This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
computing:storage:backup:ahsay [2013/08/03 11:54] gcooper |
— (current) | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== Ahsay Backup ====== | ||
- | See also **[[computing: | ||
- | |||
- | See also **[[computing: | ||
- | |||
- | See also **[[computing: | ||
- | |||
- | ===== Pricing ===== | ||
- | |||
- | http:// | ||
- | |||
- | http:// | ||
- | |||
- | ===== Check Versions ===== | ||
- | |||
- | ==== Clients ==== | ||
- | |||
- | Web Interface -> Manage Log -> Backup Job | ||
- | |||
- | ==== Server ==== | ||
- | |||
- | Web Interface -> Manage System -> Software License | ||
- | |||
- | ===== Upgrade OBSR ===== | ||
- | |||
- | Upgrade Guide: http:// | ||
- | |||
- | :!: If you are using RDR, upgrade that first. | ||
- | |||
- | < | ||
- | # Declare locations | ||
- | OBS_HOME=/ | ||
- | OBS_HOME_BAK=/ | ||
- | |||
- | # Stop services | ||
- | / | ||
- | |||
- | #Create backup less user data - you should back it up too if you can | ||
- | tar -czvf / | ||
- | |||
- | # Uninstall the old version leaving data and configuration intact | ||
- | sh $OBS_HOME/ | ||
- | |||
- | # Delete old folder if it exists and rename $OBS_HOME to $OBS_HOME_BAK | ||
- | rm -rf $OBS_HOME_BAK | ||
- | mv $OBS_HOME $OBS_HOME_BAK | ||
- | mkdir $OBS_HOME | ||
- | |||
- | # Move into $OBS_HOME, download the latest version and extract it | ||
- | cd $OBS_HOME | ||
- | wget http:// | ||
- | tar -xzvf obsr-nix.tar.gz | ||
- | |||
- | # Copy original files into the upgrade installation | ||
- | /bin/cp -avr $OBS_HOME_BAK/ | ||
- | /bin/cp -avr $OBS_HOME_BAK/ | ||
- | mv $OBS_HOME_BAK/ | ||
- | /bin/cp -avr $OBS_HOME_BAK/ | ||
- | mv $OBS_HOME_BAK/ | ||
- | mv $OBS_HOME_BAK/ | ||
- | |||
- | sh $OBS_HOME/ | ||
- | </ | ||
- | |||
- | Finally, logon to the AhsayOBS Web Management Console and press the **'' | ||
- | |||
- | **Manage System -> Software License -> Update** | ||
- | |||
- | :!: Note that these upgrade instructions do not include handling customizations such as branding. | ||
- | |||
- | :!: Note that AUA must be reenabled after an upgrade. | ||
- | |||
- | ==== Release Notes ==== | ||
- | |||
- | After upgrading to the latest version, check the Release Notes to see if there are any hotfixes you need to appy: | ||
- | |||
- | http:// | ||
- | |||
- | ==== Patch or Hotfix ==== | ||
- | |||
- | < | ||
- | # Declare locations | ||
- | OBS_HOME=/ | ||
- | |||
- | # Stop services | ||
- | / | ||
- | |||
- | # Install patch/ | ||
- | cd $OBS_HOME | ||
- | wget http:// | ||
- | unzip obsr-nix-hotfix.zip | ||
- | rm obsr-nix-hotfix.zip | ||
- | |||
- | # Restart services | ||
- | / | ||
- | </ | ||
- | |||
- | ==== Applying Hotfix to Clients ==== | ||
- | |||
- | https:// | ||
- | |||
- | ===== Auto Update Agent (AUA) ===== | ||
- | |||
- | :!: The [[http:// | ||
- | |||
- | https:// | ||
- | |||
- | http:// | ||
- | |||
- | http:// | ||
- | |||
- | The upgrade files supplied by the standard OBSR installation package contain non-customized files. | ||
- | |||
- | Enable AUA: | ||
- | |||
- | < | ||
- | OBS_HOME=/ | ||
- | cd $OBS_HOME | ||
- | mv webapps/ | ||
- | </ | ||
- | |||
- | Customize AUA: | ||
- | |||
- | < | ||
- | vim webapps/ | ||
- | </ | ||
- | |||
- | You can kick off the update on the client by restarting the AUA service. | ||
- | |||
- | ===== Performance ===== | ||
- | |||
- | * Use separate disks | ||
- | * OS | ||
- | * OBS System | ||
- | * OBS User Homes | ||
- | * Divide users over multiple User Homes | ||
- | * Mount filesystems with '' | ||
- | |||
- | ===== Downloads and Docs ===== | ||
- | |||
- | http:// | ||
- | |||
- | ===== Move OBS to New Hardware ===== | ||
- | |||
- | http:// | ||
- | |||
- | ===== Do a Centos 6 Minimal Install ===== | ||
- | |||
- | ==== Partitioning ==== | ||
- | |||
- | During the installation, | ||
- | |||
- | ^Partition^Size^Mountpoint^Filesystem^ | ||
- | |/ | ||
- | |/ | ||
- | |/ | ||
- | |/ | ||
- | |/ | ||
- | |/ | ||
- | |||
- | ==== Install Latest Updates ==== | ||
- | |||
- | < | ||
- | yum update -y | ||
- | reboot | ||
- | </ | ||
- | |||
- | ==== Install Needed Tools ==== | ||
- | |||
- | < | ||
- | yum -y install wget vim-enhanced ntp acpid | ||
- | </ | ||
- | |||
- | ==== Configure Networking ==== | ||
- | |||
- | See [[networking: | ||
- | |||
- | Verify the hostname and IP address are set in / | ||
- | |||
- | ==== Configure Timekeeping ==== | ||
- | |||
- | [[networking: | ||
- | |||
- | < | ||
- | chkconfig ntpd on | ||
- | service ntpd start | ||
- | </ | ||
- | |||
- | ==== Configure SElinux ==== | ||
- | |||
- | Set selinux to Permissive mode and set the system to relabel on the next reboot: | ||
- | |||
- | < | ||
- | vim / | ||
- | |||
- | SELINUX=permissive | ||
- | |||
- | echo 0 >/ | ||
- | touch / | ||
- | sestatus -v | ||
- | </ | ||
- | |||
- | ==== Configure Bash Shell ==== | ||
- | |||
- | < | ||
- | cat >> ~/ | ||
- | |||
- | alias ll='ls -l' | ||
- | alias la='ls -A' | ||
- | alias l='ls -CF' | ||
- | alias ls=" | ||
- | alias free=" | ||
- | export GREP_OPTIONS=' | ||
- | PS1=' | ||
- | export HISTCONTROL=ignoredups | ||
- | EOF | ||
- | </ | ||
- | |||
- | ===== Firewall ===== | ||
- | |||
- | :!: Expose only TCP port 80 and 443 (Ahsay) plus UDP 123 (NTP) to the public. | ||
- | |||
- | ==== CentOS Firewall ==== | ||
- | |||
- | The built-in CentOS firewall only allows port 22 (SSH) by default and blocks all other traffic. | ||
- | |||
- | < | ||
- | iptables -I INPUT 3 -p udp --dport 123 -j ACCEPT | ||
- | iptables -I INPUT 3 -p tcp --dport 443 -j ACCEPT | ||
- | iptables -I INPUT 3 -p tcp --dport 80 -j ACCEPT | ||
- | |||
- | / | ||
- | iptables --line-numbers -nL | ||
- | </ | ||
- | |||
- | ==== Arno's Firewall ==== | ||
- | |||
- | If your backup server has an interface directly connected to the Internet, you should consider Arno's Firewall. | ||
- | |||
- | Disable the built-in firewall: | ||
- | |||
- | < | ||
- | service iptables stop | ||
- | service ip6tables stop | ||
- | chkconfig iptables off | ||
- | chkconfig ip6tables off | ||
- | </ | ||
- | |||
- | **[[networking: | ||
- | |||
- | I don't remember what these very important notes were for: | ||
- | |||
- | < | ||
- | NAT_LOCAL_REDIRECT=1 | ||
- | NAT_FORWARD_TCP=" | ||
- | </ | ||
- | |||
- | ===== Install OBS ===== | ||
- | |||
- | < | ||
- | wget http:// | ||
- | OBS_HOME=/ | ||
- | mkdir $OBS_HOME | ||
- | mv obsr-nix.tar.gz $OBS_HOME | ||
- | cd $OBS_HOME | ||
- | tar -xzvf obsr-nix.tar.gz | ||
- | sh $OBS_HOME/ | ||
- | </ | ||
- | |||
- | ===== First Login ===== | ||
- | |||
- | Login to the new backup server using a web browser. | ||
- | |||
- | The default username/ | ||
- | |||
- | Manage System -> Server Configuration -> Login Name | ||
- | |||
- | ===== Filesystem Tweaks ===== | ||
- | |||
- | Depending on how you partitioned the drive when you installed the OS, you may need to add a new logical volume for OBS to use. Ideally, the OBS ' | ||
- | |||
- | Assuming the entire installation disk was used as a LVM PV (physical volume), this command will use the rest of it to create a new LV (logical volume) for OBS ' | ||
- | |||
- | < | ||
- | lvcreate -n lv_obs_homes -l 100%FREE vg_backup | ||
- | |||
- | mkfs.ext3 / | ||
- | </ | ||
- | |||
- | Edit /etc/fstab and add add a line to mount the new LV with the ' | ||
- | |||
- | < | ||
- | vi /etc/fstab | ||
- | |||
- | / | ||
- | |||
- | mkdir / | ||
- | </ | ||
- | |||
- | Manage System -> Server Configuration -> System Home | ||
- | * ''/ | ||
- | Manage System -> Server Configuration -> User Homes | ||
- | * ''/ | ||
- | |||
- | ===== Copy Data ===== | ||
- | |||
- | < | ||
- | rsync -av / | ||
- | |||
- | rsync -av / | ||
- | </ | ||
- | |||
- | ===== Add Additional Storage ===== | ||
- | |||
- | https:// | ||
- | |||
- | Install a new disk drive, then create one large partition and format it: | ||
- | < | ||
- | fdisk /dev/sdb | ||
- | |||
- | mkfs.ext3 /dev/sdb1 | ||
- | </ | ||
- | |||
- | You want to mount the new space using the disk's UUID as a best practice. | ||
- | |||
- | < | ||
- | blkid | ||
- | </ | ||
- | |||
- | Edit /etc/fstab to mount the new partition with the ' | ||
- | |||
- | < | ||
- | vi /etc/fstab | ||
- | |||
- | # additional storage for OBS | ||
- | / | ||
- | UUID=40a09cc6-47d7-4061-b93b-a30d45659075 | ||
- | UUID=299dc4c1-0652-47d3-bbe5-bcf1788647d0 | ||
- | |||
- | mount -a | ||
- | mount | ||
- | </ | ||
- | |||
- | Then you can assign the new space for user homes in the web interface: | ||
- | |||
- | Manage System -> Server Configuration -> User Homes | ||
- | * ''/ | ||
- | * ''/ | ||
- | |||
- | ===== Data Validation ===== | ||
- | |||
- | http:// | ||
- | |||
- | ===== Run Server as Non-Root User (not finished) ===== | ||
- | |||
- | ====== Backup Clients ====== | ||
- | |||
- | :!: Remember to choose HTTPS for SSL encryption of communications between backup client and backup server. | ||
- | |||
- | ===== OBM Linux Client ===== | ||
- | |||
- | http:// | ||
- | |||
- | http:// | ||
- | |||
- | http:// | ||
- | |||
- | ==== Install ==== | ||
- | |||
- | Log into machine to be backed up giving yourself web management access in the process: | ||
- | |||
- | < | ||
- | ssh -X -l root hostname.example.com | ||
- | </ | ||
- | |||
- | :!: If you see an error in forwarding X11, it should go away after the next step. This is important to be able to run the GUI interface (below). | ||
- | |||
- | Install necessary libraries for a headless Linux server as client: | ||
- | |||
- | < | ||
- | yum install libXi libXp libXtst Xvfb xorg-x11-xauth | ||
- | </ | ||
- | |||
- | Install OBM: | ||
- | |||
- | < | ||
- | cd ~ | ||
- | wget http:// | ||
- | mkdir / | ||
- | cd / | ||
- | tar -xzvf ~/ | ||
- | |||
- | ./ | ||
- | cat install.log # | ||
- | ps -ef | grep obm | ||
- | chkconfig --list |grep obm | ||
- | </ | ||
- | |||
- | :!: For all Linux/Unix backup jobs, it is suggested to verify the '' | ||
- | |||
- | ^Temporary Directory | ||
- | ^Exclude the following files/ | ||
- | |||
- | ==== SME Server Additional Notes ==== | ||
- | |||
- | http:// | ||
- | |||
- | On 64-bit SME 8 servers, you might have to install the requisites with this command: | ||
- | |||
- | < | ||
- | yum install libXi libXp libXtst Xvfb xorg-x11-xauth --enablerepo=base --enablerepo=updates | ||
- | </ | ||
- | |||
- | You will need to enable X forwarding: | ||
- | |||
- | < | ||
- | mkdir -p / | ||
- | cd / | ||
- | echo X11Forwarding yes > 50X11Forwarding | ||
- | echo X11UseLocalhost yes > 50X11UseLocalhost | ||
- | expand-template / | ||
- | / | ||
- | </ | ||
- | |||
- | On SME Servers, which use runlevel 7, you must also enable automatic startup with these two commands: | ||
- | |||
- | < | ||
- | ln -s / | ||
- | ln -s / | ||
- | </ | ||
- | |||
- | You also need to run these '' | ||
- | |||
- | === Pre-Backup Command === | ||
- | |||
- | ^Name |Dump MySQL | | ||
- | ^Command | ||
- | ^Working Directory |/ | ||
- | |||
- | |||
- | === Post-Backup Command === | ||
- | |||
- | ^Name |Delete Dumped Files | | ||
- | ^Command | ||
- | ^Working Directory |/ | ||
- | |||
- | ==== Create and Run Backup Jobs ==== | ||
- | |||
- | :!: Use the GUI method if you can, but don't fight it. | ||
- | |||
- | :!: Use the Text Console method if you can't use the GUI (Configurator.sh) | ||
- | |||
- | :!: Use the Web Console method only if you have to. | ||
- | |||
- | :!: Be sure to edit the backup sets afterwards in the web interface to verify these settings: | ||
- | |||
- | * Backup sources as appropriate | ||
- | * Backup schedule as appropriate | ||
- | * Run scheduled backup on computers named field must have a hostname | ||
- | * Retention period set to 90 days | ||
- | * Compression type normal | ||
- | * Local copy (L1 backup) on or off | ||
- | * Local copy has separate retention settings | ||
- | * Use a separate backup job if L1 captures more files | ||
- | * Pre and post scripts | ||
- | * Dump MySQL maybe | ||
- | |||
- | === GUI Method === | ||
- | |||
- | This also works on headless Linux backup client servers with the prerequisite packages (listed above) installed. | ||
- | |||
- | Assuming you forwarded X in the SSH command line (-X) when you connected to the Linux backup client machine, we start the GUI interface like this: | ||
- | |||
- | < | ||
- | sh / | ||
- | </ | ||
- | |||
- | :!: If you get errors with X11 forwarding: | ||
- | |||
- | * Make sure the requisite packages listed above are installed on the headless host. | ||
- | * Make sure the SSH daemon on the headless host to be backed up has X11 Forwarding enabled | ||
- | * Restart the SSH daemon if a change was made | ||
- | |||
- | < | ||
- | vim / | ||
- | |||
- | X11Forwarding yes | ||
- | |||
- | service sshd restart | ||
- | </ | ||
- | |||
- | === Text Console Method === | ||
- | |||
- | We start the text interface like this: | ||
- | |||
- | < | ||
- | sh / | ||
- | </ | ||
- | |||
- | You can run a previously created job like this: | ||
- | |||
- | < | ||
- | sh / | ||
- | </ | ||
- | |||
- | === Web Console Method === | ||
- | |||
- | You can create a backup account and backup job using the web interface, but it's easier and more common to use the client software on the backup client machine. | ||
- | |||
- | :!: You may want to enable the Trial feature of your OBS. This makes it very easy to create new accounts and backup jobs all from the client machines. | ||
- | |||
- | ===== OBM Windows Client ===== | ||
- | |||
- | http:// | ||
- | |||
- | Download from http:// | ||
- | |||
- | - Weekly System State Backup -> Microsoft Windows System Backup | ||
- | - Nightly MSSQL Backup -> MS Exchange Server Backup | ||
- | - Nightly Files Backup -> File Backup | ||
- | |||
- | < | ||
- | C: | ||
- | C:\Program Files\CYMA | ||
- | C:\Program Files\QuickPen | ||
- | C:\Users | ||
- | </ | ||
- | |||
- | ===== Hyper-V ===== | ||
- | |||
- | https:// | ||
- | |||
- | ===== Customization ===== | ||
- | |||
- | http:// | ||
- | |||
- | ===== Small Business Server (SBS) ===== | ||
- | |||
- | ==== Suggested Backup Jobs Configuration ==== | ||
- | |||
- | FIXME | ||
- | |||
- | * Turn off circular logging | ||
- | * Do full backups on MS Exchange | ||
- | |||
- | ^ Ahsay Backup Type ^ Run ^ Time ^ Notes ^ | ||
- | | File Storage | ||
- | | Full Exchange Image | Friday | ||
- | | Database Backup | ||
- | | MS Windows System Backup | ||
- | |||
- | ===== Troubleshooting ===== | ||
- | |||
- | ==== Validate User Data ==== | ||
- | |||
- | https:// | ||
- | |||
- | ==== Disk Space ==== | ||
- | |||
- | === Move a Backup Account to a new User Home === | ||
- | |||
- | https:// | ||
- | |||
- | - Stop OBSR | ||
- | - Move the user to the new User Home | ||
- | - Restart OBSR | ||
- | |||
- | < | ||
- | service obsr stop | ||
- | |||
- | mv / | ||
- | |||
- | service obsr start | ||
- | </ | ||
- | |||
- | Moving to a different server is slightly different. | ||
- | |||
- | - Stop OBSR on original server | ||
- | - Move the user to a temporary folder | ||
- | - Restart OBSR on original server | ||
- | - Stop OBSR on new server | ||
- | - Rsync (copy) the user folder to the new server | ||
- | - Start OBSR on new server | ||
- | - Delete temporary folder | ||
- | |||
- | === Replication of a Moved User Account === | ||
- | |||
- | https:// | ||
- | |||
- | ==== Processes ==== | ||
- | |||
- | http:// | ||
- | |||
- | http:// | ||
- | |||
- | You may see in Task Manager a process CDPService.exe which may use a lot of memory and CPU. For clients not using CDP, disable that service like this: | ||
- | |||
- | < | ||
- | sc config " | ||
- | </ | ||
- | |||
- | ==== Databases ==== | ||
- | |||
- | http:// | ||
- | |||
- | Microsoft System databases such as ' | ||
- | |||
- | For other databases, particularly larger databases, you can also use Transaction Log backups. | ||
- | |||
- | See **[[computing: | ||
- | |||
- | ==== Outlook ==== | ||
- | |||
- | Use a pre-backup script to close Outlook. | ||
- | |||
- | https:// | ||
- | |||
- | ==== Exchange ==== | ||
- | |||
- | If you see something like: | ||
- | |||
- | < | ||
- | The writer vetoed the shadow copy creation process during the backup preparation state. | ||
- | (VSS_WS_FAILED_AT_PREPARE_BACKUP) | ||
- | </ | ||
- | |||
- | See: https:// | ||
- | |||
- | http:// | ||
- | |||
- | === Disable Circular Logging === | ||
- | |||
- | http:// | ||
- | |||
- | http:// |