Barman - PostgreSQL Backup and Disaster Recovery

AWS Storage

disaster recovery for postgresql, with managed base backups, continuous wal archiving and point in time recovery

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

Barman, Backup and Recovery Manager, is an open source tool from EnterpriseDB that protects PostgreSQL databases. It manages base backups and continuous write ahead log archiving for one or more PostgreSQL servers and performs point in time recovery, restoring a database to any moment inside the retention window. This image ships a fully configured Barman appliance protecting a bundled, security hardened PostgreSQL source, wired to demonstrate a real backup and recovery out of the box.

Why the cloudimg image

The cloudimg image places the entire Barman catalogue, every base backup and streamed WAL segment, on a dedicated, independently resizable data volume instead of the operating system disk. Unique per instance database passwords are generated and verified on first boot, the demo PostgreSQL source binds to loopback only with scram authentication, and a real base backup is taken and health checked automatically. Every image is paired with a step by step deploy guide and backed by 24/7 cloudimg support.

Common uses

  • Maintain base backups and continuous WAL archiving so a production PostgreSQL server can be restored to a precise point in time after data loss or corruption
  • Run one Barman host that manages backups and retention policies for many PostgreSQL servers from a single operational surface
  • Enforce redundancy and recovery window retention policies with scheduled, verifiable backups on a dedicated, snapshottable volume

Key features

  • Disaster recovery for PostgreSQL, operational on first boot - Barman manages base backups, continuous WAL archiving, and point-in-time recovery for one or many PostgreSQL servers. The image ships PostgreSQL 16 wired with streaming backups and a named replication slot. A real base backup is taken and verified automatically the moment the instance starts - with the default one-minute WAL-streaming schedule providing near-continuous recovery points.
  • Backup catalogue isolated on a dedicated EBS volume - every base backup and streamed WAL segment lives on a separate, independently resizable and snapshottable EBS disk rather than the OS root volume. Customer backups are isolated from the operating system, straightforward to snapshot off-instance via EBS Snapshots or AWS Backup, and simple to grow as retention needs increase.
  • Security hardened with per-instance credentials and 24/7 expert support - the demo PostgreSQL source binds to loopback only with scram-sha-256 authentication and no exposed database port. Unique passwords for the database, management, and replication roles are generated cryptographically on every first boot - no default or shared password ever ships in the image.

Description

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## Overview Barman (Backup and Recovery Manager) is an open source disaster-recovery tool for PostgreSQL. This AMI delivers a fully configured Barman appliance protecting a bundled, security-hardened PostgreSQL 16 source out of the box - eliminating hours of manual streaming-replication, WAL-archiving, and retention-policy setup. It ships Barman with PostgreSQL 16 from the official PGDG repository. ## Deploy in Minutes, Not Hours Launch the instance, connect over SSH, and run `barman check pg` to confirm the backup source is healthy. Run `barman list-backup pg` to see the base backup taken automatically on first boot. Run `barman recover pg latest` to restore to a directory. The entire workflow is proven before you touch a configuration file - no manual streaming or archiving setup required. ## Why This Image Over Alternatives Unlike community setups that pile the backup catalogue onto the OS disk or ship a well-known database password, this image: - Places the entire Barman catalogue - every base backup and streamed WAL segment - on a dedicated, independently resizable EBS volume

  • Rotates unique per-instance database passwords on first boot
  • Binds the demo PostgreSQL source to loopback only with scram-sha-256 authentication
  • Configures a named replication slot so WAL is never lost ## What Is Included - Barman from the official PGDG package repository
  • PostgreSQL 16 as a bundled, loopback-only demo backup source
  • Streaming backup method - Barman drives pg_basebackup and pg_receivewal over a replication connection with a named replication slot
  • Continuous WAL archiving and point-in-time recovery configured and verified on first boot
  • Dedicated EBS catalogue volume for all backups and WAL segments
  • Scheduled backups - WAL streaming health check every minute and a daily base backup running automatically ## Secure First Boot On first boot a one-shot service generates cryptographically strong passwords for the PostgreSQL, Barman, and replication roles - unique to that instance. Passwords are written only to the Barman user's protected password file. The first base backup is taken and verified before the boot sequence completes. No shared or default database credential ever exists in the image. ## Backing Up Your Own PostgreSQL Servers The bundled PostgreSQL source is a working demonstration. To protect production databases, add a Barman server configuration pointing at your PostgreSQL host and grant Barman a replication connection. The multi-server setup guide walks through network reachability, security group considerations, and retention policy design. To discuss your architecture or request a free sizing consultation, contact our team through the support channels provided. ## AWS Integration Points - Amazon EBS - The backup catalogue lives on a dedicated EBS volume; use EBS Snapshots for off-instance copies or resize storage independently of the OS disk.
  • Amazon VPC - Deploy within private subnets and reach your PostgreSQL servers over private networking; the demo database never listens on a public interface.
  • Amazon CloudWatch - Forward Barman and PostgreSQL logs and system metrics to CloudWatch for centralized backup monitoring and alerting.
  • AWS Backup - Schedule automated, policy-driven snapshots of the catalogue volume without custom scripting. ## Use Cases - PostgreSQL disaster recovery - Maintain base backups and continuous WAL archiving so any production PostgreSQL server can be restored to a precise point in time after data loss or corruption.
  • Centralized backup for a database fleet - Run one Barman host that manages backups and retention policies for many PostgreSQL servers from a single operational surface.
  • Compliance and retention - Enforce redundancy and recovery-window retention policies with scheduled, verifiable backups on a dedicated, snapshottable volume. ## Evaluation Path Launch the AMI on a small instance type to evaluate the full backup and recovery workflow before scaling to production. The image is fully functional immediately - inspect backup output, test point-in-time recovery, and validate integration with your existing PostgreSQL servers at minimal infrastructure cost. ## 24/7 cloudimg Support cloudimg engineers provide round-the-clock technical support by email and live chat. Our team assists with deployment, Barman configuration, multi-server setup, WAL archiving, retention policy design, and point-in-time recovery. Critical issues receive a one-hour average response time. Barman is a project of EnterpriseDB Corporation; cloudimg is not affiliated with or endorsed by EnterpriseDB. All product and company names are trademarks or registered trademarks of their respective holders.

Related technologies

postgresql backupbarmandisaster recoverypoint in time recoverywal archivingdatabase backuppostgresql drstreaming replicationbackup recovery managerpostgresql amipg_basebackupebs backup volumedatabase retention