kopiur

July 6, 2026 ยท View on GitHub

Warning

๐Ÿšง Heavy construction โ€” this repo is less than a month old ๐Ÿšง

Kopiur is brand new and under active, breaking development. Things are incomplete, untested in the wild, and the CRD surface, behavior, and APIs will change without notice. Do not run this against data you care about.

Please do not open Pull Requests. The codebase is moving too fast for external PRs to be reviewable right now โ€” they'll likely conflict or target code that's about to be rewritten. Open an Issue instead to report a bug, request a feature, or start a discussion. Issues are very welcome; PRs will be politely closed with a pointer back here for the time being.

Kopiur (Kopia + Rust) is a Kopia-native Kubernetes backup operator written in Rust on kube-rs. It makes a kopia repository a first-class Kubernetes resource and separates the backup recipe from its invocation from its schedule, so backups can be triggered by cron, kubectl create, Argo Events, or a Helm hook โ€” and a kopia snapshot's lifecycle is tied to its Backup CR by a finalizer + deletionPolicy. The whole CRD surface is modeled as Rust enums so invalid states are unrepresentable and reconcilers handle every variant at compile time. See ADR-0003 for the full design.

Status: alpha โ€” API group kopiur.home-operations.com, version v1alpha1. The CRD surface may still change between releases.

The 7 CRDs (kopiur.home-operations.com/v1alpha1)

CRDScopeLayerPurpose
RepositoryNamespacedStorageA kopia repository owned by one namespace: backend, encryption, credentials.
ClusterRepositoryClusterStorageA shared repository for platform teams, gated by allowedNamespaces.
BackupConfigNamespacedRecipeWhat to back up: PVC sources, identity, retention, policy, hooks. Idempotent.
BackupNamespacedInvocation + CatalogOne kopia snapshot as a Kubernetes object. The universal trigger entry point.
BackupScheduleNamespacedCronWhen it runs: cron + jitter + timezone; creates Backup CRs.
RestoreNamespacedOperationRestore a snapshot to a PVC, or act as a passive volume-populator source.
MaintenanceNamespacedLifecycleSchedules kopia maintenance quick + full with an ownership lease.

Quickstart

kubectl create namespace kopiur-system
helm install kopiur deploy/helm/kopiur \
  --namespace kopiur-system \
  --set webhook.certManager.enabled=true
kubectl get crd -l app.kubernetes.io/part-of=kopiur

Then apply a worked example:

kubectl apply -f deploy/examples/01-single-pvc-scheduled.yaml

Full install guide, prerequisites (k8s >= 1.24, optional cert-manager), install modes, and the CRD-lifecycle caveat: docs/install.md.

kubectl plugin

Day-to-day operations without hand-written YAML โ€” trigger/inspect/restore snapshots, run maintenance, browse files inside snapshots, diagnose installs, migrate from VolSync:

kubectl krew index add kopiur https://github.com/home-operations/kopiur.git
kubectl krew install kopiur/kopiur
kubectl kopiur status

Or via Homebrew: brew install home-operations/tap/kopiur (installs the standalone kopiur command, so it coexists with a krew install).

Full reference: docs/cli/index.md.

Layout

crates/          Rust workspace (api, kopia, webhook, controller, mover, xtask)
deploy/crds/     Generated CRDs (cargo xtask gen-crds) โ€” checked in
deploy/rbac/     Generated RBAC (cargo xtask gen-rbac) โ€” checked in
deploy/helm/     Helm chart (deploy/helm/kopiur)
deploy/examples/ 8 runnable usage walkthroughs
docs/adr/        Architecture Decision Records (0003 is canonical)

Documentation

๐Ÿ“– Docs site: https://kopiur.home-operations.com/ โ€” user guide, ADRs, and the generated Rust API reference.

Releases

Release artifacts (archives, the Homebrew cask, the krew plugin manifest, SBOMs, and Cosign signatures) are built and published with GoReleaser Pro. If it's useful to your own projects, consider sponsoring its author.

License

AGPL-3.0-only