December 2015 - luv-main

Re: Backups with rsync [Was: Is my root partition dying?]
by Adam Bolte 18 Dec '15

18 Dec '15

On 17/12/15 23:06, Erik Christiansen via luv-main wrote: > On 17.12.15 21:33, Russell Coker via luv-main wrote: >> There are a variety of backup systems that start with rsync and manage >> trees of links. It's not difficult to write your own, rsync the >> files, run "cp -al" to make a copy with hard links and use today's >> date in the directory name, and then delete backup directories that >> are too old. > > I'm not grokking the benefit of doing the rsync _and_ a "cp -al". I just > include -aH in my rsync options, the -H to preserve hard links. Seems to > work. At my workplace, we use this rsync option: --link-dest=DIR hardlink to files in DIR when unchanged where DIR would be the most recent successful backup directory. I wrote aboute 500 lines of Bash for my workplace years ago which is basically an rsync wrapper that also reads hosts and directories to backup from a config file, and does some basic directory management to make it easy to browse backups and see what you are restoring. Today after reading this thread, I asked and was granted permission to make the git repo public. It's a bit hackish, but it has served us well and might be worth a look. https://github.com/sitepoint/abs Since it backs up hosts on the network using rsync over SSH via pubkey authentication, we use the rrsync wrapper script (typically installed at /usr/share/doc/rsync/scripts/rrsync.gz in the rsync package), with authorized_keys files like: command="/usr/local/sbin/rrsync -ro /" ssh-rsa <key> <host comment> and PermitRootLogin forced-commands-only in the /etc/ssh/sshd_config option on targeted hosts to improve security. Cheers, Adam

1 0

Re: Backups with rsync [Was: Is my root partition dying?]
by andrew＠mcnaughty.com 17 Dec '15

17 Dec '15

-----Original Message----- From: Erik Christiansen via luv-main <luv-main(a)luv.asn.au> To: luv-main(a)luv.asn.au Sent: Thu, 17 Dec 2015 11:06 pm Subject: Backups with rsync [Was: Is my root partition dying?] > On 17.12.15 21:33, Russell Coker via luv-main wrote: > > There are a variety of backup systems that start with rsync and manage > > trees of links. It's not difficult to write your own, rsync the > > files, run "cp -al" to make a copy with hard links and use today's > > date in the directory name, and then delete backup directories that > > are too old. > I'm not grokking the benefit of doing the rsync _and_ a "cp -al". I just include -aH in my rsync options, the -H to preserve hard links. Seems to work. > It's almost enough to make one wonder why it's a little bit fiddly to make rsync "just shuddup & copy the listed bits of the filesystem _as_is_, so they can be restored unaltered." > > What I'm doing for backups at the moment is to rsync to files on a > > BTRFS filesystem and then create a snapshot. If I want to retrieve a > > file that was deleted then I just copy it from a suitably old > > snapshot. > A bit more basic here. Just a rsync -Hauv to one of several flash sticks, then a diff -qr to confirm the copy's OK, and show any deletions which should be done, usually 0-3 per backup. But then my precious data is diminutive by most standards. Most important is that they come with me off-site. rsnapshot, rdiff-backup and duplicity are all good alternatives, with different advantages. The approaches being discussed here tend to approximate to rsnapshot. In fact there's a succinct description of what rsnapshot does here: http://serverfault.com/questions/136861/which-is-best-for-backups-rsync-vs-… . Basically there's no reason why you can't do it as well yourself, but there's probably a higher chance of making a mistake. Where rdiff-backup comes into its own is when a file changes frequently. E.g. The one where you keep the latest dump of your database. With a hard link based approach you wind up keeping a full copy of each day's dump, even though the changes might be small. With rdiff-backup you only have to store a compressed diff each day. Duplicity is less efficient, but it handles keeping everything on the remote system encrypted, and can back up to remote systems where you can't run any sort of remote software agent (like rsync). So you can back up to FTP or Amazon's S3. The cost of traffic has come down enough to make backing up to s3 quite reasonable, so long as you can tolerate a long recovery time. I also find backup-ninja useful for scheduling backups. Andrew

1 0

Tacacs+ - console access works, ssh does not
by Peter Ross 17 Dec '15

17 Dec '15

Hi, I am installing TACACS+ on a CentOS7 server (to replace a Win 2003 based Tacacs) I could not find a Tacacs+ server in the repositories so I installed this one: http://www.shrubbery.net/tac_plus/ Installation was not a problem, and this test configuration: key = <key> user = tester { login = PAM service = exec { default attribute = permit priv-lvl = 15 } } gives the user tester (local to the server) access on a HP Blade Center switch (a Nortel switch) via /c/sys/tacacs prisrv <ip> on cmap enabled if I use the serial console. A list of commands appears and I get a prompt. However, if I try ssh, the login seems to work but I do not get a list of commands and no prompt. The terminal is completely quiet after the login (but it stays connected). I played around a bit but have not been successful. Do you have an idea what may be missing? Thanks for answers Peter

5 9

free PC
by Russell Coker 14 Dec '15

14 Dec '15

E2140 dual-core 64bit desktop PC with 4G of RAM. Has built in sound and VGA on the motherboard. Has full height PCI and PCIe slots for expansion. Has run for a year or so as a Xen server. I can give you a SATA disk too if you need it. Contact me off-list if you are interested. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

1 0

Telstra 4G & IPv6
by Brian May 09 Dec '15

09 Dec '15

Hello, Just wondering if Telstra supports IPv6? It didn't think so, however I seem to be receiving RA packets on 80% of my connections, which automatically configures an IPv6 address and route. The problem with this is that IPv6 packets are getting silently dropped, so I have to drop the default route in order to force my computer to websites such as Google using IPv4. Otherwise the connections time out. If there is someway this could be my fault ... However I can't see how. Not running radvd locally. # # radvd configuration generated by radvdump 1.9.1 # based on Router Advertisement from fe80::100:0:0:0 # received by interface wwan0 # interface wwan0 { AdvSendAdvert on; # Note: {Min,Max}RtrAdvInterval cannot be obtained with radvdump AdvManagedFlag off; AdvOtherConfigFlag off; AdvReachableTime 0; AdvRetransTimer 0; AdvCurHopLimit 64; AdvDefaultLifetime 21840; AdvHomeAgentFlag off; AdvDefaultPreference medium; AdvLinkMTU 1500; prefix ::/64 { AdvValidLifetime infinity; # (0xffffffff) AdvPreferredLifetime infinity; # (0xffffffff) AdvOnLink off; AdvAutonomous on; AdvRouterAddr off; }; # End of prefix definition }; # End of interface definition % ip -6 addr 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 inet6 ::1/128 scope host valid_lft forever preferred_lft forever 177: wwan0: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1428 qlen 1000 inet6 ::c1f:e4ff:fef9:6bf8/64 scope global mngtmpaddr dynamic valid_lft forever preferred_lft forever inet6 fe80::c1f:e4ff:fef9:6bf8/64 scope link valid_lft forever preferred_lft forever % ip -6 route local ::1 dev lo proto kernel metric 256 fe80::/64 dev wwan0 proto kernel metric 256 default via fe80::100:0:0:0 dev wwan0 proto ra metric 1024 expires 21669sec hoplimit 64 -- Brian May <brian(a)linuxpenguins.xyz> https://linuxpenguins.xyz/brian/

2 2

hardware library
by Russell Coker 04 Dec '15

04 Dec '15

We are getting low on stuff for the hardware library. RAM and SATA disks seem to be in great demand. If anyone has spare PC3 RAM that would be really good, even 1G modules. Even 80G SATA disks get used. But any other random stuff is good too. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/

1 0