours, days, weeks, months, or years. 

142 

143Snapshot creation, replication, pruning, monitoring, and comparison work with snapshots in any naming 

144format, including snapshots created by third-party tools or by manual zfs snapshot commands. 

145These functions can also be used independently. 

146 

147The source can push to the destination, and the destination can pull from the source. {PROG_NAME} 

148runs on the initiator host, which can be the source host (push mode), destination host (pull mode), 

149same host (local mode, no network, no ssh), or a third-party host that can SSH 

150into source and destination (pull-push mode). In pull-push mode, the source `zfs send` stream is 

151relayed by the initiator to the destination `zfs receive`, without storing anything locally. 

152For bulk data transfers, remote-to-remote mode (`--r2r=pull` or `--r2r=push`) can instead transfer the 

153stream directly between source and destination to avoid making the initiator a bandwidth bottleneck. In 

154this mode, {PROG_NAME} does not need to be installed on source or destination; only the `zfs` CLI is 

155required there. {PROG_NAME} can run as root or as a non-root user via sudo or delegated `zfs allow` 

156permissions. 

157 

158{PROG_NAME} is written in Python and continuously tested with unit and integration tests on old and 

159new ZFS versions, on multiple Linux and FreeBSD versions, and on all Python versions >= 3.9 (including 

160latest stable, currently python-3.14). 

161 

162{PROG_NAME} is a stand-alone program with zero required dependencies. It is meant to run in restricted 

163barebones server environments. No external Python packages are required; indeed no Python package 

164management at all is required. You can symlink the program wherever you like, such as /usr/local/bin, 

165and run it like a shell script or binary executable. 

166 

167{PROG_NAME} replicates snapshots for multiple datasets in parallel. It also deletes (or monitors or 

168compares) snapshots of multiple datasets in parallel. Atomic snapshots can be created as often as 

169every N milliseconds. 

170 

171Replication progress (e.g. throughput and ETA) is shown aggregated across parallel replication tasks. 

172Example console status line: 

173 

174`2025-01-17 01:23:04 [I] zfs sent 41.7 GiB 0:00:46 [963 MiB/s] [907 MiB/s] 80% ETA 0:00:04 ETA 01:23:08` 

175 

176{PROG_NAME} uses streaming algorithms to process millions of datasets with low memory usage and low latency. 

177It handles replication policies with multiple sources and multiple destinations per source. 

178 

179Optionally, {PROG_NAME} applies bandwidth rate limiting and progress monitoring (via `pv`) during 

180`zfs send/receive` transfers. Over the network, it can insert lightweight compression (via `zstd`) 

181and buffering (via `mbuffer`) between endpoints. If one of these tools is not installed, {PROG_NAME} 

182auto-detects that and continues without that auxiliary feature. 

183 

184# Periodic Jobs with bzfs_jobrunner 

185 

186The project also ships with [bzfs_jobrunner](README_bzfs_jobrunner.md), a companion program that wraps 

187`{PROG_NAME}` for periodic snapshot creation, replication, pruning, and monitoring across N source hosts 

188and M destination hosts, using one shared fleet-wide [jobconfig](bzfs_testbed/bzfs_job_testbed.py) 

189script. 

190 

191Typical use cases include geo-replicated backup where each destination host is in a different region 

192and receives replicas from the same set of source hosts, low-latency replication from a primary to a 

193secondary or to M read replicas, and backups to removable drives. 

194 

195# Quickstart 

196 

197* Create adhoc atomic snapshots without a schedule: 

198 

199``` 

200$ {PROG_NAME} tank1/foo/bar dummy --recursive --skip-replication --create-src-snapshots \ 

201--create-src-snapshots-plan "{create_src_snapshots_plan_example1}" 

202``` 

203 

204``` 

205$ zfs list -t snapshot tank1/foo/bar 

206tank1/foo/bar@test_2024-11-06_08:30:05_adhoc 

207``` 

208 

209* Create periodic atomic snapshots on a schedule, every minute, every hour and every day, by launching this from a periodic `cron` job: 

210 

211``` 

212$ {PROG_NAME} tank1/foo/bar dummy --recursive --skip-replication --create-src-snapshots \ 

213--create-src-snapshots-plan \ 

214"{create_src_snapshots_plan_example2}" 

215``` 

216 

217``` 

218$ zfs list -t snapshot tank1/foo/bar 

219tank1/foo/bar@prod_us-west_2024-11-06_08:30:05_daily 

220tank1/foo/bar@prod_us-west_2024-11-06_08:30:05_hourly 

221tank1/foo/bar@prod_us-west_2024-11-06_08:30:05_minutely 

222``` 

223 

224Note: A periodic snapshot is created if it is due per the schedule indicated by its suffix (e.g. `_daily` or `_hourly` 

225or `_minutely` or `_2secondly` or `_100millisecondly`), or if the --create-src-snapshots-even-if-not-due flag is specified, 

226or if the most recent scheduled snapshot is somehow missing. In the latter case {PROG_NAME} immediately creates a snapshot 

227(named with the current time, not backdated to the missed time), and then resumes the original schedule. If the suffix is 

228`_adhoc` or not a known period then a snapshot is considered non-periodic and is thus created immediately regardless of the 

229creation time of any existing snapshot. 

230 

231* Replication example in local mode (no network, no ssh), to replicate ZFS dataset tank1/foo/bar to tank2/boo/bar: 

232 

233``` 

234$ {PROG_NAME} tank1/foo/bar tank2/boo/bar 

235``` 

236 

237``` 

238$ zfs list -t snapshot tank1/foo/bar 

239tank1/foo/bar@prod_us-west_2024-11-06_08:30:05_daily 

240tank1/foo/bar@prod_us-west_2024-11-06_08:30:05_hourly 

241tank1/foo/bar@prod_us-west_2024-11-06_08:30:05_minutely 

242``` 

243 

244``` 

245$ zfs list -t snapshot tank2/boo/bar 

246tank2/boo/bar@prod_us-west_2024-11-06_08:30:05_daily 

247tank2/boo/bar@prod_us-west_2024-11-06_08:30:05_hourly 

248tank2/boo/bar@prod_us-west_2024-11-06_08:30:05_minutely 

249``` 

250 

251* Same example in pull mode: 

252 

253``` 

254$ {PROG_NAME} root@host1.example.com:tank1/foo/bar tank2/boo/bar 

255``` 

256 

257* Same example in push mode: 

258 

259``` 

260$ {PROG_NAME} tank1/foo/bar root@host2.example.com:tank2/boo/bar 

261``` 

262 

263* Same example in pull-push mode: 

264 

265``` 

266$ {PROG_NAME} root@host1:tank1/foo/bar root@host2:tank2/boo/bar 

267``` 

268 

269* Same example with direct remote-to-remote transfer via `--r2r=pull`: 

270 

271``` 

272$ {PROG_NAME} --r2r=pull root@host1:tank1/foo/bar root@host2:tank2/boo/bar 

273``` 

274 

275* Same example with direct remote-to-remote transfer via `--r2r=push`: 

276 

277``` 

278$ {PROG_NAME} --r2r=push root@host1:tank1/foo/bar root@host2:tank2/boo/bar 

279``` 

280 

281* Example in local mode (no network, no ssh) to recursively replicate ZFS dataset tank1/foo/bar and its descendant 

282datasets to tank2/boo/bar: 

283 

284``` 

285$ {PROG_NAME} --recursive tank1/foo/bar tank2/boo/bar 

286``` 

287 

288``` 

289$ zfs list -t snapshot -r tank1/foo/bar 

290tank1/foo/bar@prod_us-west_2024-11-06_08:30:05_daily 

291tank1/foo/bar@prod_us-west_2024-11-06_08:30:05_hourly 

292tank1/foo/bar@prod_us-west_2024-11-06_08:30:05_minutely 

293tank1/foo/bar/baz@prod_us-west_2024-11-06_08:40:00_daily 

294tank1/foo/bar/baz@prod_us-west_2024-11-06_08:40:00_hourly 

295tank1/foo/bar/baz@prod_us-west_2024-11-06_08:40:00_minutely 

296``` 

297 

298``` 

299$ zfs list -t snapshot -r tank2/boo/bar 

300tank2/boo/bar@prod_us-west_2024-11-06_08:30:05_daily 

301tank2/boo/bar@prod_us-west_2024-11-06_08:30:05_hourly 

302tank2/boo/bar@prod_us-west_2024-11-06_08:30:05_minutely 

303tank2/boo/bar/baz@prod_us-west_2024-11-06_08:40:00_daily 

304tank2/boo/bar/baz@prod_us-west_2024-11-06_08:40:00_hourly 

305tank2/boo/bar/baz@prod_us-west_2024-11-06_08:40:00_minutely 

306``` 

307 

308* Replicate all daily snapshots created during the last 31 days, and at the same time ensure that the latest 31 daily 

309snapshots (per dataset) are replicated regardless of creation time. Same for 40 minutely snapshots, and 36 hourly 

310snapshots: 

311 

312``` 

313$ {PROG_NAME} tank1/foo/bar tank2/boo/bar --recursive --include-snapshot-plan \ 

314"{create_src_snapshots_plan_example2}" 

315``` 

316 

317Note: The example above compares the specified times against the standard ZFS 'creation' time property of the snapshots 

318(which is a UTC Unix time in integer seconds), rather than against a timestamp that may be part of the snapshot name. 

319 

320* Retain all secondly snapshots that were created less than 40 seconds ago, and ensure that the latest 40 

321secondly snapshots (per dataset) are retained regardless of creation time. Same for 40 minutely snapshots, 36 hourly 

322snapshots, 31 daily snapshots, 12 weekly snapshots, 18 monthly snapshots, and 5 yearly snapshots: 

323 

324``` 

325$ {PROG_NAME} {DUMMY_DATASET} tank2/boo/bar --dryrun --recursive --skip-replication \ 

326--delete-dst-snapshots --delete-dst-snapshots-except-plan \ 

327"{delete_dst_snapshots_except_plan_example1}" 

328``` 

329 

330Note: This also prints how many GB of disk space in total would be freed if the command were to be run for real without 

331the --dryrun flag. 

332 

333* Compare source and destination dataset trees recursively, for example to check if all recently taken snapshots have 

334been successfully replicated by a periodic job. List snapshots only contained in src (tagged with 'src'), 

335only contained in dst (tagged with 'dst'), and contained in both src and dst (tagged with 'all'), restricted to hourly 

336and daily snapshots taken within the last 7 days, excluding the last 4 hours (to allow for some slack/stragglers), 

337excluding temporary datasets: 

338 

339``` 

340$ {PROG_NAME} tank1/foo/bar tank2/boo/bar --skip-replication --compare-snapshot-lists \ 

341--recursive --include-snapshot-regex '.*_(hourly|daily)' \ 

342--include-snapshot-times-and-ranks '7 days ago..4 hours ago' --exclude-dataset-regex \ 

343'(.*/)?tmp.*' 

344``` 

345 

346If the resulting TSV output file contains zero lines starting with the prefix 'src' and zero lines starting with the 

347prefix 'dst' then no source snapshots are missing on the destination, and no destination snapshots are missing 

348on the source, indicating that the periodic replication and pruning jobs perform as expected. The TSV output is sorted 

349by dataset, and by ZFS creation time within each dataset - the first and last line prefixed with 'all' contains the 

350metadata of the oldest and latest common snapshot, respectively. The --compare-snapshot-lists option also directly 

351logs [various summary stats](https://github.com/whoschek/bzfs/blob/main/bzfs_docs/compare-snapshot-lists-example.log), 

352such as the metadata of the latest common snapshot, latest snapshots and oldest snapshots, as well as the time diff 

353between the latest common snapshot and latest snapshot only in src (and only in dst), as well as how many src snapshots 

354and how many GB of data are missing on dst, etc. 

355 

356* Alert the user if the ZFS 'creation' time property of the latest source or destination snapshot for any specified 

357snapshot name pattern within the selected datasets is too old wrt. the specified age limit. The purpose is to check if 

358snapshots are successfully created and replicated on schedule. 

359Process exit code is 0, 1, 2 on OK, WARNING, CRITICAL, respectively. 

360The example alerts the user if the *latest* source or destination snapshot named `prod_us-west_<timestamp>_hourly` is 

361more than 30 minutes late (i.e. more than 30+60=90 minutes old) [warning], or more than 300 minutes late (i.e. more 

362than 300+60=360 minutes old) [critical]. Analog for minutely and daily snapshots: 

363 

364``` 

365$ {PROG_NAME} tank1/foo/bar tank2/boo/bar --recursive --skip-replication -v --monitor-snapshots \ 

366"{monitor_snapshots_example}" 

367``` 

368 

369* Example that makes destination identical to source even if the two have drastically diverged: 

370 

371``` 

372$ {PROG_NAME} tank1/foo/bar tank2/boo/bar --dryrun --recursive --force --delete-dst-datasets \ 

373--delete-dst-snapshots 

374``` 

375 

376""") 

377 

378 parser.add_argument( 

379 "--no-argument-file", action="store_true", 

380 # help="Disable support for reading the names of datasets and snapshots from a file.\n\n") 

381 help=argparse.SUPPRESS) 

382 parser.add_argument( 

383 "root_dataset_pairs", nargs="+", action=DatasetPairsAction, metavar="SRC_DATASET DST_DATASET", 

384 help="SRC_DATASET: " 

385 "Source ZFS dataset (and its descendants) that will be replicated. Can be a ZFS filesystem or ZFS volume. " 

386 "Format is [[user@]host:]dataset. The host name can also be an IPv4 address (or an IPv6 address where " 

387 "each ':' colon character must be replaced with a '|' pipe character for disambiguation). If the " 

388 "host name is '-', the dataset will be on the local host, and the corresponding SSH leg will be omitted. " 

389 "The same is true if the host is omitted and the dataset does not contain a ':' colon at the same time. " 

390 "Local dataset examples: `tank1/foo/bar`, `tank1`, `-:tank1/foo/bar:baz:boo` " 

391 "Remote dataset examples: `host:tank1/foo/bar`, `host.example.com:tank1/foo/bar`, " 

392 "`root@host:tank`, `root@host.example.com:tank1/foo/bar`, `user@127.0.0.1:tank1/foo/bar:baz:boo`, " 

393 "`user@||1:tank1/foo/bar:baz:boo`. " 

394 "The first component of the ZFS dataset name is the ZFS pool name, here `tank1`. " 

395 "If the option starts with a `+` prefix then dataset names are read from the UTF-8 text file given " 

396 "after the `+` prefix, with each line in the file containing a SRC_DATASET and a DST_DATASET, " 

397 "separated by a tab character. The basename must contain the substring 'bzfs_argument_file'. " 

398 "Example: `+root_dataset_names_bzfs_argument_file.txt`, " 

399 "`+/path/to/root_dataset_names_bzfs_argument_file.txt`\n\n" 

400 "DST_DATASET: " 

401 "Destination ZFS dataset for replication and deletion. Has same naming format as SRC_DATASET. During " 

402 "replication, destination datasets that do not yet exist are created as necessary, along with their " 

403 "parent and ancestors.\n\n" 

404 f"*Performance Note:* {PROG_NAME} automatically replicates multiple datasets in parallel. It replicates " 

405 "snapshots in parallel across datasets and serially within a dataset. All child datasets of a dataset " 

406 "may be processed in parallel. For consistency, processing of a dataset only starts after processing of " 

407 "all its ancestor datasets has completed. Further, when a thread is ready to start processing another " 

408 "dataset, it chooses the next dataset wrt. lexicographical sort order from the datasets that are " 

409 "currently available for start of processing. Initially, only the roots of the selected dataset subtrees " 

410 "are available for start of processing. The degree of parallelism is configurable with the --threads " 

411 "option (see below).\n\n") 

412 parser.add_argument( 

413 "--recursive", "-r", action="store_true", 

414 help="During snapshot creation, replication, deletion and comparison, also consider descendant datasets, i.e. " 

415 "datasets within the dataset tree, including children, and children of children, etc.\n\n") 

416 parser.add_argument( 

417 "--include-dataset", action=FileOrLiteralAction, nargs="+", default=[], metavar="DATASET", 

418 help="During snapshot creation, replication, deletion and comparison, select any ZFS dataset (and its descendants) " 

419 "that is contained within SRC_DATASET (DST_DATASET in case of deletion) if its dataset name is one of the " 

420 "given include dataset names but none of the exclude dataset names. If a dataset is excluded its descendants " 

421 "are automatically excluded too, and this decision is never reconsidered even for the descendants because " 

422 "exclude takes precedence over include.\n\n" 

423 "A dataset name is absolute if the specified dataset is prefixed by `/`, e.g. `/tank/baz/tmp`. " 

424 "Otherwise the dataset name is relative wrt. source and destination, e.g. `baz/tmp` if the source " 

425 "is `tank`.\n\n" 

426 "This option is automatically translated to an --include-dataset-regex (see below) and can be " 

427 "specified multiple times.\n\n" 

428 "If the option starts with a `+` prefix then dataset names are read from the newline-separated " 

429 "UTF-8 text file given after the `+` prefix, one dataset per line inside of the text file. The basename " 

430 "must contain the substring 'bzfs_argument_file'.\n\n" 

431 "Examples: `/tank/baz/tmp` (absolute), `baz/tmp` (relative), " 

432 "`+dataset_names_bzfs_argument_file.txt`, `+/path/to/dataset_names_bzfs_argument_file.txt`\n\n") 

433 parser.add_argument( 

434 "--exclude-dataset", action=FileOrLiteralAction, nargs="+", default=[], metavar="DATASET", 

435 help="Same syntax as --include-dataset (see above) except that the option is automatically translated to an " 

436 "--exclude-dataset-regex (see below).\n\n") 

437 parser.add_argument( 

438 "--include-dataset-regex", action=FileOrLiteralAction, nargs="+", default=[], metavar="REGEX", 

439 help="During snapshot creation, replication (and deletion) and comparison, select any ZFS dataset (and its " 

440 "descendants) that is contained within SRC_DATASET (DST_DATASET in case of deletion) if its relative dataset " 

441 "path (e.g. `baz/tmp`) wrt. SRC_DATASET (DST_DATASET in case of deletion) matches at least one of the given " 

442 "include regular expressions but none of the exclude regular expressions. " 

443 "If a dataset is excluded its descendants are automatically excluded too, and this decision is never " 

444 "reconsidered even for the descendants because exclude takes precedence over include.\n\n" 

445 "This option can be specified multiple times. " 

446 "A leading `!` character indicates logical negation, i.e. the regex matches if the regex with the " 

447 "leading `!` character removed does not match.\n\n" 

448 "If the option starts with a `+` prefix then regex names are read from the newline-separated " 

449 "UTF-8 text file given after the `+` prefix, one regex per line inside of the text file. The basename " 

450 "must contain the substring 'bzfs_argument_file'.\n\n" 

451 "Default: `.*` (include all datasets).\n\n" 

452 "Examples: `baz/tmp`, `(.*/)?doc[^/]*/(private|confidential).*`, `!public`, " 

453 "`+dataset_regexes_bzfs_argument_file.txt`, `+/path/to/dataset_regexes_bzfs_argument_file.txt`\n\n") 

454 parser.add_argument( 

455 "--exclude-dataset-regex", action=FileOrLiteralAction, nargs="+", default=[], metavar="REGEX", 

456 help="Same syntax as --include-dataset-regex (see above) except that the default is " 

457 f"`{EXCLUDE_DATASET_REGEXES_DEFAULT}` (exclude tmp datasets). Example: `!.*` (exclude no dataset)\n\n") 

458 parser.add_argument( 

459 "--exclude-dataset-property", default=None, action=NonEmptyStringAction, metavar="STRING", 

460 help="The name of a ZFS dataset user property (optional). If this option is specified, the effective value " 

461 "(potentially inherited) of that user property is read via 'zfs list' for each selected source dataset " 

462 "to determine whether the dataset will be included or excluded, as follows:\n\n" 

463 "a) Value is 'true' or '-' or empty string or the property is missing: Include the dataset.\n\n" 

464 "b) Value is 'false': Exclude the dataset and its descendants.\n\n" 

465 "c) Value is a comma-separated list of host names (no spaces, for example: " 

466 "'store001,store002'): Include the dataset if the host name of " 

467 f"the host executing {PROG_NAME} is contained in the list, otherwise exclude the dataset and its " 

468 "descendants.\n\n" 

469 "If a dataset is excluded its descendants are automatically excluded too, and the property values of the " 

470 "descendants are ignored because exclude takes precedence over include.\n\n" 

471 "Examples: 'syncoid:sync', 'com.example.eng.project.x:backup'\n\n" 

472 "*Note:* The use of --exclude-dataset-property is discouraged for most use cases. It is more flexible, " 

473 "more powerful, *and* more efficient to instead use a combination of --include/exclude-dataset-regex " 

474 "and/or --include/exclude-dataset to achieve the same or better outcome.\n\n") 

475 parser.add_argument( 

476 "--include-snapshot-regex", action=FileOrLiteralAction, nargs="+", default=[], metavar="REGEX", 

477 help="During replication, deletion and comparison, select any source ZFS snapshot that has a name (i.e. the part " 

478 "after the '@') that matches at least one of the given include regular expressions but none of the " 

479 "exclude regular expressions. If a snapshot is excluded this decision is never reconsidered because " 

480 "exclude takes precedence over include.\n\n" 

481 "This option can be specified multiple times. " 

482 "A leading `!` character indicates logical negation, i.e. the regex matches if the regex with the " 

483 "leading `!` character removed does not match.\n\n" 

484 "Default: `.*` (include all snapshots). " 

485 "Examples: `test_.*`, `!prod_.*`, `.*_(hourly|frequent)`, `!.*_(weekly|daily)`\n\n" 

486 "*Note:* All --include/exclude-snapshot-* CLI option groups are combined into a mini filter pipeline. " 

487 "A filter pipeline is executed in the order given on the command line, left to right. For example if " 

488 "--include-snapshot-times-and-ranks (see below) is specified on the command line before " 

489 "--include/exclude-snapshot-regex, then --include-snapshot-times-and-ranks will be applied before " 

490 "--include/exclude-snapshot-regex. The pipeline results would not always be the same if the order were " 

491 "reversed. Order matters.\n\n" 

492 "*Note:* During replication, bookmarks are always retained aka selected in order to help find common " 

493 "snapshots between source and destination.\n\n") 

494 parser.add_argument( 

495 "--exclude-snapshot-regex", action=FileOrLiteralAction, nargs="+", default=[], metavar="REGEX", 

496 help="Same syntax as --include-snapshot-regex (see above) except that the default is to exclude no " 

497 "snapshots.\n\n") 

498 parser.add_argument( 

499 "--include-snapshot-times-and-ranks", action=TimeRangeAndRankRangeAction, nargs="+", default=[], 

500 metavar=("TIMERANGE", "RANKRANGE"), 

501 help="This option takes as input parameters a time range filter and an optional rank range filter. It " 

502 "separately computes the results for each filter and selects the UNION of both results. " 

503 "To instead use a pure rank range filter (no UNION), or a pure time range filter (no UNION), simply " 

504 "use 'notime' aka '0..0' to indicate an empty time range, or omit the rank range, respectively. " 

505 "This option can be specified multiple times.\n\n" 

506 "<b>*Replication Example (UNION):* </b>\n\n" 

507 "Specify to replicate all daily snapshots created during the last 7 days, " 

508 "and at the same time ensure that the latest 7 daily snapshots (per dataset) are replicated regardless " 

509 "of creation time, like so: " 

510 "`--include-snapshot-regex '.*_daily' --include-snapshot-times-and-ranks '7 days ago..anytime' 'latest 7'`\n\n" 

511 "<b>*Deletion Example (no UNION):* </b>\n\n" 

512 "Specify to delete all daily snapshots older than 7 days, but ensure that the " 

513 "latest 7 daily snapshots (per dataset) are retained regardless of creation time, like so: " 

514 "`--include-snapshot-regex '.*_daily' --include-snapshot-times-and-ranks notime 'all except latest 7' " 

515 "--include-snapshot-times-and-ranks 'anytime..7 days ago'`" 

516 "\n\n" 

517 "This helps to safely cope with irregular scenarios where no snapshots were created or received within " 

518 "the last 7 days, or where more than 7 daily snapshots were created within the last 7 days. It can also " 

519 "help to avoid accidental pruning of the last snapshot that source and destination have in common.\n\n" 

520 "" 

521 "<b>*TIMERANGE:* </b>\n\n" 

522 "The ZFS 'creation' time of a snapshot (and bookmark) must fall into this time range in order for the " 

523 "snapshot to be included. The time range consists of a 'start' time, followed by a '..' separator, " 

524 "followed by an 'end' time. For example '2024-01-01..2024-04-01', or 'anytime..anytime' aka `*..*` aka all " 

525 "times, or 'notime' aka '0..0' aka empty time range. Only snapshots (and bookmarks) in the half-open time " 

526 "range [start, end) are included; other snapshots (and bookmarks) are excluded. If a snapshot is excluded " 

527 "this decision is never reconsidered because exclude takes precedence over include. Each of the two specified " 

528 "times can take any of the following forms:\n\n" 

529 "* a) `anytime` aka `*` wildcard; represents negative or positive infinity.\n\n" 

530 "* b) a non-negative integer representing a UTC Unix time in seconds. Example: 1728109805\n\n" 

531 "* c) an ISO 8601 datetime string with or without timezone. Examples: '2024-10-05', " 

532 "'2024-10-05T14:48:55', '2024-10-05T14:48:55+02', '2024-10-05T14:48:55-04:30'. If the datetime string " 

533 "does not contain time zone info then it is assumed to be in the local time zone. Timezone string support " 

534 "requires Python ≥ 3.11.\n\n" 

535 "* d) a duration that indicates how long ago from the current time, using the following syntax: " 

536 "a non-negative integer, followed by an optional space, followed by a duration unit that is " 

537 "*one* of 'seconds', 'secs', 'minutes', 'mins', 'hours', 'days', 'weeks', 'months', 'years', " 

538 "followed by an optional space, followed by the word 'ago'. " 

539 "Examples: '0secs ago', '40 mins ago', '36hours ago', '90days ago', '12weeksago'.\n\n" 

540 "* Note: This option compares the specified time against the standard ZFS 'creation' time property of the " 

541 "snapshot (which is a UTC Unix time in integer seconds), rather than against a timestamp that may be " 

542 "part of the snapshot name. You can list the ZFS creation time of snapshots and bookmarks as follows: " 

543 "`zfs list -t snapshot,bookmark -o name,creation -s creation -d 1 $SRC_DATASET` (optionally add " 

544 "the -p flag to display UTC Unix time in integer seconds).\n\n" 

545 "*Note:* During replication, bookmarks are always retained aka selected in order to help find common " 

546 "snapshots between source and destination.\n\n" 

547 "" 

548 "<b>*RANKRANGE:* </b>\n\n" 

549 "Specifies to include the N (or N%%) oldest snapshots or latest snapshots, and exclude all other " 

550 "snapshots (default: include no snapshots). Snapshots are sorted by creation time (actually, by the " 

551 "'createtxg' ZFS property, which serves the same purpose but is more precise). The rank position of a " 

552 "snapshot is the zero-based integer position of the snapshot within that sorted list. A rank consists of the " 

553 "optional words 'all except' (followed by an optional space), followed by the word 'oldest' or 'latest', " 

554 "followed by a non-negative integer, followed by an optional '%%' percent sign. A rank range consists of a " 

555 "lower rank, followed by a '..' separator, followed by a higher rank. " 

556 "If the optional lower rank is missing it is assumed to be 0. Examples:\n\n" 

557 "* 'oldest 10%%' aka 'oldest 0..oldest 10%%' (include the oldest 10%% of all snapshots)\n\n" 

558 "* 'latest 10%%' aka 'latest 0..latest 10%%' (include the latest 10%% of all snapshots)\n\n" 

559 "* 'all except latest 10%%' aka 'oldest 90%%' aka 'oldest 0..oldest 90%%' (include all snapshots except the " 

560 "latest 10%% of all snapshots)\n\n" 

561 "* 'oldest 90' aka 'oldest 0..oldest 90' (include the oldest 90 snapshots)\n\n" 

562 "* 'latest 90' aka 'latest 0..latest 90' (include the latest 90 snapshots)\n\n" 

563 "* 'all except oldest 90' aka 'oldest 90..oldest 100%%' (include all snapshots except the oldest 90 snapshots)" 

564 "\n\n" 

565 "* 'all except latest 90' aka 'latest 90..latest 100%%' (include all snapshots except the latest 90 snapshots)" 

566 "\n\n" 

567 "* 'latest 1' aka 'latest 0..latest 1' (include the latest snapshot)\n\n" 

568 "* 'all except latest 1' aka 'latest 1..latest 100%%' (include all snapshots except the latest snapshot)\n\n" 

569 "* 'oldest 2' aka 'oldest 0..oldest 2' (include the oldest 2 snapshots)\n\n" 

570 "* 'all except oldest 2' aka 'oldest 2..oldest 100%%' (include all snapshots except the oldest 2 snapshots)\n\n" 

571 "* 'oldest 100%%' aka 'oldest 0..oldest 100%%' (include all snapshots)\n\n" 

572 "* 'oldest 0%%' aka 'oldest 0..oldest 0%%' (include no snapshots)\n\n" 

573 "* 'oldest 0' aka 'oldest 0..oldest 0' (include no snapshots)\n\n" 

574 "*Note for multiple RANKRANGEs:* `--include-snapshot-times-and-ranks TIMERANGE RANKRANGE1 RANKRANGE2` is " 

575 "equivalent to `--include-snapshot-times-and-ranks TIMERANGE RANKRANGE1 --include-snapshot-times-and-ranks " 

576 "TIMERANGE RANKRANGE2`.\n\n" 

577 "*Note:* Percentage calculations are not based on the number of snapshots " 

578 "contained in the dataset on disk, but rather based on the number of snapshots arriving at the filter. " 

579 "For example, if only two daily snapshots arrive at the filter because a prior filter excludes hourly " 

580 "snapshots, then 'latest 10' will only include these two daily snapshots, and 'latest 50%%' will only " 

581 "include one of these two daily snapshots.\n\n" 

582 "*Note:* During replication, bookmarks are always retained aka selected in order to help find common " 

583 "snapshots between source and destination. Bookmarks do not count towards N or N%% wrt. rank.\n\n" 

584 "*Note:* If a snapshot is excluded this decision is never reconsidered because exclude takes precedence " 

585 "over include.\n\n") 

586 

587 src_snapshot_plan_example = { 

588 "prod": { 

589 "onsite": {"secondly": 40, "minutely": 40, "hourly": 36, "daily": 31, "weekly": 12, "monthly": 18, "yearly": 5}, 

590 "us-west": {"secondly": 0, "minutely": 0, "hourly": 36, "daily": 31, "weekly": 12, "monthly": 18, "yearly": 5}, 

591 "eu-west": {"secondly": 0, "minutely": 0, "hourly": 36, "daily": 31, "weekly": 12, "monthly": 18, "yearly": 5}, 

592 }, 

593 "test": { 

594 "offsite": {"12hourly": 42, "weekly": 12}, 

595 "onsite": {"100millisecondly": 42}, 

596 }, 

597 } 

598 parser.add_argument( 

599 "--include-snapshot-plan", action=IncludeSnapshotPlanAction, default=None, metavar="DICT_STRING", 

600 help="Replication periods to be used if replicating snapshots within the selected destination datasets. " 

601 "Has the same format as --create-src-snapshots-plan and --delete-dst-snapshots-except-plan (see below). " 

602 "Snapshots that do not match a period will not be replicated. To avoid unexpected surprises, make sure to " 

603 "carefully specify ALL snapshot names and periods that shall be replicated, in combination with --dryrun.\n\n" 

604 f"Example: `{format_dict(src_snapshot_plan_example)}`. This example will, for the organization 'prod' and the " 

605 "intended logical target 'onsite', replicate secondly snapshots that were created less than 40 seconds ago, " 

606 "yet replicate the latest 40 secondly snapshots regardless of creation time. Analog for the latest 40 minutely " 

607 "snapshots, latest 36 hourly snapshots, etc. " 

608 "Note: A zero within a period (e.g. 'hourly': 0) indicates that no snapshots shall be replicated for the given " 

609 "period.\n\n" 

610 "Note: --include-snapshot-plan is a convenience option that auto-generates a series of the following other " 

611 "options: --new-snapshot-filter-group, --include-snapshot-regex, --include-snapshot-times-and-ranks\n\n") 

612 parser.add_argument( 

613 "--new-snapshot-filter-group", action=NewSnapshotFilterGroupAction, nargs=0, 

614 help="Starts a new snapshot filter group containing separate --{include|exclude}-snapshot-* filter options. The " 

615 "program separately computes the results for each filter group and selects the UNION of all results. " 

616 "This option can be specified multiple times and serves as a separator between groups. Example:\n\n" 

617 "Delete all minutely snapshots older than 40 minutes, but ensure that the latest 40 minutely snapshots (per " 

618 "dataset) are retained regardless of creation time. Additionally, delete all hourly snapshots older than 36 " 

619 "hours, but ensure that the latest 36 hourly snapshots (per dataset) are retained regardless of creation time. " 

620 "Additionally, delete all daily snapshots older than 31 days, but ensure that the latest 31 daily snapshots " 

621 "(per dataset) are retained regardless of creation time: " 

622 f"`{PROG_NAME} {DUMMY_DATASET} tank2/boo/bar --dryrun --recursive --skip-replication --delete-dst-snapshots " 

623 "--include-snapshot-regex '.*_minutely' --include-snapshot-times-and-ranks notime 'all except latest 40' " 

624 "--include-snapshot-times-and-ranks 'anytime..40 minutes ago' " 

625 "--new-snapshot-filter-group " 

626 "--include-snapshot-regex '.*_hourly' --include-snapshot-times-and-ranks notime 'all except latest 36' " 

627 "--include-snapshot-times-and-ranks 'anytime..36 hours ago' " 

628 "--new-snapshot-filter-group " 

629 "--include-snapshot-regex '.*_daily' --include-snapshot-times-and-ranks notime 'all except latest 31' " 

630 "--include-snapshot-times-and-ranks 'anytime..31 days ago'`\n\n") 

631 parser.add_argument( 

632 "--create-src-snapshots", action="store_true", 

633 help="Do nothing if the --create-src-snapshots flag is missing. Otherwise, before the replication step (see below), " 

634 "atomically create new snapshots of the source datasets selected via --{include|exclude}-dataset* policy. " 

635 "The names of the snapshots can be configured via --create-src-snapshots-* suboptions (see below). " 

636 "To create snapshots only, without any other processing such as replication, etc, consider using this flag " 

637 "together with the --skip-replication flag.\n\n" 

638 "A periodic snapshot is created if it is due per the schedule indicated by --create-src-snapshots-plan " 

639 "(for example '_daily' or '_hourly' or _'10minutely' or '_2secondly' or '_100millisecondly'), or if the " 

640 "--create-src-snapshots-even-if-not-due flag is specified, or if the most recent scheduled snapshot " 

641 f"is somehow missing. In the latter case {PROG_NAME} immediately creates a snapshot (tagged with the current " 

642 "time, not backdated to the missed time), and then resumes the original schedule.\n\n" 

643 "If the snapshot suffix is '_adhoc' or not a known period then a snapshot is considered " 

644 "non-periodic and is thus created immediately regardless of the creation time of any existing snapshot.\n\n" 

645 "The implementation attempts to fit as many datasets as possible into a single (atomic) 'zfs snapshot' command " 

646 "line, using lexicographical sort order, and using 'zfs snapshot -r' to the extent that this is compatible " 

647 "with the actual results of the schedule and the actual results of the --{include|exclude}-dataset* pruning " 

648 "policy. The snapshots of all datasets that fit " 

649 "within the same single 'zfs snapshot' CLI invocation will be taken within the same ZFS transaction group, and " 

650 "correspondingly have identical 'createtxg' ZFS property (but not necessarily identical 'creation' ZFS time " 

651 "property as ZFS actually provides no such guarantee), and thus be consistent. Dataset names that can't fit " 

652 "into a single command line are spread over multiple command line invocations, respecting the limits that the " 

653 "operating system places on the maximum length of a single command line, per `getconf ARG_MAX`.\n\n" 

654 f"Note: All {PROG_NAME} functions including snapshot creation, replication, deletion, monitoring, comparison, " 

655 "etc. happily work with any snapshots in any format, even created or managed by third party ZFS snapshot " 

656 "management tools, including manual zfs snapshot/destroy.\n\n") 

657 parser.add_argument( 

658 "--create-src-snapshots-plan", default=None, type=str, metavar="DICT_STRING", 

659 help="Creation periods that specify a schedule for when new snapshots shall be created on src within the selected " 

660 "datasets. Has the same format as --delete-dst-snapshots-except-plan.\n\n" 

661 f"Example: `{format_dict(src_snapshot_plan_example)}`. This example will, for the organization 'prod' and " 

662 "the intended logical target 'onsite', create 'secondly' snapshots every second, 'minutely' snapshots every " 

663 "minute, hourly snapshots every hour, and so on. " 

664 "It will also create snapshots for the targets 'us-west' and 'eu-west' within the 'prod' organization. " 

665 "In addition, it will create snapshots every 12 hours and every week for the 'test' organization, " 

666 "and name them as being intended for the 'offsite' replication target. Analog for snapshots that are taken " 

667 "every 100 milliseconds within the 'test' organization.\n\n" 

668 "The example creates ZFS snapshots with names like " 

669 "`prod_onsite_<timestamp>_secondly`, `prod_onsite_<timestamp>_minutely`, " 

670 "`prod_us-west_<timestamp>_hourly`, `prod_us-west_<timestamp>_daily`, " 

671 "`prod_eu-west_<timestamp>_hourly`, `prod_eu-west_<timestamp>_daily`, " 

672 "`test_offsite_<timestamp>_12hourly`, `test_offsite_<timestamp>_weekly`, and so on.\n\n" 

673 "Note: A period name that is missing indicates that no snapshots shall be created for the given period.\n\n" 

674 "The period name can contain an optional positive integer immediately preceding the time period unit, for " 

675 "example `_2secondly` or `_10minutely` or `_100millisecondly` to indicate that snapshots are taken every 2 " 

676 "seconds, or every 10 minutes, or every 100 milliseconds, respectively.\n\n") 

677 

678 def argparser_escape(text: str) -> str: 

679 return text.replace("%", "%%") 

680 

681 parser.add_argument( 

682 "--create-src-snapshots-timeformat", default="%Y-%m-%d_%H:%M:%S", metavar="STRFTIME_SPEC", 

683 help="Default is `%(default)s`. For the strftime format, see " 

684 "https://docs.python.org/3.11/library/datetime.html#strftime-strptime-behavior. " 

685 f"Examples: `{argparser_escape('%Y-%m-%d_%H:%M:%S.%f')}` (adds microsecond resolution), " 

686 f"`{argparser_escape('%Y-%m-%d_%H:%M:%S%z')}` (adds timezone offset), " 

687 f"`{argparser_escape('%Y-%m-%dT%H-%M-%S')}` (no colons).\n\n" 

688 "The name of the snapshot created on the src is `$org_$target_strftime(--create-src-snapshots-time*)_$period`. " 

689 "Example: `tank/foo@prod_us-west_2024-09-03_12:26:15_daily`\n\n") 

690 parser.add_argument( 

691 "--create-src-snapshots-timezone", default="", type=str, metavar="TZ_SPEC", 

692 help=f"Default is the local timezone of the system running {PROG_NAME}. When creating a new snapshot on the source, " 

693 "fetch the current time in the specified timezone, and feed that time, and the value of " 

694 "--create-src-snapshots-timeformat, into the standard strftime() function to generate the timestamp portion " 

695 "of the snapshot name. The TZ_SPEC input parameter is of the form 'UTC' or '+HHMM' or '-HHMM' for fixed UTC " 

696 "offsets, or an IANA TZ identifier for auto-adjustment to daylight savings time, or the empty string to use " 

697 "the local timezone, for example '', 'UTC', '+0000', '+0530', '-0400', 'America/Los_Angeles', 'Europe/Vienna'. " 

698 "For a list of valid IANA TZ identifiers see https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List" 

699 "\n\nTo change the timezone not only for snapshot name creation, but in all respects for the entire program, " 

700 "use the standard 'TZ' Unix environment variable, like so: `export TZ=UTC`.\n\n") 

701 parser.add_argument( 

702 "--create-src-snapshots-even-if-not-due", action="store_true", 

703 help="Take snapshots immediately regardless of the creation time of any existing snapshot, even if snapshots " 

704 "are periodic and not actually due per the schedule.\n\n") 

705 parser.add_argument( 

706 "--zfs-send-program-opts", type=str, default="--raw --compressed", metavar="STRING", 

707 help="Parameters to fine-tune 'zfs send' behaviour (optional); will be passed into 'zfs send' CLI. " 

708 "The value is split on runs of one or more whitespace characters. " 

709 "Default is '%(default)s'. To run `zfs send` without options, specify the empty " 

710 "string: `--zfs-send-program-opts=''`. " 

711 "See https://openzfs.github.io/openzfs-docs/man/master/8/zfs-send.8.html " 

712 "and https://github.com/openzfs/zfs/issues/13024\n\n" 

713 "If these options request a different effective raw or non-raw mode from the one recorded in an existing ZFS " 

714 f"receive resume token, {PROG_NAME} aborts the token (clears the incomplete receive state) and then proceeds " 

715 "as usual. ZFS may be unable to change the mode for an existing destination dataset. In that case, restore the " 

716 "previous send options.\n\n") 

717 parser.add_argument( 

718 "--zfs-recv-program-opts", type=str, default="-u", metavar="STRING", 

719 help="Parameters to fine-tune 'zfs receive' behaviour (optional); will be passed into 'zfs receive' CLI. " 

720 "The value is split on runs of one or more whitespace characters. " 

721 "Default is '%(default)s'. To run `zfs receive` without options, specify the empty " 

722 "string: `--zfs-recv-program-opts=''`. " 

723 "Example: '-u -o canmount=noauto -o readonly=on -x keylocation -x keyformat -x encryption'. " 

724 "See https://openzfs.github.io/openzfs-docs/man/master/8/zfs-receive.8.html " 

725 "and https://openzfs.github.io/openzfs-docs/man/master/7/zfsprops.7.html\n\n") 

726 parser.add_argument( 

727 "--zfs-recv-program-opt", action="append", default=[], metavar="STRING", 

728 help="Parameter to fine-tune 'zfs receive' behaviour (optional); will be passed into 'zfs receive' CLI. " 

729 "The value can contain spaces and is not split. This option can be specified multiple times. Example: `" 

730 "--zfs-recv-program-opt=-o " 

731 "--zfs-recv-program-opt='org.zfsbootmenu:commandline=ro debug zswap.enabled=1'`\n\n") 

732 parser.add_argument( 

733 "--preserve-properties", nargs="+", default=[], metavar="STRING", 

734 help="On replication, preserve the current value of ZFS properties with the given names on the destination " 

735 "datasets. The destination ignores the property value it zfs receive's from the source if the property name " 

736 "matches one of the given blacklist values. This prevents a compromised or untrusted source from overwriting " 

737 "security-critical properties on the destination. The default is to preserve none, i.e. an empty blacklist.\n\n" 

738 "Example blacklist that protects against dangerous overwrites: " 

739 "mountpoint overlay sharenfs sharesmb exec setuid devices encryption keyformat keylocation\n\n" 

740 "See https://openzfs.github.io/openzfs-docs/man/master/7/zfsprops.7.html and " 

741 "https://openzfs.github.io/openzfs-docs/man/master/8/zfs-receive.8.html#x\n\n" 

742 "Note: --preserve-properties uses the 'zfs recv -x' option and thus requires either OpenZFS ≥ 2.2.0 " 

743 "(see https://github.com/openzfs/zfs/commit/b0269cd8ced242e66afc4fa856d62be29bb5a4ff), or that " 

744 "'zfs send --props' is not used.\n\n") 

745 parser.add_argument( 

746 "--force-rollback-to-latest-snapshot", action="store_true", 

747 help="Before replication, rollback the destination dataset to its most recent destination snapshot (if there " 

748 "is one), via 'zfs rollback', just in case the destination dataset was modified since its most recent " 

749 "snapshot. This is much less invasive than the other --force* options (see below).\n\n") 

750 parser.add_argument( 

751 "--force-rollback-to-latest-common-snapshot", action="store_true", 

752 help="Before replication, delete destination ZFS snapshots that are more recent than the most recent common " 

753 "snapshot ('conflicting snapshots'), via 'zfs rollback'. Do no rollback if no common snapshot exists.\n\n") 

754 parser.add_argument( 

755 "--force", action="store_true", 

756 help="Same as --force-rollback-to-latest-common-snapshot (see above), except that additionally, if no common " 

757 "snapshot exists, then delete all destination snapshots before starting replication, and proceed " 

758 "without aborting. Without the --force* flags, the destination dataset is treated as append-only, hence " 

759 "no destination snapshot that already exists is deleted, and instead the operation is aborted with an " 

760 "error when encountering a conflicting snapshot.\n\n" 

761 "Analogy: --force-rollback-to-latest-snapshot is a tiny hammer, whereas " 

762 "--force-rollback-to-latest-common-snapshot is a medium sized hammer, --force is a large hammer, and " 

763 "--force-destroy-dependents is a very large hammer. " 

764 "Consider using the smallest hammer that can fix the problem. No hammer is ever used by default.\n\n") 

765 parser.add_argument( 

766 "--force-destroy-dependents", action="store_true", 

767 help="On destination, --force and --force-rollback-to-latest-common-snapshot and --delete-* will add the " 

768 "'-R' flag to their use of 'zfs rollback' and 'zfs destroy', causing them to delete dependents such as " 

769 "clones and bookmarks. This can be very destructive and is rarely advisable.\n\n") 

770 parser.add_argument( 

771 "--force-unmount", action="store_true", 

772 help="On destination, --force and --force-rollback-to-latest-common-snapshot will add the '-f' flag to their " 

773 "use of 'zfs rollback' and 'zfs destroy'.\n\n") 

774 parser.add_argument( 

775 "--force-once", "--f1", action="store_true", 

776 help="Use the --force option or --force-rollback-to-latest-common-snapshot option at most once to resolve a " 

777 "conflict, then abort with an error on any subsequent conflict. This helps to interactively resolve " 

778 "conflicts, one conflict at a time.\n\n") 

779 parser.add_argument( 

780 "--skip-parent", action="store_true", 

781 help="During replication and deletion, skip processing of the SRC_DATASET and DST_DATASET and only process " 

782 "their descendant datasets, i.e. children, and children of children, etc (with --recursive). No dataset " 

783 "is processed unless --recursive is also specified. " 

784 f"Analogy: `{PROG_NAME} --recursive --skip-parent src dst` is akin to Unix `cp -r src/* dst/` whereas " 

785 f" `{PROG_NAME} --recursive --skip-parent --skip-replication --delete-dst-datasets dummy dst` is akin to " 

786 "Unix `rm -r dst/*`\n\n") 

787 parser.add_argument( 

788 "--skip-missing-snapshots", choices=["fail", "dataset", "continue"], default="dataset", nargs="?", 

789 help="During replication, handle source datasets that select no snapshots (and no relevant bookmarks) " 

790 "as follows:\n\n" 

791 "a) 'fail': Abort with an error.\n\n" 

792 "b) 'dataset' (default): Skip the source dataset with a warning. Skip descendant datasets if " 

793 "--recursive and destination dataset does not exist. Otherwise skip to the next dataset.\n\n" 

794 "c) 'continue': Skip nothing. If destination snapshots exist, delete them (with --force) or abort " 

795 "with an error (without --force). If there is no such abort, continue processing with the next dataset. " 

796 "Eventually create empty destination dataset and ancestors if they do not yet exist and source dataset " 

797 "has at least one descendant that selects at least one snapshot.\n\n") 

798 parser.add_argument( 

799 "--retries", dest="max_retries", type=int, min=0, default=2, action=CheckRange, metavar="INT", 

800 help="The maximum number of times a retryable replication or deletion step shall be retried if it fails, for " 

801 "example because of network hiccups (default: %(default)s, min: %(min)s). " 

802 "Also consider this option if a periodic pruning script may simultaneously delete a dataset or " 

803 f"snapshot or bookmark while {PROG_NAME} is running and attempting to access it.\n\n") 

804 parser.add_argument( 

805 "--retry-min-sleep-secs", type=float, min=0, default=0, action=CheckRange, metavar="FLOAT", 

806 help="The minimum duration to sleep between retries (default: %(default)s).\n\n") 

807 parser.add_argument( 

808 "--retry-initial-max-sleep-secs", type=float, min=0, default=0.125, action=CheckRange, metavar="FLOAT", 

809 help="The initial maximum duration to sleep between retries (default: %(default)s).\n\n") 

810 parser.add_argument( 

811 "--retry-max-sleep-secs", type=float, min=0, default=5 * 60, action=CheckRange, metavar="FLOAT", 

812 help="The maximum duration to sleep between retries initially starts with --retry-initial-max-sleep-secs " 

813 "(see above), and doubles on each retry, up to the final maximum of --retry-max-sleep-secs " 

814 "(default: %(default)s). On each retry a random sleep time in the [--retry-min-sleep-secs, current max] range " 

815 "is picked. In a nutshell: retry-min-sleep-secs ≤ retry-initial-max-sleep-secs ≤ retry-max-sleep-secs. " 

816 "The timer resets after each operation.\n\n") 

817 parser.add_argument( 

818 "--retry-max-elapsed-secs", type=float, min=0, default=60 * 60, action=CheckRange, metavar="FLOAT", 

819 help="A single operation (e.g. 'zfs send/receive' of the current dataset, or deletion of a list of snapshots " 

820 "within the current dataset) will not be retried (or not retried anymore) once this much time has elapsed " 

821 "since the initial start of the operation, including retries (default: %(default)s). " 

822 "The timer resets after each operation completes or retries exhaust, such that subsequently failing " 

823 "operations can again be retried.\n\n") 

824 parser.add_argument( 

825 "--skip-on-error", choices=["fail", "tree", "dataset"], default=SKIP_ON_ERROR_DEFAULT, 

826 help="During replication and deletion, if an error is not retryable, or --retries has been exhausted, " 

827 "or --skip-missing-snapshots raises an error, proceed as follows:\n\n" 

828 "a) 'fail': Abort the program with an error. This mode is ideal for testing, clear " 

829 "error reporting, and situations where consistency trumps availability.\n\n" 

830 "b) 'tree': Log the error, skip the dataset tree rooted at the dataset for which the error " 

831 "occurred, and continue processing the next (sibling) dataset tree. " 

832 "Example: Assume datasets tank/user1/foo and tank/user2/bar and an error occurs while processing " 

833 "tank/user1. In this case processing skips tank/user1/foo and proceeds with tank/user2.\n\n" 

834 "c) 'dataset' (default): Same as 'tree' except if the destination dataset already exists, skip to " 

835 "the next dataset instead.\n\n" 

836 "Example: Assume datasets tank/user1/foo and tank/user2/bar and an error occurs while " 

837 "processing tank/user1. In this case processing skips tank/user1 and proceeds with tank/user1/foo " 

838 "if the destination already contains tank/user1. Otherwise processing continues with tank/user2. " 

839 "This mode is for production use cases that require timely forward progress even in the presence of " 

840 "partial failures. For example, assume the job is to backup the home directories or virtual machines " 

841 "of thousands of users across an organization. Even if replication of some of the datasets for some " 

842 "users fails due too conflicts, busy datasets, etc, the replication job will continue for the " 

843 "remaining datasets and the remaining users.\n\n") 

844 parser.add_argument( 

845 "--skip-replication", action="store_true", 

846 help="Skip replication step (see above) and proceed to the optional --delete-dst-datasets step " 

847 "immediately (see below).\n\n") 

848 parser.add_argument( 

849 "--delete-dst-datasets", action="store_true", 

850 help="Do nothing if the --delete-dst-datasets option is missing. Otherwise, after successful replication " 

851 "step, if any, delete existing destination datasets that are selected via --{include|exclude}-dataset* " 

852 "policy yet do not exist within SRC_DATASET (which can be an empty dataset, such as the hardcoded virtual " 

853 f"dataset named '{DUMMY_DATASET}'!). Do not recurse without --recursive. With --recursive, never delete " 

854 "non-selected dataset subtrees or their ancestors.\n\n" 

855 "For example, if the destination contains datasets h1,h2,h3,d1 whereas source only contains h3, " 

856 "and the include/exclude policy selects h1,h2,h3,d1, then delete datasets h1,h2,d1 on " 

857 "the destination to make it 'the same'. On the other hand, if the include/exclude policy " 

858 "only selects h1,h2,h3 then only delete datasets h1,h2 on the destination to make it 'the same'.\n\n" 

859 "Example to delete all tmp datasets within tank2/boo/bar: " 

860 f"`{PROG_NAME} {DUMMY_DATASET} tank2/boo/bar --dryrun --skip-replication --recursive " 

861 "--delete-dst-datasets --include-dataset-regex '(.*/)?tmp.*' --exclude-dataset-regex '!.*'`\n\n") 

862 parser.add_argument( 

863 "--delete-dst-snapshots", choices=["snapshots", "bookmarks"], default=None, const="snapshots", nargs="?", 

864 help="Do nothing if the --delete-dst-snapshots option is missing. Otherwise, after successful " 

865 "replication, and successful --delete-dst-datasets step, if any, delete existing destination snapshots " 

866 "whose GUID does not exist within the source dataset (which can be an empty dummy dataset!) if the " 

867 "destination snapshots are selected by the --include/exclude-snapshot-* policy, and the destination " 

868 "dataset is selected via --{include|exclude}-dataset* policy. Does not recurse without --recursive.\n\n" 

869 "For example, if the destination dataset contains snapshots h1,h2,h3,d1 (h=hourly, d=daily) whereas " 

870 "the source dataset only contains snapshot h3, and the include/exclude policy selects " 

871 "h1,h2,h3,d1, then delete snapshots h1,h2,d1 on the destination dataset to make it 'the same'. " 

872 "On the other hand, if the include/exclude policy only selects snapshots h1,h2,h3 then only " 

873 "delete snapshots h1,h2 on the destination dataset to make it 'the same'.\n\n" 

874 "*Note:* To delete snapshots regardless, consider using --delete-dst-snapshots in combination with a " 

875 f"source that is an empty dataset, such as the hardcoded virtual dataset named '{DUMMY_DATASET}', like so:" 

876 f" `{PROG_NAME} {DUMMY_DATASET} tank2/boo/bar --dryrun --skip-replication --delete-dst-snapshots " 

877 "--include-snapshot-regex '.*_daily' --recursive`\n\n" 

878 "*Note:* Use --delete-dst-snapshots=bookmarks to delete non-temporary bookmarks instead of snapshots, in " 

879 "which case no snapshots are selected and the --{include|exclude}-snapshot-* filter options treat bookmarks " 

880 "as snapshots wrt. selecting.\n\n" 

881 "*Note:* Does not attempt to delete snapshots that carry a `zfs hold`; instead auto-skips them without " 

882 "failing.\n\n" 

883 "*Performance Note:* --delete-dst-snapshots operates on multiple datasets in parallel (and serially " 

884 f"within a dataset), using the same dataset order as {PROG_NAME} replication. " 

885 "The degree of parallelism is configurable with the --threads option (see below).\n\n") 

886 parser.add_argument( 

887 "--force-delete-dst-tmp-bookmarks", action="store_true", 

888 help=argparse.SUPPRESS) 

889 parser.add_argument( 

890 "--delete-dst-snapshots-no-crosscheck", action="store_true", 

891 help="This flag indicates that --delete-dst-snapshots=snapshots shall check the source dataset only for " 

892 "a snapshot with the same GUID, and ignore whether a bookmark with the same GUID is present in the " 

893 "source dataset. Similarly, it also indicates that --delete-dst-snapshots=bookmarks shall check the source " 

894 "dataset only for a bookmark with the same GUID, and ignore whether a snapshot with the same GUID is present " 

895 "in the source dataset.\n\n") 

896 parser.add_argument( 

897 "--delete-dst-snapshots-except", action="store_true", 

898 help="This flag indicates that the --include/exclude-snapshot-* options shall have inverted semantics for the " 

899 "--delete-dst-snapshots option, thus deleting all snapshots except for the selected snapshots (within the " 

900 "specified datasets), instead of deleting all selected snapshots (within the specified datasets). In other " 

901 "words, this flag enables to specify which snapshots to retain instead of which snapshots to delete.\n\n" 

902 "*Synchronization vs. Backup*: When a real (non-dummy) source dataset is specified in combination with " 

903 "--delete-dst-snapshots-except, then any destination snapshot retained by the rules above is actually only " 

904 "retained if it also exists in the source dataset - __all other destination snapshots are deleted__. This is " 

905 "great for synchronization use cases but should __NEVER BE USED FOR LONG-TERM ARCHIVAL__. Long-term archival " 

906 "use cases should instead specify the `dummy` source dataset as they require an independent retention policy " 

907 "that is not tied to the current contents of the source dataset.\n\n") 

908 parser.add_argument( 

909 "--delete-dst-snapshots-except-plan", action=DeleteDstSnapshotsExceptPlanAction, default=None, metavar="DICT_STRING", 

910 help="Retention periods to be used if pruning snapshots or bookmarks within the selected destination datasets via " 

911 "--delete-dst-snapshots. Has the same format as --create-src-snapshots-plan. " 

912 "Snapshots (--delete-dst-snapshots=snapshots) or bookmarks (with --delete-dst-snapshots=bookmarks) that " 

913 "do not match a period will be deleted. To avoid unexpected surprises, make sure to carefully specify ALL " 

914 "snapshot names and periods that shall be retained, in combination with --dryrun.\n\n" 

915 f"Example: `{format_dict(src_snapshot_plan_example)}`. This example will, for the organization 'prod' and " 

916 "the intended logical target 'onsite', retain secondly snapshots that were created less than 40 seconds ago, " 

917 "yet retain the latest 40 secondly snapshots regardless of creation time. Analog for the latest 40 minutely " 

918 "snapshots, latest 36 hourly snapshots, etc. " 

919 "It will also retain snapshots for the targets 'us-west' and 'eu-west' within the 'prod' organization. " 

920 "In addition, within the 'test' organization, it will retain snapshots that are created every 12 hours and " 

921 "every week as specified, and name them as being intended for the 'offsite' replication target. Analog for " 

922 "snapshots that are taken every 100 milliseconds within the 'test' organization. " 

923 "All other snapshots within the selected datasets will be deleted - you've been warned!\n\n" 

924 "The example scans the selected ZFS datasets for snapshots with names like " 

925 "`prod_onsite_<timestamp>_secondly`, `prod_onsite_<timestamp>_minutely`, " 

926 "`prod_us-west_<timestamp>_hourly`, `prod_us-west_<timestamp>_daily`, " 

927 "`prod_eu-west_<timestamp>_hourly`, `prod_eu-west_<timestamp>_daily`, " 

928 "`test_offsite_<timestamp>_12hourly`, `test_offsite_<timestamp>_weekly`, and so on, and deletes all snapshots " 

929 "that do not match a retention rule.\n\n" 

930 "Note: A zero within a period (e.g. 'hourly': 0) indicates that no snapshots shall be retained for the given " 

931 "period.\n\n" 

932 "Note: --delete-dst-snapshots-except-plan is a convenience option that auto-generates a series of the " 

933 "following other options: --delete-dst-snapshots-except, " 

934 "--new-snapshot-filter-group, --include-snapshot-regex, --include-snapshot-times-and-ranks\n\n") 

935 parser.add_argument( 

936 "--delete-empty-dst-datasets", choices=["snapshots", "snapshots+bookmarks"], default=None, 

937 const="snapshots+bookmarks", nargs="?", 

938 help="Do nothing if the --delete-empty-dst-datasets option is missing or --recursive is missing. Otherwise, " 

939 "after successful replication " 

940 "step and successful --delete-dst-datasets and successful --delete-dst-snapshots steps, if any, " 

941 "delete any selected destination dataset that has no snapshot and no bookmark if all descendants of " 

942 "that destination dataset are also selected and do not have a snapshot or bookmark either " 

943 "(again, only if the existing destination dataset is selected via --{include|exclude}-dataset* policy). " 

944 "Never delete non-selected dataset subtrees or their ancestors.\n\n" 

945 "For example, if the destination contains datasets h1,d1, and the include/exclude policy " 

946 "selects h1,d1, then check if h1,d1 can be deleted. " 

947 "On the other hand, if the include/exclude policy only selects h1 then only check if h1 can be deleted.\n\n" 

948 "*Note:* Use --delete-empty-dst-datasets=snapshots to delete snapshot-less datasets even if they still " 

949 "contain bookmarks.\n\n") 

950 monitor_snapshot_plan_example = { 

951 "prod": { 

952 "onsite": { 

953 "100millisecondly": {"latest": {"warning": "300 milliseconds", "critical": "2 seconds"}}, 

954 "secondly": {"latest": {"warning": "2 seconds", "critical": "14 seconds"}}, 

955 "minutely": {"latest": {"warning": "30 seconds", "critical": "300 seconds"}}, 

956 "hourly": {"latest": {"warning": "30 minutes", "critical": "300 minutes"}}, 

957 "daily": {"latest": {"warning": "4 hours", "critical": "8 hours"}}, 

958 "weekly": {"latest": {"warning": "2 days", "critical": "8 days"}}, 

959 "monthly": {"latest": {"warning": "2 days", "critical": "8 days"}}, 

960 "yearly": {"latest": {"warning": "5 days", "critical": "14 days"}}, 

961 "10minutely": {"latest": {"warning": "0 minutes", "critical": "0 minutes"}}, 

962 }, 

963 "": { 

964 "daily": {"latest": {"warning": "4 hours", "critical": "8 hours"}}, 

965 }, 

966 }, 

967 } 

968 monitor_snapshots_output_example: str = ( 

969 "`--monitor_snapshots: OK. Latest snapshot for tank/foo@prod_<timestamp>_daily is 4.18h old: @prod_2025-01-10_08:30:05_daily`\n\n" 

970 "`--monitor_snapshots: OK. Latest snapshot for tank/bar@prod_<timestamp>_daily is 4.18h old: @prod_2025-01-10_08:30:05_daily`\n\n" 

971 "`--monitor_snapshots: Latest snapshot for tank/baz@prod_<timestamp>_daily is 1.2d old but should be at most 1.1d old: @prod_2025-01-09_08:30:05_daily`\n\n" 

972 " ...\n\n" 

973 "`ERROR: Exiting bzfs with status code 2. Cause: --monitor_snapshots: Latest snapshot for tank/baz@prod_<timestamp>_daily is 1.2d old but should be at most 1.1d old: @prod_2025-01-09_08:30:05_daily`\n\n" 

974 ) 

975 parser.add_argument( 

976 "--monitor-snapshots", default="{}", type=str, metavar="DICT_STRING", 

977 help="Do nothing if the --monitor-snapshots flag is missing. Otherwise, after all other steps, " 

978 "alert the user if the ZFS 'creation' time property of the latest snapshot for any specified snapshot name " 

979 "pattern within the selected datasets is too old wrt. the specified age limit. The purpose is to check if " 

980 "snapshots are successfully taken on schedule, successfully replicated on schedule, and successfully pruned on " 

981 "schedule. Process exit code is 0, 1, 2 on OK, WARNING, CRITICAL, respectively. " 

982 f"Example DICT_STRING: `{format_dict(monitor_snapshot_plan_example)}`. " 

983 "This example alerts the user if the latest src or dst snapshot named `prod_onsite_<timestamp>_hourly` is more " 

984 "than 30 minutes late (i.e. more than 30+60=90 minutes old) [warning] or more than 300 minutes late (i.e. more " 

985 "than 300+60=360 minutes old) [critical]. " 

986 "Analog for the latest snapshot named `prod_<timestamp>_daily`, and so on.\n\n" 

987 "Note: A duration that is missing or zero (e.g. '0 minutes') indicates that no snapshots shall be checked for " 

988 "the given snapshot name pattern.\n\n" 

989 f"Example output with `--verbose`:\n\n{monitor_snapshots_output_example}\n\n") 

990 parser.add_argument( 

991 "--monitor-snapshots-dont-warn", action="store_true", 

992 help="Log a message for monitoring warnings but nonetheless exit with zero exit code.\n\n") 

993 parser.add_argument( 

994 "--monitor-snapshots-dont-crit", action="store_true", 

995 help="Log a message for monitoring criticals but nonetheless exit with zero exit code.\n\n") 

996 parser.add_argument( 

997 "--monitor-snapshots-no-latest-check", action="store_true", 

998 # help="Disable monitoring check of latest snapshot.\n\n") 

999 help=argparse.SUPPRESS) 

1000 parser.add_argument( 

1001 "--monitor-snapshots-no-oldest-check", action="store_true", 

1002 # help="Disable monitoring check of oldest snapshot.\n\n") 

1003 help=argparse.SUPPRESS) 

1004 cmp_choices_dflt: str = "+".join(CMP_CHOICES_ITEMS) 

1005 cmp_choices: list[str] = [] 

1006 for i in range(len(CMP_CHOICES_ITEMS)): 

1007 cmp_choices += ["+".join(c) for c in itertools.combinations(CMP_CHOICES_ITEMS, i + 1)] 

1008 parser.add_argument( 

1009 "--compare-snapshot-lists", choices=cmp_choices, default="", const=cmp_choices_dflt, nargs="?", 

1010 help="Do nothing if the --compare-snapshot-lists option is missing. Otherwise, after successful replication " 

1011 "step and successful --delete-dst-datasets, --delete-dst-snapshots steps and --delete-empty-dst-datasets " 

1012 "steps, if any, proceed as follows:\n\n" 

1013 "Compare source and destination dataset trees recursively wrt. snapshots, for example to check if all " 

1014 "recently taken snapshots have been successfully replicated by a periodic job.\n\n" 

1015 "Example: List snapshots only contained in source (tagged with 'src'), only contained in destination " 

1016 "(tagged with 'dst'), and contained in both source and destination (tagged with 'all'), restricted to " 

1017 "hourly and daily snapshots taken within the last 7 days, excluding the last 4 hours (to allow for some " 

1018 "slack/stragglers), excluding temporary datasets: " 

1019 f"`{PROG_NAME} tank1/foo/bar tank2/boo/bar --skip-replication " 

1020 "--compare-snapshot-lists=src+dst+all --recursive --include-snapshot-regex '.*_(hourly|daily)' " 

1021 "--include-snapshot-times-and-ranks '7 days ago..4 hours ago' --exclude-dataset-regex 'tmp.*'`\n\n"