35
edits
Changes
Jump to navigation
Jump to search
Line 1:
Line 1: − + + + + + Line 19:
Line 23: − + − + Line 44:
Line 48: + Line 62:
Line 67: − + − + − − Line 76:
Line 79: − 1. Using <nowiki>"password=your_password"</nowiki> in cURL will cause the password to appear momentarily in the ps listing. As described above, this is best avoided by placing the password in a file and using -F <nowiki>"password=<your_password_file" </nowiki>.<br>+ − 2. The cookie jar ~/.sme_cookies should not be made world readable otherwise others could use your downloaded cookies. Likewise the password file should also be protected!}}+ Line 98:
Line 101: − For Example:+ − + − + − <nowiki>https://snoopy/server-common/cgi-bin/login</nowiki> && \+ − − − +
Backup SME Server Remotely Using cURL (view source)
Revision as of 18:43, 11 June 2017
, 18:43, 11 June 2017→Scripting cURL and Improving Security
===Introduction===
===Introduction===
This HowTo describes a simple way to backup your SME Server remotely using cURL and requires no changes to your SME Server. Further, cURL requires no user interaction and can be scripted or automated using cron to perform regular backups.
This HowTo describes a simple way to backup your SME Server remotely using cURL and requires no changes to your SME Server. Further, cURL requires no user interaction and can be scripted or automated using cron to perform regular backups. If the file system the backup is sent to is large file enabled (not DOS) this is also a fairly reliable way to get a desktop style backup > 4GB.
The following is updated, tested and confirmed for SME Server 9
'''With an updated to SME Server 9.1 circa Q1 2017 it became necessary to add a -F back= argument to the login curl the below has been updated to reflect this.'''
===Pre-Requisites===
===Pre-Requisites===
These two actions map to the following cURL commands:
These two actions map to the following cURL commands:
curl -s -k -b ~/.sme_cookies -c ~/.sme_cookies -F "username=admin" -F "password=your_password" \
curl -s -k -b ~/.sme_cookies -c ~/.sme_cookies -F username='admin' -F password='your_password' -F <nowiki>back='https://your_sme_server/'</nowiki> \
<nowiki>https://your_sme_server/server-common/cgi-bin/login</nowiki>
<nowiki>https://your_sme_server/server-common/cgi-bin/login</nowiki>
curl -f -s -k -b ~/.sme_cookies -F function=desktop-backup -F state=perform \
curl -f -s -k -b ~/.sme_cookies -H 'Expect:' -F function=desktop-backup -F state=perform \
<nowiki>https://your_sme_server/server-manager/cgi-bin/backup > backupfile.tar.gz</nowiki>
<nowiki>https://your_sme_server/server-manager/cgi-bin/backup > backupfile.tar.gz</nowiki>
Where:
Where:
* -b <cookies> Send cookies to server
* -b <cookies> Send cookies to server
* -c <cookies> Save cookies here, this is where it stashes your login credentials between step 1) and 2)
* -c <cookies> Save cookies here, this is where it stashes your login credentials between step 1) and 2)
* -H Used to set the HTML Expect: header to blank (was not required prior to SME Server 9)
* -F Fill in form field
* -F Fill in form field
* <url>
* <url>
#!/bin/sh
#!/bin/sh
curl -s -k -b ~/.sme_cookies -c ~/.sme_cookies -F username=admin -F "password=<~/sme_password" \
curl -s -k -b ~/.sme_cookies -c ~/.sme_cookies -F username=admin -F "password=<~/sme_password" -F <nowiki>back='https://snoopy/'</nowiki> \
<nowiki>https://snoopy/server-common/cgi-bin/login</nowiki> && \
<nowiki>https://snoopy/server-common/cgi-bin/login</nowiki> && \
curl -f -s -k -b ~/.sme_cookies -F function=desktop-backup -F state=perform \
curl -f -s -k -b ~/.sme_cookies -H 'Expect:' -F function=desktop-backup -F state=perform \
<nowiki>https://snoopy/server-manager/cgi-bin/backup > /home/smebackup/sme-snoopy-`/bin/date +\%d`.tgz</nowiki>
<nowiki>https://snoopy/server-manager/cgi-bin/backup > /home/smebackup/sme-snoopy-`/bin/date +\%d`.tgz</nowiki>
In this script we have combined the two curl commands via an && so that the second command will only run if the first command succeeds.
In this script we have combined the two curl commands via an && so that the second command will only run if the first command succeeds.
{{Warning box|There are a couple of security considerations that you should consider when using curl.
{{Warning box|There are a couple of security considerations that you should consider when using curl.
# Using <nowiki>"password=your_password"</nowiki> in cURL will cause the password to appear momentarily in the ps listing. As described above, this is best avoided by placing the password in a file and using -F <nowiki>"password=<your_password_file" </nowiki>.<br>
# The cookie jar ~/.sme_cookies should not be made world readable otherwise others could use your downloaded cookies. Likewise the password file should also be protected!}}
===Automating backups with cron===
===Automating backups with cron===
-x your_proxy_server:your_proxy_port
-x your_proxy_server:your_proxy_port
For Example:
curl -s -k -x stargate:3128 -b ~/.sme_cookies -c ~/.sme_cookies -F username=admin \
curl -s -k -x stargate:3128 -b ~/.sme_cookies -c ~/.sme_cookies -F username=admin -F "password=<~/sme_password" \
-F "password=<~/sme_password" <nowiki>-F back='https://snoopy/' https://snoopy/server-common/cgi-bin/login</nowiki> && \
curl -f -s -k -x stargate:3128 -b ~/.sme_cookies -F function=desktop-backup -H "Expect:" -F state=perform \
curl -f -s -k -x stargate:3128 -b ~/.sme_cookies -F function=desktop-backup -F state=perform \
<nowiki>https://snoopy/server-manager/cgi-bin/backup > /home/smebackup/sme-snoopy-`/bin/date +\%d`.tgz</nowiki>
<nowiki>https://snoopy/server-manager/cgi-bin/backup > /home/smebackup/sme-snoopy-`/bin/date +\%d`.tgz</nowiki>
----
----
[[Category:Howto]] [[Category:Administration]]
[[Category:Howto]] [[Category:Backup]]