Volumes & backups

Volumes

Persistent storage is a LUKS-encrypted volume with its own key, attached to one service and mounted where you say:

bootload volume create data --size 5
bootload deploy --image ... --volume data:/data

• Encryption is mandatory — there is no plaintext option.
• A volume lives on the node where its service runs; the scheduler keeps them together.
• Size is in GB (1–1024), billed at €0.10/GB-month, per second.

Backups

Backups are encrypted, exportable, and verifiable — the no-lock-in rule (it's in our spec as a core principle):

bootload backup create data          # snapshot a volume
bootload backup verify <id>          # re-download, decrypt, checksum
bootload backup restore <id> --new-volume data2
bootload backup export <id>          # presigned URL + the decryption key
bootload backup import backup.tar.zst.enc

The export gives you the artifact and the key — you can decrypt it offline with standard tools (openssl, zstd, tar), no bootload account required. A backup that doesn't pass verify is treated as not a backup.

Restores

Restore into a fresh volume or any detached volume in the project. Checksums are verified before anything is overwritten.