Difference between revisions of "BackupPC Notes"

From New IAC Wiki
Jump to navigation Jump to search
Line 22: Line 22:
 
### net - openssh
 
### net - openssh
 
### utils - bzip2
 
### utils - bzip2
## Run the following commands on the client computer:
+
## install rsyncd service: cygrunsrv -I rsyncd -e CYGWIN=nontsec -p c:/cygwin/bin/rsync.exe -a "--daemon --no-detach"
### install rsyncd service: cygrunsrv -I rsyncd -e CYGWIN=nontsec -p c:/cygwin/bin/rsync.exe -a "--daemon --no-detach"
 
### start rsyncd service: cygrunsrv -S rsyncd
 
 
## download rsyncd.conf and rsyncd.secrets file
 
## download rsyncd.conf and rsyncd.secrets file
 +
## start rsyncd service: cygrunsrv -S rsyncd
 
##Set the firewall
 
##Set the firewall
 
### open port 873 TCP with the scope 134.50.87.0/255.255.255.0,134.50.3.0/255.255.255.0
 
### open port 873 TCP with the scope 134.50.87.0/255.255.255.0,134.50.3.0/255.255.255.0

Revision as of 20:21, 12 October 2009

BackupPC Docs

Web Interface

The webpage that hold status messages for BackupPC is http://192.168.40.196/backuppc/ The address will change as the system goes live.

Adding a client for rsync

  1. On winnebago (or other Linux box):
    1. make a new password with makepasswd --chars=128
    2. update rsyncd.secrets file: echo backuppc:DW045wp1vFY4b22ng53dwbi082Ve8CdsM0m5QpDyEuPvAxLtp2Xc3Q16PwSAwc2XWaj2T5eANN1Yfc1uXvMpoAmmWRV6Wo1FXDuwxMjKQhxhBndh96VI0Np9IWioSYJn > rsyncd.secrets
  2. On vienna
    1. edit /etc/BackupPC/hosts to add new entry
    2. in /etc/BackupPC/pc copy to a new file matching name in hosts file
    3. run ./checkports.sh to find a free rsync redirection port
    4. change port, ip, and rsyncpassword in new .pl file
    5. change ownership of new file: chown backuppc __.pl
  3. On the client computer:
    1. Install cygwin w/ rsync on the client with the following packages
      1. admin - cygrunsrv
      2. base - bash
      3. net - rsync
      4. net - openssh
      5. utils - bzip2
    2. install rsyncd service: cygrunsrv -I rsyncd -e CYGWIN=nontsec -p c:/cygwin/bin/rsync.exe -a "--daemon --no-detach"
    3. download rsyncd.conf and rsyncd.secrets file
    4. start rsyncd service: cygrunsrv -S rsyncd
    5. Set the firewall
      1. open port 873 TCP with the scope 134.50.87.0/255.255.255.0,134.50.3.0/255.255.255.0
      2. allow ping (advanced ICMP)

Config Files

Most of the configuration for BackupPC is in /etc/backuppc/config.pl Many of the options can be over-ridden with host-specific files, but the config.pl should be edited to give a good default for Windows machines. Most importantly $Conf{BackupFilesExclude} or $Conf{RsyncArgs} need to be configured to exclude the followng items:

  • Windows clients
    • hiberfil.sys holds RAM contents during hibernation
    • Temporary Internet Files IE cache
    • Firefox Internet Cache
    • RECYCLER Recyle Bin
    • pagefile.sys Swap file
    • System Volume Information System Restore files
    • NTUSER.DAT Can cause problems with being in use??
    • TEMP
  • Linux clients
    • /temp
    • /dev
    • /proc
    • /sys
    • /mnt
    • /media Ubuntu mounts for removable media
    • Firefox internet cache
    • Other caches??
    • Parts of /var??

Backup Method

rsync directly over ssh was rejected because of incompatibilities with rsync daemons launched via the ssh process. Instead the preferred method is rsync connected to a persistent rsyncd through an ssh tunnel. This tunnel can either be set up to the machine directly, or through an intermediary such at the IAC nat firewall box. ssh authentication is taken care of through authorized_keys and rsync authentication uses a password that is randomly generated when the client is first set up for backups.

Operating system specific configuration parameters (such as excluded files) are handled in separate files (such as /etc/BackupPC/baseXP.pl) included from host files.

Storage Setup on Vienna

Vienna has 6x1TB drives set up under Solaris10 with a ZFS filesystem. The RAID level for the OS is RAID1 and the RAID level for the datapool is RAID10. Compression is disabled in BackupPC and is handled by ZFS instead.

Things we need to think about

  • Open files (Outlook) (shadow drives?)
  • Thousands of small files can take very long to index (Pulse Recording can accumulate >60k)
  • checksum seeding
  • Database dumps from MySQL on webserver
  • User notification policy??