Support

Site Restoration

#21609 Kickstart Amazon S3 new authentication scheme

Posted in ‘Site restoration’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

PHP version
n/a
CMS Type
Other
CMS Version
n/a
Backup Tool Version
n/a
Kickstart version
n/a

Latest post by nicholas on Tuesday, 02 December 2014 11:37 CST

trendup
It is related to ticket #21399 – Amazon S3 new authentication scheme

I’d like to restore a backup from S3 Frankfurt region that supports only new AWS4 authentication scheme.
Is there a Kickstart beta that supports this feature?

nicholas
Akeeba Staff
Manager
No and I don't think we will ever be able to provide a version compatible with AWS4 :( The only reliable AWS4 implementation is Amazon's own SDK for PHP. This is over 2Mb of files. Currently Kickstart is about 350Kb. If we add 2+ Mb of files it will become impossible to work with, both for us (maintenance) and for you (performance). My plan is to remove the direct integration, for a very good reason: you can use the Import from URL to import from Amazon S3. It's slightly different but still possible and very easy.

How to import from S3. You can use Akeeba Kickstart with files stored on any Amazon S3 region by using a third party S3 tool such as CyberDuck. Using CyberDuck go to the directory where your backup is stored and right click on the backup. Choose the Copy URL, Signed URL (Expires tomorrow XX:YY:ZZ) option. Now go to Kickstart and click Import from URL. Paste the signed URL to Kickstart and Bob's your uncle!

A similar trick applies for Dropbox. Log in to Dropbox' site and right click on the file you want to import. Click on Share. There's a link to the file you can copy and paste into Kickstart. You can optionally set up an expiration date as well.

So, basically, the Import from URL is the only feature you need. I am going to document that.

Nicholas K. Dionysopoulos

Lead Developer and Director

πŸ‡¬πŸ‡·Greek: native πŸ‡¬πŸ‡§English: excellent πŸ‡«πŸ‡·French: basic β€’ πŸ• My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

trendup
Thanks for you answer Nicholas.
Using Singed URL from Cyberduck I get "The authorization mechanism you have provided is not supported. Please use AWS4-HMAC-SHA256." from files hosted in Frankfurt zone but not from other buckets.
Now, I’m trying to copy the backup file to another buckuet with old authentication allowed and try to import it with Signed URL method.

nicholas
Akeeba Staff
Manager
I think that you could contact the CyberDuck author and ask him to add support for the AWS4 authentication scheme. It's still a new thing, Amazon didn't publicize the change very well and most developers are not aware of it. But having seen the strides made in CyberDuck over the last few years I am pretty sure that he will be more than interested to add support for AWS4.

Nicholas K. Dionysopoulos

Lead Developer and Director

πŸ‡¬πŸ‡·Greek: native πŸ‡¬πŸ‡§English: excellent πŸ‡«πŸ‡·French: basic β€’ πŸ• My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

trendup
I think we will see the compatibility soon in Cyberduck.

nicholas
Akeeba Staff
Manager
Awesome! Open Source at its finest :)

Nicholas K. Dionysopoulos

Lead Developer and Director

πŸ‡¬πŸ‡·Greek: native πŸ‡¬πŸ‡§English: excellent πŸ‡«πŸ‡·French: basic β€’ πŸ• My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!