Name
msdpcldutil — the immutable cloud storage utility
SYNOPSIS
create --bucket bucket_name --volume volume_name --mode retention_mode --min min_time --max max_time --live live_untildate [--storageclass storage_class] [--bypass_bucket_policy] [--userid user_id]
list [--bucket bucket_name | --filter bucket_name_filter] [--volume volume_name]
update mode --bucket bucket_name --volume volume_name --mode COMPLIANCE [--inherit enable|disable] --live live_untildate
update range --bucket bucket_name --volume volume_name --min min_time --max max_time
update live --bucket bucket_name --volume volume_name --live live_untildate
platform list
--help
create --help
list --help
update mode --help
update range --help
update live --help
--version
On UNIX systems, the directory path to this command is /usr/openv/pdde/pdcr/bin/
DESCRIPTION
Use the msdpcldutil command to create, update, and list cloud immutable volume for AWS S3 storage, S3-compatible cloud storage, and Azure blob storage.
This utility is only supported on Red Hat Linux.
Set the following environment variables before you use msdpcldutil for AWS S3 immutable storage:
export MSDPC_ACCESS_KEY=your_access_key_id export MSDPC_SECRET_KEY=your_secret_key export MSDPC_REGION=your_region export MSDPC_PROVIDER=amazon
MSDPC_ACCESS_KEY is the AWS access key associated with an IAM user. MSDPC_SECRET_KEY is the secret key associated with the access key. MSDPC_REGION is the AWS region where the bucket is created or accessed.
Set the following environment variables before you use msdpcldutil for S3-compatible cloud storage:
export MSDPC_ACCESS_KEY=your_access_key_id export MSDPC_SECRET_KEY=your_secret_key export MSDPC_REGION=your_region export MSDPC_PROVIDER=s3-compatible export MSDPC_ENDPOINT=your_s3_endpoint_url
Set the following environment variables before you use msdpcldutil for Azure blob immutable storage:
export MSDPC_ACCESS_KEY=your_storage_account export MSDPC_SECRET_KEY=your_access_key export MSDPC_REGION=your_region export MSDPC_PROVIDER=azure export MSDPC_ENDPOINT=https://your_storage_account.blob.core.windows.net/
OPTIONS
- --bucket bucket_name, -b bucket_name
The bucket name in AWS S3 and S3 compatible storage or the container name in Azure blob.
- --bypass_bucket_policy
Use this option to bypass the use of a bucket policy. The option is available only for AWS S3 immutable storage.
- --debug
Provides a more detailed log for debugging.
- --inherit enable|disable, -i enable|disable
When you switch retention mode from GOVERNANCE mode to COMPLIANCE mode, use the inherit option to specify retention time behavior. You can either inherit the retention time from the GOVERNANCE mode or overwrite it with the new retention time for the COMPLIANCE mode. If you want to inherit the retention time, specify enable. If you want to overwrite the retention time, specify disable.
- --live live_utildate, -l live_utildate
The cloud immutable volume live duration. This value is set as YYYY-MM-DD hh:mm:ss timezone. For a value of noon on August 18, 2025 in UTC, use 2025-08-18 12:00:00 UTC.
- --max max_duration, -M max_duration
The maximum object locking duration: number plus D or Y. The value of 12Y means 12 years.
- --min min_duration, -N min_duration
The minimum object locking duration: number plus D or Y. The value of 12D means 12 days.
- --mode retention_mode, -m retention_mode
The retention mode for the immutable cloud storage. The option has two possible values:
COMPLIANCE mode:
Users cannot overwrite or delete the data that is protected using the compliance mode for the defined retention period. Once you set a retention period for the data storage, you can extend it but cannot shorten it.
GOVERNANCE mode:
Users require special permissions to disable the retention lock and then delete the image. Only the cloud administrator user can disable the retention lock and then the delete the image if required. You can use the governance mode to test the retention period behavior before you use compliance mode.
- --storageclass storage_class, -s storage_class
Amazon S3 storage class, such as STANDARD_IA or GLACIER_IR. The default is STANDARD.
- --userid user_id, -u user_id
The AWS user ID in aws sts get-caller-identity. The default is null. This option is only available for AWS S3 immutable storage.
- --volume volume_name, -v volume_name
The volume name is the directory name under the S3 bucket or the Azure blob container.
EXAMPLES
Example 1: Create a cloud immutable volume.
/usr/openv/pdde/pdcr/bin/msdpcldutil create -b bucketname -v volumename --mode GOVERNANCE --min 1D --max 30D --live 2021-12-31
Example 2: Update the cloud immutable volume mode.
/usr/openv/pdde/pdcr/bin/msdpcldutil update mode -b bucketname -v volumename --mode COMPLIANCE --live 2021-12-31 --inherit enable
Example 3: Update the cloud immutable volume minimum and maximum retention periods.
/usr/openv/pdde/pdcr/bin/msdpcldutil update range -b bucketname -v volumename --min 1D --max 90D
Example 4: Update the cloud immutable volume live duration.
/usr/openv/pdde/pdcr/bin/msdpcldutil update live -b bucketname -v volumename -l 2022-01-31