Difference between revisions of "SME-101.09: Supplément: SME & BackupPC-4.2"

(WOL)

# cat /proc/partitions

major minor  #blocks  name

   8       16   20971520 sdb
   8        0    8388608 sda
   8        1     256000 sda1
   8        2    8131584 sda2
   9        1    8127488 md1
 253        0    7286784 dm-0
 253        1     835584 dm-1
   9        0     255936 md0

# fdisk /dev/sdb

p  [Entrée]

 Disque /dev/sdb: 21.5 Go, 21474836480 octets
 255 têtes, 63 secteurs/piste, 2610 cylindres
 Unités = cylindres de 16065 * 512 = 8225280 octets
 Sector size (logical/physical): 512 bytes / 512 bytes
 I/O size (minimum/optimal): 512 bytes / 512 bytes
 Identifiant de disque : 0x51550b50

 Périphérique Amorce  Début        Fin      Blocs     Id  Système

 Commande (m pour l'aide):
# cat /proc/partitions

major minor  #blocks  name

   8       16   20971520 sdb
   8       17   20964793 sdb1
   8        0    8388608 sda
   8        1     256000 sda1
   8        2    8131584 sda2
   9        1    8127488 md1
 253        0    7286784 dm-0
 253        1     835584 dm-1
   9        0     255936 md0

# df -h

Filesystem            Size  Used Avail Use% Mounted on
/dev/mapper/main-root
                      6,8G  3,5G  2,9G  55% /
tmpfs                 1,9G     0  1,9G   0% /dev/shm
/dev/md0              239M   77M  150M  34% /boot

# df -i

Filesystem            Inodes  IUsed  IFree IUse% Mounted on
/dev/mapper/main-root
                     456064 155019 301045   34% /
tmpfs                490294      1 490293    1% /dev/shm
/dev/md0              64000     54  63946    1% /boot

# mkfs.ext4  -L SAUVEGARDE  -b 1024  -N 15000000  -m 1 /dev/sdb1

mke2fs 1.41.12 (17-May-2010)
Avertissement : 1463 blocs inutilisés.

Étiquette de système de fichiers=SAUVEGARDE
Type de système d'exploitation : Linux
Taille de bloc=1024 (log=0)
Taille de fragment=1024 (log=0)
« Stride » = 0 blocs, « Stripe width » = 0 blocs
15005976 i-noeuds, 20963329 blocs
209647 blocs (1.00%) réservés pour le super utilisateur
Premier bloc de données=1
Nombre maximum de blocs du système de fichiers=88080384
2559 groupes de blocs
8192 blocs par groupe, 8192 fragments par groupe
5864 i-noeuds par groupe
Superblocs de secours stockés sur les blocs :
        8193, 24577, 40961, 57345, 73729, 204801, 221185, 401409, 663553,
        1024001, 1990657, 2809857, 5120001, 5971969, 17915905, 19668993

Écriture des tables d'i-noeuds : complété
Création du journal (32768 blocs) : complété
Écriture des superblocs et de l'information de comptabilité du système de
fichiers : complété

Le système de fichiers sera automatiquement vérifié tous les 30 montages ou
après 180 jours, selon la première éventualité. Utiliser tune2fs -c ou -i
pour écraser la valeur.

# mkdir -p /var/lib/BackupPC

cat >> /etc/fstab <<'EOT'
# Pour le volume de stockage des sauvegardes de BackupPC
/dev/sdb1               /var/lib/BackupPC       ext4    noatime         0 0

EOT

# tail -n 5 /etc/fstab

# mount -a

# mount | grep BackupPC

# df -h

# mkdir -p /var/lib/BackupPC/{etc,log}

# ln -s /var/lib/BackupPC/etc /etc/BackupPC

# ln -s /var/lib/BackupPC/log /var/log/BackupPC

db yum_repositories set fws repository  \
BaseURL http://repo.firewall-services.com/centos/\$releasever \
EnableGroups no GPGCheck yes  \
Name "Firewall Services"  \
GPGKey http://repo.firewall-services.com/RPM-GPG-KEY  \
Visible no  \
status disabled

# signal-event yum-modify

# yum -y --enablerepo=smecontribs,fws install BackupPC4 smeserver-BackupPC

# signal-event post-upgrade ; signal-event reboot

# mkdir /var/lib/BackupPC/script

# chown backuppc:backuppc /var/lib/BackupPC/script

# chmod 750 /var/lib/BackupPC/script

cat > /var/lib/BackupPC/script/pre-sauvegarde.sh <<'EOT'
#!/bin/sh

#-------------------------------------------
# /var/lib/BackupPC/script/pre-sauvegarde.sh
#
# Michel-André, 2018-05-06_09h50
#-------------------------------------------

# Désactivation d'AutoBlock
/usr/bin/ssh -l root $1 "config setprop sshd AutoBlock disabled; /sbin/e-smith/signal-event remoteaccess-update"

# Pause de BackupPC
/bin/sleep 45

# Le test ci-dessous va écrire le statut de la propriété AutoBlock dans le journal.
# Output from DumpPreUserCmd:     AutoBlock=disabled
# ou
# Output from DumpPreUserCmd:     AutoBlock=enabled
if  ( ! (/usr/bin/ssh -l root $1 config show sshd | grep  'AutoBlock=disabled') )
    then
        /bin/mail -s "AutoBlock=disabled NON FONCTIONNEL, arrêt des sauvegardes de la machine $1 pour 24 heures" admin@micronator-101.org < /dev/null

#    Arrêt de la sauvegarde en cours et désactivation des sauvegardes de cette machine pour 24 heures.
#
#    Référence: https://www.mail-archive.com/backuppc-users@lists.sourceforge.net/msg10075.html
#    BackupPC_serverMesg stop HOST REQ_USER BACKOFF
#    HOST is the host to cancel, REQ_USER is the requesting user (just for log purposes) and BACKOFF is the backoff time in hours.
#
    /usr/share/BackupPC/bin/BackupPC_serverMesg stop $1 backuppc 24
fi

# pre-backup
/usr/bin/ssh -l root $1 "/sbin/e-smith/signal-event pre-backup"

# Pause de BackupPC
/bin/sleep 15

EOT
# chown backuppc:backuppc /var/lib/BackupPC/script/pre-sauvegarde.sh

# chmod 550 /var/lib/BackupPC/script/pre-sauvegarde.sh

/var/lib/BackupPC/script/pre-sauvegarde.sh $host

cat > /var/lib/BackupPC/script/post-sauvegarde.sh <<'EOT'
#!/bin/sh

#--------------------------------------------
# /var/lib/BackupPC/script/post-sauvegarde.sh
#
# Michel-André, 2018-05-06_09h58
#--------------------------------------------

# Commande post-backup
/usr/bin/ssh -l root $1 "/sbin/e-smith/signal-event post-backup"

# Pause de BackupPC
/bin/sleep 15

# Activation d'AutoBlock
/usr/bin/ssh -l root $1 "config setprop sshd AutoBlock enabled; /sbin/e-smith/signal-event remoteaccess-update"

# Pause de BackupPC
/bin/sleep 45

# Le test ci-desous va écrire le statut de AutoBlock dans le journal.
# Output from DumpPreUserCmd:     AutoBlock=disabled
# ou
# Output from DumpPreUserCmd:     AutoBlock=enabled

if  ( ! (/usr/bin/ssh -l root $1 config show sshd | grep  'AutoBlock=enabled') )
    then
        /bin/mail -s "AutoBlock=ensabled NON FONCTIONNEL. Vérifiez le paramètre de la machine $1 s.v.p." admin@micronator-101.org < /dev/null
fi

EOT

# chown backuppc:backuppc  /var/lib/BackupPC/script/post-sauvegarde.sh

# chmod 550  /var/lib/BackupPC/script/post-sauvegarde.sh

# ls -lsd /var/lib/BackupPC/script/post-sauvegarde.sh

/var/lib/BackupPC/script/post-sauvegarde.sh $host

# cat /etc/passwd | grep backuppc

backuppc:x:393:393::/var/lib/BackupPC:/sbin/nologin

# su -s /bin/bash backuppc

# ssh-keygen -t rsa -b 2048

Generating public/private rsa key pair.
Enter file in which to save the key (/var/lib/BackupPC/.ssh/id_rsa): [Entrée]
Created directory '/var/lib/BackupPC/.ssh'.
Enter passphrase (empty for no passphrase): [Entrée]
Enter same passphrase again: [Entrée]
Your identification has been saved in /var/lib/BackupPC/.ssh/id_rsa.
Your public key has been saved in /var/lib/BackupPC/.ssh/id_rsa.pub.
The key fingerprint is:
a9:cb:44:f6:1a:ec:df:aa:1a:85:69:30:a5:5e:b6:5e backuppc@sme-9
The key's randomart image is:
+--[ RSA 2048]----+
|   .....         |
|   ...o.         |
| o....  .        |
|ooB      .       |
|++++    S        |
|+*oo             |
|.E=              |
|.  .             |
|                 |
+-----------------+

ls -ls /var/lib/BackupPC/.ssh/

2 -rw------- 1 backuppc backuppc 1675 28 avril 10:30 id_rsa
1 -rw-r--r-- 1 backuppc backuppc  396 28 avril 10:30 id_rsa.pub

# cat /var/lib/BackupPC/.ssh/id_rsa.pub | ssh -p 2222 root@127.0.0.1 "cat >> /root/.ssh/authorized_keys2"

The authenticity of host '[127.0.0.1]:2222 ([127.0.0.1]:2222)' can't be established.
RSA key fingerprint is a0:2f:27:ab:cc:d8:a0:57:fc:57:ee:63:dd:58:cc:02.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '[127.0.0.1]:2222' (RSA) to the list of known hosts.
root@127.0.0.1's password: mot-de-passe-de-root_du-serveur-BackupPC

# ssh -p 2222 root@127.0.0.1

 Last login: Fri Apr 28 10:31:11 2018 from 127.0.0.1
 ************ Welcome to SME Server 9.2 *************

 Before editing configuration files, familiarise
 yourself with the automated events and templates
 systems.

 Please take the time to read the documentation
 http://wiki.contribs.org/Main_Page

 Remember that SME Server is free to download
 and use, but it is not free to build

 Please help the project :
 http://wiki.contribs.org/Donate

 ****************************************************
# exit

# exit

# su -s /bin/bash backuppc

# /usr/share/BackupPC/bin/BackupPC_sendEmail -u admin@micronator.org

# exit

# touch /var/lib/BackupPC/.ssh/config

# chown backuppc:backuppc /var/lib/BackupPC/.ssh/config

# chmod 640 /var/lib/BackupPC/.ssh/config

cat > /var/lib/BackupPC/.ssh/config <<'EOT'
# Michel-André: 2018-04-24_11h04 HNE
# Spécification du port SSH à être utilisé par BackupPC
Host *
    Port 2222

EOT

# ls -ls /var/lib/BackupPC/.ssh/config

0 -rw-r----- 1 backuppc backuppc 120 28 avril 10:52 /var/lib/BackupPC/.ssh/config

# db configuration show backuppc

backuppc=service
    examples=enabled
    status=enabled
    sudo=/usr/bin/rsync,/bin/gtar

# signal-event backuppc-update

/var/lib/BackupPC/script/pre-sauvegarde.sh $host
/var/lib/BackupPC/script/post-sauvegarde.sh $host
/var/lib/BackupPC/script/pre-sauvegarde.sh $host
/var/lib/BackupPC/script/post-sauvegarde.sh $host
cat /root/.ssh/authorized_keys2

...
Processing event: pre-backup
Running event handler: /etc/e-smith/events/actions/generic_template_expand
...
Processing event: remoteaccess-update
Running event handler: /etc/e-smith/events/actions/generic_template_expand
...
Processing event: post-backup
Running event handler: /etc/e-smith/events/post-backup/S10mysql-delete-dumped-tables
...
Processing event: remoteaccess-update
Running event handler: /etc/e-smith/events/actions/generic_template_expand
...

# df -h

Filesystem            Size  Used Avail Use% Mounted on
/dev/mapper/main-root
                      6,8G  3,6G  2,8G  57% /
tmpfs                 1,9G     0  1,9G   0% /dev/shm
/dev/md0              239M   77M  150M  34% /boot
/dev/sdb1              17G  1,7G   15G  11% /var/lib/BackupPC

# df -i

/dev/mapper/main-root
                       456064 159191   296873   35% /
tmpfs                  490294      1   490293    1% /dev/shm
/dev/md0                64000     54    63946    1% /boot
/dev/sdb1            15005976 201294 14804682    2% /var/lib/BackupPC

# ls -als /temp/

total 12
4 drwxr-xr-x  2 root root 4096  3 mars   2017 .
4 dr-xr-xr-x 27 root root 4096  5 mai   11:47 ..
4 -rw-------  1 root root 1314  3 mars   2017 renouvelerSSL

...
2018-05-06 10:00:01 Removing filled backup 0
2018-05-06 10:00:01 BackupPC_backupDelete: removing #0
2018-05-06 10:00:01 BackupPC_backupDelete: No prior backup for merge
...

...
2018-05-06 10:03:23 BackupPC_refCountUpdate: host 127.0.0.1 got 0 errors (took 1 secs)
2018-05-06 10:03:23 Finished BackupPC_backupDelete, status = 0 (running time: 202 sec)
...

...
2018-05-06 10:05:43 Output from DumpPreUserCmd:     AutoBlock=disabled
2018-05-06 10:06:02 full backup started for directory /
2018-05-06 10:13:31 Output from DumpPostUserCmd:     AutoBlock=enabled
2018-05-06 10:13:32 full backup 3 complete, 84114 files, 3331261397 bytes, 0 xferErrs (0 bad files, 0 bad shares, 0 other)
...

...
2018-05-06 10:13:32 Removing filled backup 1
2018-05-06 10:13:32 BackupPC_backupDelete: removing #1
2018-05-06 10:13:32 BackupPC_backupDelete: No prior backup for merge
...

...
2018-05-06 10:15:21 BackupPC_refCountUpdate: host 127.0.0.1 got 0 errors (took 1 secs)
2018-05-06 10:15:21 Finished BackupPC_backupDelete, status = 0 (running time: 109 sec)
...

# su -s /bin/bash backuppc

# cat /var/lib/BackupPC/.ssh/id_rsa.pub | ssh -p 2222 root@192.168.1.152 "cat >> /root/.ssh/authorized_keys2"

The authenticity of host '[192.168.1.152]:2222 ([192.168.1.152]:2222)' can't be established.
RSA key fingerprint is c0:24:7f:fe:00:83:cd:f6:2b:ad:e7:b9:dc:b4:aa:bf.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '[192.168.1.152]:2222' (RSA) to the list of known hosts.
root@192.168.1.152's password: mot-de-passe-de-root-du-serveur-SOURCE

# ssh -p 2222 root@192.168.1.152  "cat /root/.ssh/authorized_keys2"

ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA24XUsh60M8PA7Xe6+lsk7+LdnpHcTx+U8XLjhRpUXTj2muSdS8QjBv4A7eSyiXOt550HUPlLELMZuewPnNt+ODViPAl7TC+at7xSfDGHmlcdDek+M36P
OSIyStoK2LEGsvnK2v6lpo3exChf0QTfGMAn43nxybyFGJ+I3USG/HAfuqzqfFrCwFxYxc8WcjcocK6HXXziF8E1BWheyO4qz1S0KWq2NEr7KdOa2xT+xYB5wtSKrYdJV7QEoGOtZ3PwNvE6
xTl3rAcHI7ZVMSJAGRjQLKPXo9isfzZfs/FW8QuoqqZCSPYeIp/n+qjj/iTttfO17sbzF09HKdSCboUEw== backuppc@sme-9

# cat /var/lib/BackupPC/.ssh/id_rsa.pub

ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA24XUsh60M8PA7Xe6+lsk7+LdnpHcTx+U8XLjhRpUXTj2muSdS8QjBv4A7eSyiXOt550HUPlLELMZuewPnNt+ODViPAl7TC+at7xSfDGHmlcdDek+M36P
OSIyStoK2LEGsvnK2v6lpo3exChf0QTfGMAn43nxybyFGJ+I3USG/HAfuqzqfFrCwFxYxc8WcjcocK6HXXziF8E1BWheyO4qz1S0KWq2NEr7KdOa2xT+xYB5wtSKrYdJV7QEoGOtZ3PwNvE6
xTl3rAcHI7ZVMSJAGRjQLKPXo9isfzZfs/FW8QuoqqZCSPYeIp/n+qjj/iTttfO17sbzF09HKdSCboUEw== backuppc@sme-9

# exit

 # mkdir /var/lib/BackupPC/mes_restaurations

# chown backuppc:backuppc /var/lib/BackupPC/mes_restaurations/

# chmod 700 /var/lib/BackupPC/mes_restaurations/

# ls -lsd /var/lib/BackupPC/mes_restaurations/

Options obligatoires:
   -h host         hôte à partir duquel l'archive TAR est créée
   -n dumpNum      numéro de la sauvegarde à partir de laquelle l'archive TAR est créée
                   Un nombre négatif signifie par rapport à la fin (par exemple, -1
                   signifie la sauvegarde la plus récente, -2 la 2ème plus récente etc).
   -s shareName    nom du partage à partir duquel l'archive TAR est créée

Autres options:
   -t              affiche un résumé des totaux
   -r pathRemove   préfixe du chemin qui sera remplacé par pathAdd
   -p pathAdd      préfixe du nouveau chemin
   -b BLOCKS       BLOCKS x 512 octets par enregistrement (20 par défaut, identique à tar)
   -w writeBufSz   taille du tampon d'écriture (1048576 = 1 Mo par défaut)
   -e charset      jeu de caractères pour l'encodage des noms de fichiers (par défaut: la
                   valeur de $Conf{ClientCharset} utilisée lorsque la sauvegarde a été
                   effectuée)
   -l              affiche la liste des fichiers; ne génère pas d'archive TAR
   -L              affiche la liste détaillée des fichiers; ne génère pas d'archive TAR

# su - backuppc -s /bin/sh

$ cd /var/lib/BackupPC/mes_restaurations/

$ /usr/share/BackupPC/bin/BackupPC_tarCreate  -h 192.168.1.152 -n 2 -s /  / > source-152-2.tar

$ ls -ls

2357982 -rw-r--r-- 1 backuppc backuppc 2414571520 15 mai 15:11 source-152-2.tar

$ cat /var/lib/BackupPC/.ssh/id_rsa.pub | ssh -p 2222 root@192.168.1.102 "cat >> /root/.ssh/authorized_keys2"

The authenticity of host '[192.168.1.102]:2222 ([192.168.1.102]:2222)' can't be established.
RSA key fingerprint is be:a2:3f:cf:c1:4f:05:63:1a:12:c8:75:c5:a7:2c:6f.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '[192.168.1.102]:2222' (RSA) to the list of known hosts.
root@192.168.1.102's password: mot-de-passe-de-root-du_serveur-DESTINATION

$ /usr/bin/ssh -p2222 root@192.168.1.102 "/sbin/e-smith/config show sshd"

    AutoBlock=enabled
    AutoBlockTime=900
    AutoBlockTries=4
    LoginGraceTime=600
    MaxAuthTries=2
    MotdStatus=enabled
    PasswordAuthentication=yes
    PermitRootLogin=yes
    TCPPort=2222
    UsePAM=yes
    access=public
    status=enabled

$ exit

$ exit

$ /usr/bin/ssh -p 2222 root@192.168.1.102 "/sbin/e-smith/signal-event pre-restore; /bin/sleep 15"

$ /usr/bin/ssh -p 2222 root@192.168.1.102 "/bin/date; cat /var/log/messages | grep  'Processing event: pre-restore' | tail -1"

mar. mai 15 18:26:02 EDT 2018
May 15 18:25:21 destination esmith::event[2537]: Processing event: pre-restore

$ ssh -p 2222 root@192.168.1.102 "cd / && /bin/tar -xvv; /sbin/e-smith/signal-event post-upgrade; /sbin/e-smith/signal-event reboot" < source-152-2.tar

...
-rw-r--r-- root/root                   172 2007-08-28 10:54 ./var/www/icons/small/unknown.png
-rw-r--r-- root/root                   125 2004-11-20 20:16 ./var/www/icons/small/uu.gif
-rw-r--r-- root/root                   166 2007-08-28 10:54 ./var/www/icons/small/uu.png
bash:   : commande introuvable
$

# login as: root

root@192.168.1.152's password: mot-de-psse-de-root-sur-SOURCE
Last login: Tue May 15 19:31:03 2018
************ Welcome to SME Server 9.2 *************

Before editing configuration files, familiarise
yourself with the automated events and templates
systems.

Please take the time to read the documentation
http://wiki.contribs.org/Main_Page

Remember that SME Server is free to download
and use, but it is not free to build

Please help the project :
http://wiki.contribs.org/Donate

****************************************************
[root@source ~]#

# ifconfig

eth0      Link encap:Ethernet  HWaddr 08:00:27:D7:69:CF
          inet adr:192.168.2.152  Bcast:192.168.2.255  Masque:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:79 errors:0 dropped:0 overruns:0 frame:0
          TX packets:51 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 lg file transmission:1000
          RX bytes:5968 (5.8 KiB)  TX bytes:6941 (6.7 KiB)

eth1      Link encap:Ethernet  HWaddr 08:00:27:D1:6F:3C
          inet adr:192.168.1.152  Bcast:192.168.1.255  Masque:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:342 errors:0 dropped:0 overruns:0 frame:0
          TX packets:250 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 lg file transmission:1000
          RX bytes:60892 (59.4 KiB)  TX bytes:23676 (23.1 KiB)

lo        Link encap:Boucle locale
          inet adr:127.0.0.1  Masque:255.0.0.0
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:107 errors:0 dropped:0 overruns:0 frame:0
          TX packets:107 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 lg file transmission:0
          RX bytes:8435 (8.2 KiB)  TX bytes:8435 (8.2 KiB)

# ifconfig

eth2      Link encap:Ethernet  HWaddr 00:1C:C0:F0:1F:95
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:27 errors:0 dropped:0 overruns:0 frame:0
          TX packets:47 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 lg file transmission:1000
          RX bytes:2001 (1.9 KiB)  TX bytes:5972 (5.8 KiB)

eth3      Link encap:Ethernet  HWaddr 00:50:8B:AE:88:89
          inet adr:192.168.1.1  Bcast:192.168.1.255  Masque:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:221 errors:0 dropped:0 overruns:0 frame:0
          TX packets:156 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 lg file transmission:1000
          RX bytes:38647 (37.7 KiB)  TX bytes:15939 (15.5 KiB)

lo        Link encap:Boucle locale
          inet adr:127.0.0.1  Masque:255.0.0.0
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:64 errors:0 dropped:0 overruns:0 frame:0
          TX packets:64 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 lg file transmission:0
          RX bytes:5212 (5.0 KiB)  TX bytes:5212 (5.0 KiB)

# cat /etc/udev/rules.d/70-persistent-net.rules

# This file was automatically generated by the /lib/udev/write_net_rules
# program, run by the persistent-net-generator.rules rules file.
#
# You can modify it, as long as you keep each rule on a single
# line, and change only the value of the NAME= key.

# PCI device 0x8086:0x100e (e1000)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="08:00:27:D7:69:CF", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0"

# PCI device 0x8086:0x100e (e1000)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="08:00:27:D1:6F:3C", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1"

# PCI device 0x8086:0x100e (e1000)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1C:C0:F0:1F:95", ATTR{type}=="1", KERNEL=="eth*", NAME="eth2"

# PCI device 0x8086:0x100e (e1000)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:50:8B:AE:88:89", ATTR{type}=="1", KERNEL=="eth*", NAME="eth3"

# This file was automatically generated by the /lib/udev/write_net_rules
# program, run by the persistent-net-generator.rules rules file.
#
# You can modify it, as long as you keep each rule on a single
# line, and change only the value of the NAME= key.

#PCI device 0x8086:0x100e (e1000)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="08:00:27:D7:69:CF", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0"

# PCI device 0x8086:0x100e (e1000)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="08:00:27:D1:6F:3C", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1"

# PCI device 0x8086:0x100e (e1000)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1C:C0:F0:1F:95", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0"

# PCI device 0x8086:0x100e (e1000)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:50:8B:AE:88:89", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1"

# cd /etc/sysconfig/network-scripts

# cat ifcfg-eth2 | grep eth2

DEVICE=eth2

# sed -i 's/DEVICE=eth2/DEVICE=eth0/' ifcfg-eth2

# mv  ifcfg-eth2  ifcfg-eth0

# cat ifcfg-eth3 | grep eth3

DEVICE=eth3

# sed -i 's/DEVICE=eth3/DEVICE=eth1/' ifcfg-eth3

# mv  ifcfg-eth3  ifcfg-eth1

# mv  route-eth2  route-eth0

# sed -i 's/eth3/eth1/' route-eth3

# mv route-eth3 route-eth1

# shutdown -r now

# ifconfig

eth0      Link encap:Ethernet  HWaddr 00:1C:C0:F0:1F:95
          inet adr:192.168.2.102  Bcast:192.168.2.255  Masque:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:27 errors:0 dropped:0 overruns:0 frame:0
          TX packets:47 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 lg file transmission:1000
          RX bytes:2001 (1.9 KiB)  TX bytes:5972 (5.8 KiB)

eth1      Link encap:Ethernet  HWaddr 00:50:8B:AE:88:89
          inet adr:192.168.1.102  Bcast:192.168.1.255  Masque:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:221 errors:0 dropped:0 overruns:0 frame:0
          TX packets:156 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 lg file transmission:1000
          RX bytes:38647 (37.7 KiB)  TX bytes:15939 (15.5 KiB)

lo        Link encap:Boucle locale
          inet adr:127.0.0.1  Masque:255.0.0.0
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:64 errors:0 dropped:0 overruns:0 frame:0
          TX packets:64 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 lg file transmission:0
          RX bytes:5212 (5.0 KiB)  TX bytes:5212 (5.0 KiB)

# exit

# config show sshd

sshd=service
    AutoBlock=enabled
    AutoBlockTime=900
    AutoBlockTries=4
    LoginGraceTime=600
    MaxAuthTries=2
    MotdStatus=enabled
    PasswordAuthentication=yes
    PermitRootLogin=yes
    TCPPort=2222
    UsePAM=yes
    access=public
    status=enabled

# db configuration setprop sshd AutoBlock enabled

# db configuration setprop sshd AutoBlock disabled

# signal-event remoteaccess-update

# db configuration setprop sshd AutoBlockTries 4

# signal-event remoteaccess-update

# db configuration setprop sshd AutoBlockTime 900

# signal-event remoteaccess-update

# cat /proc/net/xt_recent/SSH

src=192.168.1.81 ttl: 128 last_seen: 4300025257 oldest_pkt: 3 4295469879, 4299976390, 4300025257

# iptables -L SSH_Autoblock -v

Chain  SSH_Autoblock (1 references)
 pkts  bytes target   prot  opt  in   out  source    destination
    3    156          all   --   any  any  anywhere  anywhere     recent: SET name: SSH side: source
    0      0 denylog  all   --   any  any  anywhere  anywhere     recent: CHECK seconds: 900 hit_count: 4 TTL-Match name: SSH side: source

# echo "/" > /proc/net/xt_recent/SSH

Nous avons éteint le serveur BackupPC à 20:59:23.	Le lendemain, nous avons amorcer le serveur BackupPC à 09:49:23. Le prochain réveil se fera à 10:00:00.
2018-05-05 20:59:23 Got signal TERM... cleaning up (exit code = 0)	... 2018-05-06 09:49:23 Reading hosts file 2018-05-06 09:50:26 BackupPC 4.2.0 (Perl v5.10.1) started, pid 2284 2018-05-06 09:50:27 Next wakeup is 2018-05-06 10:00:00 ...

Difference between revisions of "SME-101.09: Supplément: SME & BackupPC-4.2"

Revision as of 22:20, 30 October 2018

Description générale

Prérequis

Installation

Environnement

Serveur BackupPC

Paramètres SSH de tous les serveurs

Disque de stockage des sauvegardes

Création des liens symboliques

Installation de la Contrib BackupPC

AutoBlock

Contribution Fail2Ban

Scripts pré/post-sauvegarde

Script pre-sauvegarde.sh

Script post-sauvegarde.sh

Clé SSH de BackupPC

Accès à la page BackupPC

Configuration préliminaire de BackupPC

CGI

Paramètres de sauvegarde

Courriel

Horaire

Serveur

Xfer

Paramètres ssh

Propriétés DB

Réveil par le réseau (WOL)[5]

Configuration du gabarit localserver-template

Paramètres de sauvegarde

Courriel

Horaire

Xfer

Configuration du gabarit smeserver-template

Paramètres de sauvegarde

Courriel

Horaire

Xfer

Serveur hôte de BackupPC

Création de la machine hôte

Page d'accueil de la nouvelle machine

Vérification de la configuration

Clé SSH publique de BackupPC

Sauvegarde "Complète" de l'hôte BackupPC

Espace disque et nombre d'inodes

Première sauvegarde Incrémentielle

Deuxième sauvegarde Incrémentielle

Restauration d'un fichier

Nettoyage nocturne

Activation des sauvegardes automatiques

Serveur SOURCE

Création de la machine SOURCE dans BackupPC

Téléversement de la clé SSH de BackupPC vers SOURCE

Sauvegardes du Serveur SME SOURCE

Restauration de SOURCE sur DESTINATION

Description de la dernière sauvegarde de SOURCE

Création du fichier TAR de la sauvegarde

Environnement du Serveur DESTINATION

Téléversement de la clé SSH de BackupPC sur DESTINATION

Commande de pré-restauration

Arrêt du serveur SOURCE

Restauration

Réamorçage

Vérification

Site Web

Cartes réseaux du serveur de DESTINATION

Réamorçage

Déverminage

sshd & AutoBlock

Script de pré-sauvegarde

Script de post-sauvegarde

Navigation menu

Search

Réveil par le réseau (WOL)^[5]