Bacula Setup
From UGCS
(Difference between revisions)
(→How to set up Bacula) |
(→Create a keypair) |
||
| Line 15: | Line 15: | ||
==Create a keypair== | ==Create a keypair== | ||
As root, run: | As root, run: | ||
| − | openssl genrsa -out machine-fd.key 1024 | + | machine=machine_name |
| − | chmod 600 machine-fd.key | + | openssl genrsa -out ${machine}-fd.key 1024 |
| − | openssl req -new -key machine-fd.key -x509 -out machine-fd.cert | + | chmod 600 ${machine}-fd.key |
| − | cat machine-fd.key machine-fd.cert > machine-fd.pem | + | openssl req -new -key ${machine}-fd.key -x509 -out ${machine}-fd.cert |
| − | chown bacula:bacula machine-fd.pem && chmod 600 machine-fd.pem<br> | + | cat ${machine}-fd.key ${machine}-fd.cert > ${machine}-fd.pem |
| + | chown bacula:bacula ${machine}-fd.pem && chmod 600 ${machine}-fd.pem<br> | ||
For the certificate, use US/California/Pasadena/UGCS/backups, cn=<machine name> | For the certificate, use US/California/Pasadena/UGCS/backups, cn=<machine name> | ||
Latest revision as of 08:09, 21 October 2010
How to set up Bacula
These instructions are for adding a new machine to bacula.
- Add it to /etc/bacula/bacula-dir.conf on persephone. You can do this by adding the "bacula" class to the machine in Configurator, and then re-generating the bacula director config with generate_bacula_director
- Install the software on the machine. You may need to use packages in our Apt Repository so that they have PKI support.
- Create a keypair on the machine- see below.
- Remove the existing bacula-fd.conf so that cfengine will create a new one
- Add the appropriate lines to host-exclude/machine and host-include/machine in demeter:/srv/cfengine/hosts/bacula-fd. In particular, you need to include filesystems that aren't on the root partition. A quick way to look for these is run `df` on the target machine and see what comes up. By default, / and /boot are backed up- anything else needs a line in host-include.
- Run cfengine to create bacula-fd.conf and copy over the other relevant files.
You should be ready to start using Bacula! I would recommend running a full backup, and then checking its size when it is finished. If the size seems too small, you may have forgotten a filesystem- in this case, add it and re-run the backup.
Create a keypair
As root, run:
machine=machine_name
openssl genrsa -out ${machine}-fd.key 1024
chmod 600 ${machine}-fd.key
openssl req -new -key ${machine}-fd.key -x509 -out ${machine}-fd.cert
cat ${machine}-fd.key ${machine}-fd.cert > ${machine}-fd.pem
chown bacula:bacula ${machine}-fd.pem && chmod 600 ${machine}-fd.pem
For the certificate, use US/California/Pasadena/UGCS/backups, cn=<machine name>
If you use a key with more than 2048 bits, backups will be really slow. I recommend 1024 as it is a good tradeoff between security (not realistically going to be cracked *easily*) and speed.
