Release Notes for Bacula Enterprise 18.2

Enterprise

Bacula Enterprise Only

This solution is only available for Bacula Enterprise. For subscription inquiries, please reach out to sales@baculasystems.com.

Both the Director (Dir) and all Storage Daemons (SDs) must be upgraded to version 18.2 as they are not compatible with earlier versions.

Catalog format in version 18.0 and greater:

If you upgrade from 18.0 to 18.2, you will not need to run the update_bacula_tables script.

The major release 18.0 of Bacula uses a new catalog format. We provide a set of scripts that convert 6.6.x and earlier catalog versions to the new 18.0 format (1027). See the “migrationNewMajorVersionBacula” for detailed instructions on the migration process.

The database upgrade from 1026 to 1027 is fast and simple for most users.

The Bacula Enterprise RPM spec files have been modified to detect the database change and to perform the upgrade for you (from 8.10, 10.0, 10.2, etc.). We strongly recommend that you save a copy of your existing database before upgrading using RPMs. If you want to have more control over the catalog upgrade step when upgrading using RPMs, you may want to contact the Bacula Systems support team to get the update_bacula_tables script from the updated package and run it before the RPM installation step, or you can stop the database server before the upgrade.

The Bacula Enterprise Debian and Ubuntu packages have been designed to upgrade the catalog with the dbconfig database management tool. The update_bacula_tables script from the Director package can be used to upgrade the catalog manually.

If you upgrade the BWeb Management Suite from 8.x and you use a MySQL catalog, you must first update the BWeb SQL tables with the script upgrade-8.8_10.2_mysql.sql.

If you are starting from scratch, you will not need to run the update_bacula_tables script since the create_bacula_tables script creates the tables in the new format automatically.

Important notes:

If you upgrade to from a new 16.0.0-5 to 16.0.6-8 installation with a MySQL catalog, the following SQL command must be executed in order to use the JobHisto table and features:

ALTER TABLE JobHisto
ADD COLUMN RealStartTime DATETIME, ADD COLUMN isVirtualFull - TINYINT - default 0, ADD COLUMN CompressRatio - float - default 0, ADD COLUMN Rate - - - float - default 0, ADD COLUMN LastReadStorageId Integer - default 0, ADD COLUMN LastReadDevice - blob, ADD COLUMN WriteStorageId - integer - default 0, ADD COLUMN WriteDevice - blob, ADD COLUMN StatusInfo - - blob, ADD COLUMN Encrypted - - int - - default 0;

For Restricted Console users, we have changed slightly the DirectoryACL=*all* and UserIdACL=*all*, if the directives are not defined in a restricted console, the restore code will allow the file listing.

Old File Daemon versions are still compatible and can be used to protect older systems such as Redhat 5-6, SLES 10-11.2.

Known Issues and Workarounds:

#1723 The hardlinks=yes FileSet option is not compatible with VirtualFull jobs.

This incompatibility might lead to problems performing a restore. The error message displayed during a restore job is:

Error: create_file.c:327 Could not hard link /path: ERR=No such file or directory

To restore the file correctly, the first occurrence of the hardlink file in the backup must be selected manually. The procedure to distinguish hardlinks in the catalog is available from the Bacula Systems Support team.

#4957 Copy/Migration/VirtualFull jobs based on Incomplete jobs - a potential issue.

Under some circumstances a Copy/Migration/VirtualFull job may not be able to copy the data from a Job that was interrupted and restarted using the Incomplete Job feature. In versions 10.2.3 and above, the Copy/Migration/VirtualFull job is aborted with the following error message:

Fatal error: catreq.c:691 SHA1 digest not same FileIndex=344 as attributes FI=343

or

Fatal error: catreq.c:691 MD5 digest not same FileIndex=344 as attributes FI=343

It is recommended to re-execute the Job that was interrupted and restarted to be able to copy/migrate the data. We do NOT recommend including Incomplete Jobs into a Progressive Virtual Full chain of jobs.

The automatic rescheduling of Incomplete Jobs should be disabled to avoid restarted Incomplete jobs finishing successfully and being selected to be copied, migrated, or consolidated in a Virtual Full. To prevent Bacula from rescheduling Incomplete Jobs, use the “RescheduleIncompleteJobs = no” Job directive.

Please contact the Bacula Systems Support team for more information on any of the above issues.

Release 18.2.1 / 08 October 2025 

Bguardian:

bguardian: Add output parameter and modify behavior of silent to avoid output if necessary
bguardian: Fix issues count missmatch. Try to fix Json infinite value issue: #11539

BSnapDiff:

bsnapdiff-zfs: better bug fix for virtual full previous job and jobid
bsnapdiff-zfs: bug fix for xattr=on ZFS setting for extended attributes
bsnapdiff-zfs: bug fix for xattr=on default for ZFS configuration
bsnapdiff-zfs: two bug fixes for zfs bsnapdiff plugin

BWeb Management Console:

bweb: Adapt btime for new SD messages on encrypted volumes
bweb: Add autosplit plugin to the scan_plugin
bweb: Add console definitions for default roles based on CommandACLs
bweb: Add daemon log retention directive
bweb: Add extra jobid check in get_log()
bweb: Add index option to the xenserver configuration page
bweb: Add new checksum signature to fileset edition page
bweb: Add oauth2 install script to the package
bweb: Add test for the number of daemon log message
bweb: Basic Okta integration
bweb: Fix #11528 About changing syslog to journal in bweb systemd service file
bweb: Fix #11538 about quobyte integration
bweb: Fix #11561 About empty VMware dashboard
bweb: Fix #11595 Fix profile configuration field to provide user/password/host/port
bweb: Fix #11679 about LinBMR new job wizard does not populate FileSet ACL
bweb: Fix #11692 Add MaximumConcurrentJobs entry in new storage wizard
bweb: Fix another occurence of HTTP2 problem because of the header
bweb: Fix oauth2-proxy deployment when BWeb is not configured. Fix HTTP2 protocol error problem in XHR Request because of : in header names
bweb: Fix problem with Ajax calls reading BConsole async calls and generating HTTP2 invalid headers
bweb: Fix search button in run job page
bweb: Fix security dashboard problems #11533 #11534
bweb: Force content-type for json output
bweb: Improve install_bweb.sh to report errors correctly
bweb: OAuth2 -> Integration of bweb roles ; Logout screen ; Control of headers ; User_info screen
bweb: OAuth2 scripts integration for packaging. Substitute : for html code. Bim fixes around OAuth2. Bim certificate with IP/Name
bweb: OAuth2/OIDC adjustments to support MS Entra ID as well
bweb: Solve scan plugin previsualization problem with users and group. Solve endless loading when m365 add-app is used
bweb: Use python3 in install_win.py script
bweb: oauth2-proxy installation script and sample config. Basic integration in BIM
bweb: Sort the plugins in bweb.js
bweb: Use RoleACL in predefined roles
bweb: Add support to ConsoleDefs

Cloud Storage:

cloud: Fix #11530 about segfault with large number of upload and/or running jobs
cloud: Fix #11586 remove extra delete call prior to upload
cloud: Fix QA-Cloud-Amazon#15 upload issue introduced in 18.0.9
cloud: Fix upload message after an error

Deduplication:

dedup2: Fix frozen job after silent error on the index

Documentation:

docs: Add OpenStack examples for the scan_plugin and BWeb automation
docs: Add description and values to Console Defs
docs: Amazon RDS Plugin
docs: Publish Navigation Project to 18.1

Google Workspace Plugin:

google-workspace: Include missing files in Incremental backups when they are uploaded, but keeping original modified times

HPC Accelerator:

big-fs: Add support for Fileset options exclude rules
big-fs: Fix backup of untouched directories
big-fs: Fix dependency selection
big-fs: Handle the case where the link doesn’t have a / at the end
big-fs: Update makefile for more coherent log messages
big-fs: Add dummy deleted record in master job
big-fs: Add support for Exclude rules
big-fs: Do regular job if the number of workers is too small
big-fs: Fix restore job selection
big-fs: Increment num_files_examined when listing files
big-fs: Update status client with the current filename on the master job
big-fs: Adapt install-big-fs.sh for the Storage Daemon
big-fs: Add Accurate=yes to the default job generated by install-big-fs.sh
big-fs: Add AllowIncompleteJobs and more precise setup for Job clause in install script
big-fs: Add additional information in default fs backint fon file
big-fs: Add check for fs-backint binary existence
big-fs: Add protocol to count SKIPPED files
big-fs: Adds safegard in case ACL are wrongs and all workers get ended early
big-fs: Allows only master job to start fs-backint instances from sap-fd
big-fs: Avoid segfault with incorrect command line
big-fs: By default checkpoint are deactivated and a min value is set if user try to set it
big-fs: Change default fileset to use Include/File and define the number of workers to 3
big-fs: Changed default lookup conffile lookup to be coherent between sap-fd and backint
big-fs: Changed permission on /opt/bacula/big-fs to allow read for everyone
big-fs: Checkpoint depending on time and total number of files per worker implementation
big-fs: Comment out unused checkpoint feature
big-fs: Correctly end backup in error and kill fs-backint when no connection is possible
big-fs: Disable processing_time/processing_files
big-fs: Do not display additional fs-backint execution failure when no conf file found
big-fs: Enhance the “Unable to contact” message
big-fs: Fix #11338 big fs binary helper updated for big fs mode
big-fs: Fix exit status of fs-backint after a mismatch
big-fs: Fix missing double quote in Fileset Plugin= line AND remove unecessary check for restore and include parameter
big-fs: Fix waitjobcompletion not working
big-fs: Improve cancel code
big-fs: Install script has command acl cancel in default dir conf
big-fs: Jobs bails out if maximumconcurrentjob=1 to avoid infinite stalling
big-fs: Put default value for maximum concurrent job to 3
big-fs: Remove redundant flag bad_connction using canceled instead for same result
big-fs: Remove test routine in installer that makes use of broken big-fs CLI
big-fs: Sends cancel instead of wait if a worker is starting when going into bail out
big-fs: Setup for new max process/time limit
big-fs: Share the accurate table with workers
big-fs: Start bacula job with controljobid and accurate=no
big-fs: Update install script group attribution to big-fs folder
big-fs: Updated log info for close_bpipe
big-fs: Use a timeout when connecting bacula
big-fs: fs-backint reports status to sap-fd if waitjobcompletion is set
big-fs: use bVarControlJob to generate lock file
big-fs: waitjobcompletion set to true in default fs-backint conf file from install script

Kubernetes and Openshift Plugins:

k8s: Add checking if the filesystem type of pv matches with the filesystem type of storage class
k8s: Add environment information when execute with debug >= 2
k8s: Added fileset parameters with ‘_’ to improve readability
k8s: Change default key name in kubernetes secret etcd certs
k8s: Compatibility with storage class in WaitForFirstConsumer mode.
k8s: Fix 0011554. Allows cloned pvcs access to multi node
k8s: Fix 0011554. The clone pvc get the access mode from original pvc
k8s: Fix 001160. Check if the Longhorn pvc, created from vsnapshot, is ready to work
k8s: Fix 0011606.Wait until the PVC is available
k8s: Fix 0011644. Problem with index out in input parameters
k8s: Fix bacula-backup name using a job name with _
k8s: Fix bug in pvc backups
k8s: Fix bug in query action: user_permissions
k8s: Fix bugs to found old pvc before the backup
k8s: Fix cloned pvc names when the job name contains illegal character for k8s
k8s: Fix compilation cython error caused by typing list[str]
k8s: Fix duplicated empty clone error message
k8s: Fix error when trying to check compatibility with snapshot backup and there are not any storage classes
k8s: Fix some bugs and add tunning parameters
k8s: Improve pod logs
k8s: Omit other bacula backup pvcs during backup
k8s: Refactor fileset parameters with retrocompatibility and optimizations
k8s: Update python dependencies
k8s: add a check to see if the file formats of the pv and storage class match
k8s: update kubernetes image
k8s: Increase the backend timeout from 1 hour to 48 hours
openshift: Support backup/restore routes

Linux BMR:

Bacula-rescue.sh: 2.5.2 collect LVM configuration files
Bacula-rescue.sh: 2.5.3 LVM and multipath conf files + rpm/deb package list
Bacula-rescue.sh: 2.5.4 Fix check for /etc/multipath.conf and redirect stderr

LibVIRT:

Add LibVIRT Plugin
libvirt: Add custom libvirt-java library to allow remote backups
libvirt: Add default parameters to timeouts and intervals
libvirt: Add libvirt in bweb
libvirt: Add network backup configuration
libvirt: Add network backup parameter
libvirt: Add networks directory in list root directory
libvirt: Add new fileset parameter: ‘nbd_access’
libvirt: Add parameter ‘abort_on_error’ for this plugin on Bweb
libvirt: Add remote backup logic and optimization code to waiting
libvirt: Add restore domain on remote host via ssh
libvirt: Add storage_pool_config fileset parameter
libvirt: Change backup methods and add a new fileset parameter ‘nbd_access’
libvirt: Change default temporary directory, documented the parameters and change name the timeout to mount the disks
libvirt: Change fileset parameter from ‘temporal_dir’ to ‘temporary_dir’
libvirt: Change parameter ‘temporary_dir’ to ‘tmp_dir’
libvirt: Compatibility with raw disks. Only full backups
libvirt: Edit restore options
libvirt: Fix NullPointerException in estimation
libvirt: Fix custom quiesce, change parameter ‘temporary_dir’ to ‘tmp_dir’, add try option in quiesce parameter
libvirt: Fix debug message levels
libvirt: Fix debug message replacements, bjoblist and backup domains without disks
libvirt: Fix fileset parameters
libvirt: Fix log info when connect to hypervisor in listing or query operations
libvirt: Fix override domain with checkpoints
libvirt: Fix problem with offline domains and estimation job
libvirt: Fix version in Bweb
libvirt: Integrate with BWeb
libvirt: Optimization to avoid sending zeros and fixing problem with unformatted disks
libvirt: Shows the input fileset parameters when starts the job in debug mode
libvirt: Throw error if the user tries to backup a raw disk format

Lustre:

lustre-xatrr: Add support for LUSTRE-specific Attributes

Microsoft 365 Plugin:

m365: Add mechanism to include project commit sha. Add backend command ‘sha’ to query it easily
m365: Change mail to userPrincipalName in user management as there can be users without mail. Include mailboxes without mail, but with inbox
m365: Data spooling new variables to avoid filesystem filling and limit the behavior at will
m365: Fix .query login for groups and sites
m365: Fix Drive backup not using delta for Inc backup in certain circunstances
m365: Fix add owner to app step during add-app command
m365: Fix bug about template and restore object at restore time in sharepoint
m365: Fix incorrect template size comparison #11580
m365: Fix wrong email destination folder at restore time, when there are folders and sub-folders with the same name #11702
m365: Generate a warning instead of an error when a file is over the spooling configured limit
m365: Comments about recovery actions and roles used
m365: More strict message flag check. Generalize cleaning messages before restore beyond events. New attachment upload ConnectionRequestTimeout
m365: New spooling parameters
m365: OneNote through delegated permissions. Support for Sites in delegated permissions and Global Admin user when no owners are found
m365: User license better check and to debug message. spool_max_file_size_bytes parameter. Fixes on Onenote and Calendars

MySQL Plugin:

mysql: Fix #11736 about dump_opt generating incorrect command line

NDMP Plugin:

ndmp: Fix #11568 About issue when scanning history file on Isilon

Nutanix AHV Plugin:

nutanix-ahv: Add plugin disk_exclude parameter to bacula
nutanix-ahv: Implement true backward compatibility between plugin versions
nutanix-ahv: Possibility to ignore disks at backup by ID

OpenStack Plugin:

openstack: Add fallback procedure if server creation fails due to network

Packages:

debs: Add support for Debian 13
rpms: Add support for RHEL10
rpms: Fix incorrect dependency on python33

PostgreSQL Plugin:

postgres: Change bVarSince type from int to utime_t
postgres: Fix #11598 About PostgreSQL 9.5 compatibility
postgres: Fix #11603 About restore error when restoring existing databases

Proxmox Plugin:

proxmox: Add support for 9.x

Quobyte Snapshot:

quobyte: Add support for multi-cluster environnement
quobyte: Display an error if the parameter is incorrect
quobyte: Fix #11600 Add abort_on_error option to the quobyte plugin
quobyte: Implement check command for .query interface

RHV Plugin:

rhv: Add new parameter ‘use_imageio_in_mng_node’ to switch if get the disk data from manager node or directly from host
rhv: Exclude disks early with target_exclude_disks and show warning instead of error for blocked disks #11661
rhv: Fix Incorrect URL when getting the Proxy image service URL and the Server parameter has a port in its URL
rhv: Update log4j libraries

S3 Object Plugin:

s3: Add plugin restore parameter config_file

Scan Plugin:

scan_plugin: Fix #11314 About incorrect EnableVSS setting for MSSQL jobs
scan_plugin: Fix #11522 About EnableVSS for specific plugins
scan_plugin: Fix #11584 Add –value-re-match and –value-re-replace parameters
scan_plugin: Fix #11602 Allow to specify fileset directives in –fs_option

Snapshot:

snapshot: Add support for recent LVM output
snapshot: bug fixes for OneFS=no and others

Volume Encryption:

Improve volume encryption key-manager & installer
Add more encryption algorithms to the Volume encryption
Volume encryption handel passphrase request from the key-manager

vSphere Plugin:

vsphere: Add message about download VMX/NVRAM being only possible from vCenter node
vsphere: Downgrade maven exec plugin so it’s compatible with RHEL 7
vsphere: Download files (nvram, vmx) with session cookie instead of Basic Auth. Some extra debug
vsphere: Fix “main ERROR Unrecognized format specifier [d]” log4j error, by updating the library
vsphere: Fix bad datastore name when downloading NVRAM and/or VMX
vsphere: Fix building by installing yavijava before compiling code
vsphere: Fix no log output after library update, by adding log4j1.compatibility flag
vsphere: Fix sha command in vsphere-ctl

Windows File Daemon:

win32: move to openssl 3.5
win32: remove openssl 3.X warnings about the use of MD5 deprecated functions
win32: remove warning about unused variable
win32: skip junction point when portable=yes
win32: Fix 30s restore delay by using a “condition” instead of pthread_kill()

XEN/XCP-NG:

sir: Add support for XEN/XCP-NG incremental backups with index feature
xenserver: Add “index” plugin parameter support to speed up SIR sessions
xenserver: Read allowed_operations from VDI resources to determine if a disk is an ISO and discard it. Not fail when CBT is ‘not supported’
xenserver: Set ObjectStatus for each VM backed up

Miscellaneous:

Add ConsoleDefs and sub-command ACL to CommandACL
Add RoleACL to Console resource
Do not call signal handler if a bpipe command get killed before the execution
Do not duplicate results of bvfs_get_jobids
Fix segfault in bcopy with dedupengine
update mtx-changer-python to 1.32
release: Add SHA information to source archive
meta-plugin: Capability to change the level after instance the BJoblist
Add autosplit plugin to automatically split directories with the scan plugin
Add package for SNMP Bacula service
Add Catalog/DaemonLogRetention directive and specific prune command to prune Daemon log messages
Add maximum concurrent jobs to JSON status dir output
Add maximum_concurrent_jobs to Storage Daemon status output
Modify “show fileset” to display “ext2/ext3/ext4” instead of “ext2”
Improve the BSR Do not split a BSR if no file span the volumes
Fix #11718 Flush logs after an event
Fix #11502 Hide vacuum permission errors on system tables with Postgresql 16
Fix #11610 About incorrect backup behavior with client dynamic fileset
Fix #11620 xattr size change during backup
Fix #11671 About segfault in the Director when using unstable connections and ConnectToDirector
Fix #11676 Improve restore messages
Fix #11698 Immutability not always applied to the Aligned .add volume
Fix 10717 dedup2 show orphan=NA when checkmiss is not used in vacuum
Fix 11622: Comm Line Compression looks to be not working above 4GiB.
Fix XXHASH* verify S6, S7 & S8 unrecognized options
Fix loggin errors in dbcheck and in filed/restore.c
Implement fstype aliases (fat, vfat, fat32) => msdos & (ext3, ext4) => ext2
Avoid execution issue with runscript Queued
Redirect Runscript/Console messages directly to the Job message resource
Stop using deprecated openssl EVP_PKEY_(en|de)crypt_old(), HASH, EVP_MD_CTX_md and DH file loading functions
Add malloc less backtrace stack
bat: Fix restore progress bar

Bugs fixed/closed since last release: 11314 11338 11502 11522 11528 11530 11533 11538 11539 11561 11568 11580 11584 11586 11595 11598 11600 11602 11603 11610 11620 11661 11671 11676 11679 11692 11698 11702 11736

Release 18.2.0 / 19 May 2025 

18.2.0 is a major release. There are new features and fixes. More detailed information can be found in the ChangeLog file.

Applications and Databases:

Add Amazon RDS Plugin
Add multi-concurrent job Fileset support (big-fs)
Support for LDAP on Redhat 8 and 9
Windows and Linux BMR (support for RHEL9+UEFI, multi-path and swapfile) updates

BWeb Management Console:

Automation Wizard expended - Allow deletion of generated jobs - Add workset integration
Rework of the Autochanger management page
Use secure attribute in HTTPS only
Simplify openssl command to generate certificate
Display a warning if https is not used
Add support for Dedup2 in new storage wizard

Security & Core:

FIPS 140-3 compliance with SCRAM-SHA256 support
Core performance improvement

Single Item Restore:

The support for Nutanix, Azure VM, HyperV, OpenStack and Amazon EC2 has been added

Snapshot Support:

Add BSnapDiff fast incremental accelerator for ZFS
Add support for the Quobyte

CitrixHypervisor (Xenserver) Plugin:

Add support for XCP-NG
Add secure mode compatibility

Google Workspace Plugin:

Add suspended user parameter to backup and query
Add export type parameters
Fix issue when reading messages without label #11469. Fix internal error messages about ‘no app name’
Export Google Documents by exportLinks when available. Allow to configure export targets

Hypervisor to Cloud (EC2) Migration:

Tools to migrate vSphere VMs to Amazon EC2 has been added

HyperV WinAPI:

Cluster & Standalone support enhanced
UEFI support, boot order management
Enhanced network support (multi-interface support, automatic mapping)

Kubernetes Plugin:

Add new restore options. Restore in other namespace, other name or other storageclass
Integration longhorn snapshots in pod annotations
Backup snapshot with Longhorn storage without csi driver
Add etcd backup
Listing new cluster resourcres: clusterroles, clusterrolebindings,volumesnapshotclasses
Add backup and restore of Role and RoleBinding namespaced resources
Add backup and restore of ClusterRole and ClusterRoleBinding resources
Add bacula annotations in cloned pvc
Change bacula job name length in backup pod
Add summary in .query command user_permissions
Add new listing namespaced resources
Add query command to ask user’s permissions
Add support pvcdata list in estimation jobs
Add parallel job in same namespace
Add a change that pvc annotation takes precedence without pod annotation
Add pvc clean up from old backup jobs
Fix get provisioner permissions
Get images from repositories with auth
Add support backup and restore kubevirt resources
Add support to backup k8s jobs
Add support clone backup with block pvcs
Add support backup/restore a new type of resource: cron jobs
Add support backup/restore a new type of resource: network policies
Add support backup/restore pvc’s block mode
Add support to local restore compressed pvc data
Add support to make backup to pvcs with block volume_mode

Microsoft 365 Plugin:

Add M365 Sharepoint, Activity Module and PST export
Convert EventMessages associated to emails (ItemAttachments) to plain messages so we can restore them in Service
Add sharepoint_include_personal parameter to control if personal sites are listed or not (not by default now)
Add parameter to limit restore object size for sharepoint sites
Add sharepoint sharepoint_site_size_catalog_limit parameter and others
Check if we are getting the site template itself when checking restore object
Limit sharepoint restore object size. Put template in unique path and use it at restore time

Nutanix AHV:

Change write mode and delayed sync at restore time
Fix #11218: Display name/if of vm being restored
Fixes disks not being backup due to ndfs error messages and does local restore of disk that not belong to conf at restore time

OpenStack Plugin:

New plugin with backup/restore of Nova server instances
Support for Glance images
Support of Nova flavors

Oracle Plugin:

Allow using localdir to use files directly

Proxmox Plugin:

Fix #11315 to not fail a restore job when Proxmox is not reporting correctly the restored device

S3 Plugin:

Add thumbprint parameter
Introduce trust_all_certificates option for the different clients. Libs upgrade
Query thumbprint. Trust thumbprint or trust any local certificate if we have an endpoint

Storage:

New Global Endpoint Deduplication v2 scan and recovery tools
Set default dedup driver to Dedup2 instead of legacy
Add immutability support for Aligned and Cloud plugins
Add Storage Class support for Cloud plugins
Add support for authentication token for AWS Cloud plugin
Set default value of TransferPriority to Low