Encrypted, deduplicated backups you can trust. restic v0.19.1 on Ubuntu 24.04 comes with a daily backup timer, a local encrypted repository, check and safe-restore scripts, and optional S3 storage through the instance IAM role.
Back up with encryption and deduplication from day one. This image installs restic v0.19.1 with a daily backup timer, a local encrypted repository, scripts to check the repository and restore into an empty folder, and documented steps for an S3 repository.
Launch this version on t3.medium with at least 16 GiB encrypted root storage and at least 2 GiB RAM. Connect with AWS Systems Manager Session Manager. You land as ssm-user; run sudo -iu ubuntu to switch to the ubuntu account. SSH is off: no key pair is attached and no inbound rule is needed. First boot creates the repository password and runs restic init; nothing sensitive is baked into the image. restic does not listen on a TCP port. Keep credentials out of recordings and tickets.
The standard software fee is described in the AWS Marketplace offer terms. EC2, EBS and data-transfer charges are billed separately. See the offer terms for applicable billing promotions.
After launch, wait for cloud-init to finish, then follow the bundled README for configuration, backup and day-2 operations. IAM is optional until you point RESTIC_REPOSITORY at your own S3 bucket.
Reach it from other machines: restic makes outbound connections only, so there is nothing to open to other hosts. Use an IAM role attached to the instance if you move the repository to S3.
This is a repackaged open source software product wherein additional charges apply for independent AWS packaging, validation, maintenance and setup documentation. Alexander Neumann and contributors publish restic under BSD-2-Clause; Software Sushi supplies the AMI recipe, pinned official linux/amd64 binary, first-boot repository password and init, loopback-only defaults, and setup documentation without claiming upstream endorsement.
Highlights
Pinned restic v0.19.1 official linux/amd64 binary with provenance receipts.
Daily backup timer with local encrypted repository and safe restore script.
Bundled configuration, backup and day-2 operations documentation.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
You pay a single hourly software fee for this image, billed per hour while the t3.medium instance runs. There is only one pricing dimension, so pricing scales with how long you keep the instance active, not with the amount of data you back up. The vendor recommends running on a t3.medium instance. AWS charges separately for EC2, EBS storage, and data transfer, plus S3 storage and requests if you point the repository at your own S3 bucket. These infrastructure costs are not part of the hourly software fee.
Top-of-mind questions for buyers
What specification does the t3.medium hourly rate cover, and what hardware does the vendor recommend?
The hourly fee covers the Restic Backup Worker software running on one t3.medium instance. The vendor recommends a t3.medium with an encrypted gp3 root volume of at least 16 GiB and at least 2 GiB of memory. Size the volume for your data, repository, and restic's cache.
Am I charged the hourly software fee when the instance is stopped?
The hourly software fee applies while the instance runs. A stopped instance does not accrue the software fee. AWS may still bill underlying EBS storage for a stopped instance. S3 storage and request charges continue if you point the repository at your own S3 bucket.
Does the hourly fee change based on how much data I back up or how many snapshots I keep?
No. You pay one hourly software fee tied to runtime, not to backup size. Snapshots are kept until you remove them, and that retention does not change the software fee. Larger data may require a bigger volume or S3 bucket, which AWS bills separately.
docs.softwaresushi.com
Helpful?
Vendor refund policy
We offer a full refund of software charges for the first 48 hours billing starts if the product does not perform as described. To request a refund, email info@softwaresushi.com with your EC2 instance ID and a description of the issue. AWS infrastructure costs (EC2, EBS, data transfer) are not eligible for refund by us.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
restic v0.19.1 on Ubuntu 24.04 LTS, packaged by Software Sushi. The documented demo command now works from the ubuntu home directory and the restore helper no longer depends on the working directory. The documentation under /opt/sushi/docs is root-owned and a first-login guide appears after sudo -iu ubuntu. Connect with Session Manager, run sudo -iu ubuntu, then bash /opt/sushi/docs/demo.sh. Configure your own provider keys and models privately after launch.
Additional details
Usage instructions
Launch t3.medium (16 GiB or larger encrypted gp3, IMDSv2) with an instance profile that has AmazonSSMManagedInstanceCore and outbound HTTPS. No inbound rules are needed. Copy-paste launch kit (role, security group, run-instances, CloudFormation): https://docs.softwaresushi.com/launch-kit/
Connect: aws ssm start-session --target <instance-id>. You land as ssm-user; sudo -iu ubuntu switches to the ubuntu account and shows the first-login guide. After cloud-init finishes, run: sudo -iu ubuntu bash /opt/sushi/docs/demo.sh (expect a final line ending in DEMO_PASSED).
Use it: Put a file in /var/lib/restic/include (sudo chown restic:restic on it), run sudo systemctl start restic-backup.service, then restore the latest snapshot into an empty folder with sudo -u restic /opt/sushi/bin/restic-restore.sh /tmp/restore-test.
Secrets and access: Back up the repository password: sudo cat /etc/restic/password (readable by the restic user and root only). Without it the repository cannot be opened. Nothing listens on the network.
Reach it from another host: restic only makes outbound connections, so there is nothing to open. Use an IAM role attached to the instance for S3, and run it over Session Manager.
Guide: https://docs.softwaresushi.com/restic/ . Support: info@softwaresushi.com
Software Sushi provides AMI packaging and setup guidance. Contact info@softwaresushi.com for installation questions. Support coverage requires a separate agreement. This offer does not include restic project support.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Copy files to and from cloud storage on a schedule. rclone v1.75.1 on Ubuntu 24.04 comes with a daily copy timer, a checksum check script and a safe local default, and can target your own S3 bucket through the instance IAM role.
Pre-installed and security-hardened OpenClaw AI agent AMI. Launch an EC2 instance, add your credentials, and start using your agent. Ready to configure out of the box.
Finds and removes Brazilian personal data (CPF, CNPJ, RG, names, addresses, phones, bank details, vehicle plates and more) from Portuguese text, inside your own AWS account, with no network access. Real-time endpoints and batch jobs over JSON Lines, CSV and plain-text files.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.