This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
computing:backup:ahsay_server [2014/11/03 10:54] gcooper |
— (current) | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== Ahsay Backup ====== | ||
- | See also **[[https:// | ||
- | |||
- | See also **[[computing: | ||
- | |||
- | See also **[[computing: | ||
- | |||
- | See also **[[computing: | ||
- | |||
- | ===== Pricing ===== | ||
- | |||
- | http:// | ||
- | |||
- | http:// | ||
- | |||
- | ===== Check Versions ===== | ||
- | |||
- | ==== Clients ==== | ||
- | |||
- | Web Interface -> Manage Log -> Backup Job | ||
- | |||
- | ==== Server ==== | ||
- | |||
- | Web Interface -> Manage System -> Software License | ||
- | |||
- | ===== Upgrade OBSR ===== | ||
- | |||
- | Upgrade Guide: https:// | ||
- | |||
- | :!: If you are using RDR, upgrade that first. | ||
- | |||
- | :!: If not doing a major version upgrade, see below for patches and hotfixes. | ||
- | |||
- | Download the latest files (i.e. 5.x to latest 6.x): | ||
- | |||
- | < | ||
- | rm -rf obsr-nix.tar.gz | ||
- | rm -rf obsr-nix-patch.zip | ||
- | wget http:// | ||
- | </ | ||
- | |||
- | Begin the upgrade: | ||
- | |||
- | < | ||
- | # Declare locations | ||
- | OBS_HOME=/ | ||
- | OBS_HOME_BAK=/ | ||
- | |||
- | # Stop services | ||
- | / | ||
- | |||
- | #Create backup less user data - you should back it up too if you can | ||
- | tar -czvf / | ||
- | |||
- | # Uninstall the old version leaving data and configuration intact | ||
- | sh $OBS_HOME/ | ||
- | |||
- | # Delete old folder if it exists and rename $OBS_HOME to $OBS_HOME_BAK | ||
- | rm -rf $OBS_HOME_BAK | ||
- | mv $OBS_HOME $OBS_HOME_BAK | ||
- | mkdir $OBS_HOME | ||
- | |||
- | # Move into $OBS_HOME, download the latest version and extract it | ||
- | cd $OBS_HOME | ||
- | wget http:// | ||
- | tar -xzvf obsr-nix.tar.gz | ||
- | |||
- | # Copy original files into the upgrade installation | ||
- | /bin/cp -avr $OBS_HOME_BAK/ | ||
- | /bin/cp -avr $OBS_HOME_BAK/ | ||
- | mv $OBS_HOME_BAK/ | ||
- | /bin/cp -avr $OBS_HOME_BAK/ | ||
- | mv $OBS_HOME_BAK/ | ||
- | mv $OBS_HOME_BAK/ | ||
- | |||
- | sh $OBS_HOME/ | ||
- | </ | ||
- | |||
- | Finally, logon to the AhsayOBS Web Management Console and press the **'' | ||
- | |||
- | **Manage System -> Software License -> Update** | ||
- | |||
- | :!: Note that these upgrade instructions do not include handling customizations such as branding. | ||
- | |||
- | :!: Note that AUA must be reenabled after an upgrade. | ||
- | |||
- | ==== Release Notes ==== | ||
- | |||
- | After upgrading to the latest version, check the Release Notes to see if there are any hotfixes you need to appy: | ||
- | |||
- | http:// | ||
- | |||
- | ==== Patch or Hotfix ==== | ||
- | |||
- | https:// | ||
- | |||
- | < | ||
- | # Declare locations | ||
- | OBS_HOME=/ | ||
- | |||
- | # Stop services | ||
- | / | ||
- | |||
- | # Install patch/ | ||
- | cd $OBS_HOME | ||
- | wget http:// | ||
- | unzip obsr-nix-hotfix.zip | ||
- | rm obsr-nix-hotfix.zip | ||
- | |||
- | # Restart services | ||
- | / | ||
- | </ | ||
- | |||
- | ==== Applying Hotfix to Clients ==== | ||
- | |||
- | https:// | ||
- | |||
- | ===== Auto Update Agent (AUA) ===== | ||
- | |||
- | :!: The [[http:// | ||
- | |||
- | https:// | ||
- | |||
- | http:// | ||
- | |||
- | http:// | ||
- | |||
- | The upgrade files supplied by the standard OBSR installation package contain non-customized files. | ||
- | |||
- | Enable AUA: | ||
- | |||
- | < | ||
- | OBS_HOME=/ | ||
- | cd $OBS_HOME | ||
- | mv webapps/ | ||
- | </ | ||
- | |||
- | Customize AUA: | ||
- | |||
- | < | ||
- | vim webapps/ | ||
- | </ | ||
- | |||
- | :!: You can kick off the update on the client by restarting the AUA service. | ||
- | |||
- | :!: You can see the client versions easily In the web admin: **Manage Log -> Backup Job** | ||
- | |||
- | ===== Performance ===== | ||
- | |||
- | * Use separate disks | ||
- | * OS | ||
- | * OBS System | ||
- | * OBS User Homes | ||
- | * Divide users over multiple User Homes | ||
- | * Mount filesystems with '' | ||
- | |||
- | ===== Downloads and Docs ===== | ||
- | |||
- | http:// | ||
- | |||
- | ===== Move OBS to New Hardware ===== | ||
- | |||
- | http:// | ||
- | |||
- | ===== Do a Centos 6 Minimal Install ===== | ||
- | |||
- | ==== Partitioning ==== | ||
- | |||
- | During the installation, | ||
- | |||
- | ^Partition^Size^Mountpoint^Filesystem^ | ||
- | |/ | ||
- | |/ | ||
- | |/ | ||
- | |/ | ||
- | |/ | ||
- | |/ | ||
- | |||
- | ==== Install Latest Updates ==== | ||
- | |||
- | < | ||
- | yum update -y | ||
- | reboot | ||
- | </ | ||
- | |||
- | ==== Install Needed Tools ==== | ||
- | |||
- | < | ||
- | yum -y install wget vim-enhanced ntp acpid | ||
- | </ | ||
- | |||
- | ==== Configure Networking ==== | ||
- | |||
- | See [[networking: | ||
- | |||
- | Verify the hostname and IP address are set in / | ||
- | |||
- | ==== Configure Timekeeping ==== | ||
- | |||
- | [[networking: | ||
- | |||
- | < | ||
- | chkconfig ntpd on | ||
- | service ntpd start | ||
- | </ | ||
- | |||
- | ==== Configure SElinux ==== | ||
- | |||
- | Set selinux to Permissive mode and set the system to relabel on the next reboot: | ||
- | |||
- | < | ||
- | vim / | ||
- | |||
- | SELINUX=permissive | ||
- | |||
- | echo 0 >/ | ||
- | touch / | ||
- | sestatus -v | ||
- | </ | ||
- | |||
- | ==== Configure Bash Shell ==== | ||
- | |||
- | < | ||
- | cat >> ~/ | ||
- | |||
- | alias ll='ls -l' | ||
- | alias la='ls -A' | ||
- | alias l='ls -CF' | ||
- | alias ls=" | ||
- | alias free=" | ||
- | export GREP_OPTIONS=' | ||
- | PS1=' | ||
- | export HISTCONTROL=ignoredups | ||
- | EOF | ||
- | </ | ||
- | |||
- | ===== Firewall ===== | ||
- | |||
- | :!: Expose only TCP port 80 and 443 (Ahsay) plus UDP 123 (NTP) to the public. | ||
- | |||
- | ==== CentOS Firewall ==== | ||
- | |||
- | The built-in CentOS firewall only allows port 22 (SSH) by default and blocks all other traffic. | ||
- | |||
- | < | ||
- | iptables -I INPUT 3 -p udp --dport 123 -j ACCEPT | ||
- | iptables -I INPUT 3 -p tcp --dport 443 -j ACCEPT | ||
- | iptables -I INPUT 3 -p tcp --dport 80 -j ACCEPT | ||
- | |||
- | / | ||
- | iptables --line-numbers -nL | ||
- | </ | ||
- | |||
- | ==== Arno's Firewall ==== | ||
- | |||
- | If your backup server has an interface directly connected to the Internet, you should consider Arno's Firewall. | ||
- | |||
- | Disable the built-in firewall: | ||
- | |||
- | < | ||
- | service iptables stop | ||
- | service ip6tables stop | ||
- | chkconfig iptables off | ||
- | chkconfig ip6tables off | ||
- | </ | ||
- | |||
- | **[[networking: | ||
- | |||
- | I don't remember what these very important notes were for: | ||
- | |||
- | < | ||
- | NAT_LOCAL_REDIRECT=1 | ||
- | NAT_FORWARD_TCP=" | ||
- | </ | ||
- | |||
- | ===== Install OBS ===== | ||
- | |||
- | < | ||
- | wget http:// | ||
- | OBS_HOME=/ | ||
- | mkdir $OBS_HOME | ||
- | mv obsr-nix.tar.gz $OBS_HOME | ||
- | cd $OBS_HOME | ||
- | tar -xzvf obsr-nix.tar.gz | ||
- | sh $OBS_HOME/ | ||
- | </ | ||
- | |||
- | ===== First Login ===== | ||
- | |||
- | Login to the new backup server using a web browser. | ||
- | |||
- | The default username/ | ||
- | |||
- | Manage System -> Server Configuration -> Login Name | ||
- | |||
- | ===== Filesystem Tweaks ===== | ||
- | |||
- | Depending on how you partitioned the drive when you installed the OS, you may need to add a new logical volume for OBS to use. Ideally, the OBS ' | ||
- | |||
- | Assuming the entire installation disk was used as a LVM PV (physical volume), this command will use the rest of it to create a new LV (logical volume) for OBS ' | ||
- | |||
- | < | ||
- | lvcreate -n lv_obs_homes -l 100%FREE vg_backup | ||
- | |||
- | mkfs.ext3 / | ||
- | </ | ||
- | |||
- | Edit /etc/fstab and add add a line to mount the new LV with the ' | ||
- | |||
- | < | ||
- | vi /etc/fstab | ||
- | |||
- | / | ||
- | |||
- | mkdir / | ||
- | </ | ||
- | |||
- | Manage System -> Server Configuration -> System Home | ||
- | * ''/ | ||
- | Manage System -> Server Configuration -> User Homes | ||
- | * ''/ | ||
- | |||
- | ===== Copy Data ===== | ||
- | |||
- | < | ||
- | rsync -av / | ||
- | |||
- | rsync -av / | ||
- | </ | ||
- | |||
- | ===== Add Additional Storage ===== | ||
- | |||
- | https:// | ||
- | |||
- | Install a new disk drive, then create one large partition and format it: | ||
- | < | ||
- | fdisk /dev/sdb | ||
- | |||
- | mkfs.ext3 /dev/sdb1 | ||
- | </ | ||
- | |||
- | You want to mount the new space using the disk's UUID as a best practice. | ||
- | |||
- | < | ||
- | blkid | ||
- | </ | ||
- | |||
- | Edit /etc/fstab to mount the new partition with the ' | ||
- | |||
- | < | ||
- | vi /etc/fstab | ||
- | |||
- | # additional storage for OBS | ||
- | / | ||
- | UUID=40a09cc6-47d7-4061-b93b-a30d45659075 | ||
- | UUID=299dc4c1-0652-47d3-bbe5-bcf1788647d0 | ||
- | |||
- | mount -a | ||
- | mount | ||
- | </ | ||
- | |||
- | Then you can assign the new space for user homes in the web interface: | ||
- | |||
- | Manage System -> Server Configuration -> User Homes | ||
- | * ''/ | ||
- | * ''/ | ||
- | |||
- | ===== Data Validation ===== | ||
- | |||
- | http:// | ||
- | |||
- | ===== Configuration Archival ===== | ||
- | |||
- | http:// | ||
- | |||
- | **Manage System -> Routine Job -> Configuration Archival** | ||
- | |||
- | The Configuration Archival feature is designed to faciliate a quick and simple recovery of an AhsayOBS server after an outage so as to minimize the down time of backup service. | ||
- | |||
- | With this feature enabled, a copy of AhsayOBS configuration settings will be backed up to Ahsay™ License Server everyday so that when a disaster strikes, the backup server administrator is able to download the backed up AhsayOBS configurations from the Ahsay™ License Server and restore them quickly onto a new AhsayOBS machine. |