btrbk - Revision history

Vincent: /* Add a Backup Volume */

2017-02-12T20:11:41Z

Add a Backup Volume

← Older revision		Revision as of 20:11, 12 February 2017
Line 79:		Line 79:
	Create file <code>/ect/btrbk/btrbk.conf</code><syntaxhighlight lang="properties">		Create file <code>/ect/btrbk/btrbk.conf</code><syntaxhighlight lang="properties">
	# Enable transaction log		# Enable transaction log
	transaction_log /var/log/btrbk.log		transaction_log /var/log/btrbk.log

	# Directory in which the btrfs snapshots are created. Relative to		# Directory in which the btrfs snapshots are created. Relative to
Line 91:		Line 91:
	# snapshot creation will fail if it is not present.		# snapshot creation will fail if it is not present.
	#		#
	snapshot_dir _btrbk_snap		snapshot_dir _btrbk_snap


	# Specify SSH private key for "ssh://" volumes / targets:		# Specify SSH private key for "ssh://" volumes / targets:
	ssh_identity /etc/btrbk/ssh/id_ed25519		ssh_identity /etc/btrbk/ssh/id_ed25519
	ssh_user btrbk		ssh_user btrbk
	#ssh_port default		#ssh_port default
	#ssh_compression no		#ssh_compression no
Line 110:		Line 110:
	#btrfs_progs_compat no		#btrfs_progs_compat no

			snapshot_preserve_min 5d
			snapshot_preserve 14d 2w 1m

			target_preserve_min 5d
			target_preserve 14d 10w 24m

	#		#

Vincent: Improve client setup

2017-02-05T13:45:12Z

Improve client setup

Show changes

Vincent: authorized_keys for older OpenSSH versions

2017-02-04T17:08:09Z

authorized_keys for older OpenSSH versions

← Older revision		Revision as of 17:08, 4 February 2017
Line 67:		Line 67:
	AAAAC3NzaC1lZDI1NTE5AAAAIB5ScAgJnpqYCipj6PyrOjbXpsaQZIzys7uHcVe1J3ay root@client.example.org		AAAAC3NzaC1lZDI1NTE5AAAAIB5ScAgJnpqYCipj6PyrOjbXpsaQZIzys7uHcVe1J3ay root@client.example.org
	</syntaxhighlight>Then, '''on the backup server''', add the following line to <code>/backup/.ssh/authorized_keys</code>.		</syntaxhighlight>Then, '''on the backup server''', add the following line to <code>/backup/.ssh/authorized_keys</code>.

			If you have OpenSSH 7.2 or above (test using <code>ssh -V</code>), use this line
	<syntaxhighlight lang="sh">		<syntaxhighlight lang="sh">
	command="/usr/share/btrbk/scripts/ssh_filter_btrbk.sh --target --info -p /backup/<client> --sudo",restrict,from="client.example.org" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB5ScAgJnpqYCipj6PyrOjbXpsaQZIzys7uHcVe1J3ay root@client.example.org		command="/usr/share/btrbk/scripts/ssh_filter_btrbk.sh --target --info -p /backup/<client> --sudo",restrict,from="client.example.org" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB5ScAgJnpqYCipj6PyrOjbXpsaQZIzys7uHcVe1J3ay root@client.example.org
			</syntaxhighlight>Otherwise, you need the more verbose version<syntaxhighlight lang="sh">
			command="/usr/share/btrbk/scripts/ssh_filter_btrbk.sh --target --info -p /backup/<client> --sudo",no-agent-forwarding,no-port-forwarding,no-pty,no-user-rc,no-X11-forwarding,from="client.example.org" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB5ScAgJnpqYCipj6PyrOjbXpsaQZIzys7uHcVe1J3ay root@client.example.org
	</syntaxhighlight>		</syntaxhighlight>

Vincent: sudo

2017-02-04T13:07:50Z

sudo

← Older revision		Revision as of 13:07, 4 February 2017
Line 6:		Line 6:
	btrbk is not yet included in Debian Jessie. Make sure you configure [[Apt\|stretch source]] before running the command bellow.		btrbk is not yet included in Debian Jessie. Make sure you configure [[Apt\|stretch source]] before running the command bellow.
	<syntaxhighlight lang="console">		<syntaxhighlight lang="console">
	# apt install btrbk		$ sudo apt install btrbk
	</syntaxhighlight>		</syntaxhighlight>

Line 17:		Line 17:
	=== User ===		=== User ===
	<syntaxhighlight lang="console">		<syntaxhighlight lang="console">
	# adduser --system --shell /bin/sh --home /backup/ --group --no-create-home btrbk		$ sudo adduser --system --shell /bin/sh --home /backup/ --group --no-create-home btrbk
	Adding system user `btrbk' (UID 122) ...		Adding system user `btrbk' (UID 122) ...
	Adding new group `btrbk' (GID 124) ...		Adding new group `btrbk' (GID 124) ...
	Adding new user `btrbk' (UID 122) with group `btrbk' ...		Adding new user `btrbk' (UID 122) with group `btrbk' ...
	Not creating home directory `/backup/'.		Not creating home directory `/backup/'.
	# mkdir /backup/.ssh		$ sudo mkdir /backup/.ssh
	# touch /backup/.ssh/authorized_keys		$ sudo touch /backup/.ssh/authorized_keys
	# chown root:btrbk /backup/		$ sudo chown root:btrbk /backup/
	# chmod 710 /backup/		$ sudo chmod 710 /backup/
	</syntaxhighlight>		</syntaxhighlight>
	This user will need to run <code>btrfs</code> tools as root. Let’s add this to the <code>/etc/sudoers</code> file		This user will need to run <code>btrfs</code> tools as root. Let’s add this to the <code>/etc/sudoers</code> file
Line 39:		Line 39:
	=== Create Destination Folder ===		=== Create Destination Folder ===
	'''On the backup server''', create a new folder for the client.<syntaxhighlight lang="console">		'''On the backup server''', create a new folder for the client.<syntaxhighlight lang="console">
	# mkdir /backup/<client>		$ sudo mkdir /backup/<client>
	# chmod 700 /backup/<client>		$ sudo chmod 700 /backup/<client>
	</syntaxhighlight>		</syntaxhighlight>
	=== SSH Key ===		=== SSH Key ===
	Create an SSH key dedicated to your backups<syntaxhighlight lang="console">		Create an SSH key dedicated to your backups<syntaxhighlight lang="console">
	# mkdir /etc/btrbk/ssh		$ sudo mkdir /etc/btrbk/ssh
	# chmod 700 /etc/btrbk/ssh		$ sudo chmod 700 /etc/btrbk/ssh
	# ssh-keygen -t ed25519 -N "" -f /etc/btrbk/ssh/id_ed25519		$ sudo ssh-keygen -t ed25519 -N "" -f /etc/btrbk/ssh/id_ed25519
	Generating public/private ed25519 key pair.		Generating public/private ed25519 key pair.
	Your identification has been saved in /etc/btrbk/ssh/id_ed25519.		Your identification has been saved in /etc/btrbk/ssh/id_ed25519.
Line 64:		Line 64:
	\|*X==. .+.+=. \|		\|*X==. .+.+=. \|
	+----[SHA256]-----+		+----[SHA256]-----+
	# cat /etc/btrbk/ssh/id_ed25519.pub		$ sudo cat /etc/btrbk/ssh/id_ed25519.pub
	AAAAC3NzaC1lZDI1NTE5AAAAIB5ScAgJnpqYCipj6PyrOjbXpsaQZIzys7uHcVe1J3ay root@client.example.org		AAAAC3NzaC1lZDI1NTE5AAAAIB5ScAgJnpqYCipj6PyrOjbXpsaQZIzys7uHcVe1J3ay root@client.example.org
	</syntaxhighlight>Then, '''on the backup server''', add the following line to <code>/backup/.ssh/authorized_keys</code>.		</syntaxhighlight>Then, '''on the backup server''', add the following line to <code>/backup/.ssh/authorized_keys</code>.
Line 73:		Line 73:
	== Add a Backup Disk ==		== Add a Backup Disk ==
	<syntaxhighlight lang="console">		<syntaxhighlight lang="console">
	# btrfs subvolume create /backup/<client>/<volume>		$ sudo btrfs subvolume create /backup/<client>/<volume>
	</syntaxhighlight>{{TODO\|msg = }}		</syntaxhighlight>{{TODO\|msg = }}

Vincent: improve client setup

2016-08-29T19:50:32Z

improve client setup

← Older revision		Revision as of 19:50, 29 August 2016
Line 10:		Line 10:

	== Setup Backup Server ==		== Setup Backup Server ==
	The backup server will be the machine that will receive the backup data. ~~Client~~ will connect to it to sent their backup data. As a consequence, your server must be reachable from all your clients.		The backup server will be the machine that will receive the backup data. Clients will connect to it to sent their backup data. As a consequence, your server must be reachable from all your clients.

	=== Destination Disk ===		=== Destination Disk ===
Line 33:		Line 33:

	== Setup New Client ==		== Setup New Client ==
			For each machine that you want to backup, you will need to register it as a client in the backup server. This step need to be done only once per machine (even if you want to backup several disks).

			'''Note:''' On the instructions bellow, the token <code><client></code> must be replace by the machine name.

	=== Create Destination Folder ===		=== Create Destination Folder ===
	'''On the backup server''', create a new folder for the client<syntaxhighlight lang="console">		'''On the backup server''', create a new folder for the client.<syntaxhighlight lang="console">
	# mkdir /backup/<client>		# mkdir /backup/<client>
	# chmod 700 /backup/<client>		# chmod 700 /backup/<client>
	~~</syntaxhighlight><syntaxhighlight lang="console">~~
	~~# btrfs subvolume create /backup/<client>/<volume>~~
	</syntaxhighlight>		</syntaxhighlight>

	=== SSH Key ===		=== SSH Key ===
	Create an SSH key dedicated to your backups<syntaxhighlight lang="console">		Create an SSH key dedicated to your backups<syntaxhighlight lang="console">
Line 47:		Line 47:
	# chmod 700 /etc/btrbk/ssh		# chmod 700 /etc/btrbk/ssh
	# ssh-keygen -t ed25519 -N "" -f /etc/btrbk/ssh/id_ed25519		# ssh-keygen -t ed25519 -N "" -f /etc/btrbk/ssh/id_ed25519
	...		Generating public/private ed25519 key pair.
			Your identification has been saved in /etc/btrbk/ssh/id_ed25519.
			Your public key has been saved in /etc/btrbk/ssh/id_ed25519.pub.
			The key fingerprint is:
			SHA256:y5VremJsz5wHiO2KKrtupPZYbaqNeURxeLdznaCw450 root@client.example.org
			The key's randomart image is:
			+--[ED25519 256]--+
			\| . \|
			\| o + . . \|
			\| + + o o . \|
			\| . o + . + \|
			\| . . ooS.o \|
			\| . ....Eoo.. \|
			\|o .. o oo o. \|
			\|oo.o. =... \|
			\|*X==. .+.+=. \|
			+----[SHA256]-----+
	# cat /etc/btrbk/ssh/id_ed25519.pub		# cat /etc/btrbk/ssh/id_ed25519.pub
	~~AAAAC3NzaC1lZDI1NTE5AAAAIFWJQzmdbnWfJqfa/YqXHQXh5bhkRir76mkkdVSln+eo~~ root@client.example.org		AAAAC3NzaC1lZDI1NTE5AAAAIB5ScAgJnpqYCipj6PyrOjbXpsaQZIzys7uHcVe1J3ay root@client.example.org
	</syntaxhighlight>Then, '''on the backup server''', add the following line to <code>/backup/.ssh/authorized_keys</code>.		</syntaxhighlight>Then, '''on the backup server''', add the following line to <code>/backup/.ssh/authorized_keys</code>.
	<syntaxhighlight lang="sh">		<syntaxhighlight lang="sh">
	command="/usr/share/btrbk/scripts/ssh_filter_btrbk.sh --target --info -p /backup/<client> --sudo",restrict,from="client.example.org" ssh-ed25519 ~~AAAAC3NzaC1lZDI1NTE5AAAAIFWJQzmdbnWfJqfa/YqXHQXh5bhkRir76mkkdVSln+eo~~ root@client.example.org		command="/usr/share/btrbk/scripts/ssh_filter_btrbk.sh --target --info -p /backup/<client> --sudo",restrict,from="client.example.org" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB5ScAgJnpqYCipj6PyrOjbXpsaQZIzys7uHcVe1J3ay root@client.example.org
	</syntaxhighlight>		</syntaxhighlight>
	{{TODO\|msg = }}
			== Add a Backup Disk ==
			<syntaxhighlight lang="console">
			# btrfs subvolume create /backup/<client>/<volume>
			</syntaxhighlight>{{TODO\|msg = }}

	[[Category:Debian Release]]		[[Category:Debian Release]]
	[[Category:Linux Desktop]]		[[Category:Linux Desktop]]
	[[Category:Linux Server]]		[[Category:Linux Server]]

Vincent: /* Setup Backup Server */

2016-05-30T14:44:54Z

Setup Backup Server

← Older revision		Revision as of 14:44, 30 May 2016
Line 10:		Line 10:

	== Setup Backup Server ==		== Setup Backup Server ==
			The backup server will be the machine that will receive the backup data. Client will connect to it to sent their backup data. As a consequence, your server must be reachable from all your clients.

	=== Destination Disk ===		=== Destination Disk ===

Vincent: Fix bold

2016-05-08T23:25:31Z

Fix bold

← Older revision		Revision as of 23:25, 8 May 2016
Line 34:		Line 34:

	=== Create Destination Folder ===		=== Create Destination Folder ===
	O'''n the backup server''', create a new folder for the client<syntaxhighlight lang="console">		'''On the backup server''', create a new folder for the client<syntaxhighlight lang="console">
	# mkdir /backup/<client>		# mkdir /backup/<client>
	# chmod 700 /backup/<client>		# chmod 700 /backup/<client>

Vincent: Create folders

2016-03-31T07:37:09Z

Create folders

← Older revision		Revision as of 07:37, 31 March 2016
Line 23:		Line 23:
	# mkdir /backup/.ssh		# mkdir /backup/.ssh
	# touch /backup/.ssh/authorized_keys		# touch /backup/.ssh/authorized_keys
			# chown root:btrbk /backup/
			# chmod 710 /backup/
	</syntaxhighlight>		</syntaxhighlight>
	This user will need to run <code>btrfs</code> tools as root. Let’s add this to the <code>/etc/sudoers</code> file		This user will need to run <code>btrfs</code> tools as root. Let’s add this to the <code>/etc/sudoers</code> file
Line 29:		Line 31:
	</syntaxhighlight>If you limited access to certain users through SSH, add <code>btrbk</code> to the [[SSH#Authentication\|AllowUsers]] list and [[SSH#Restart\|restart SSH]]		</syntaxhighlight>If you limited access to certain users through SSH, add <code>btrbk</code> to the [[SSH#Authentication\|AllowUsers]] list and [[SSH#Restart\|restart SSH]]

	== Setup Client ==		== Setup New Client ==

			=== Create Destination Folder ===
			O'''n the backup server''', create a new folder for the client<syntaxhighlight lang="console">
			# mkdir /backup/<client>
			# chmod 700 /backup/<client>
			</syntaxhighlight><syntaxhighlight lang="console">
			# btrfs subvolume create /backup/<client>/<volume>
			</syntaxhighlight>

	=== SSH Key ===		=== SSH Key ===
Line 37:		Line 47:
	# ssh-keygen -t ed25519 -N "" -f /etc/btrbk/ssh/id_ed25519		# ssh-keygen -t ed25519 -N "" -f /etc/btrbk/ssh/id_ed25519
	...		...
	# cat /etc/btrbk/ssh/id_ed25519		# cat /etc/btrbk/ssh/id_ed25519.pub
	AAAAC3NzaC1lZDI1NTE5AAAAIFWJQzmdbnWfJqfa/YqXHQXh5bhkRir76mkkdVSln+eo root@client.example.org		AAAAC3NzaC1lZDI1NTE5AAAAIFWJQzmdbnWfJqfa/YqXHQXh5bhkRir76mkkdVSln+eo root@client.example.org
	</syntaxhighlight>Then, '''on the backup server''', add the following line to <code>/backup/.ssh/authorized_keys</code>.		</syntaxhighlight>Then, '''on the backup server''', add the following line to <code>/backup/.ssh/authorized_keys</code>.
	<syntaxhighlight lang="sh">		<syntaxhighlight lang="sh">
	command="/usr/share/btrbk/scripts/ssh_filter_btrbk.sh --target --info -p /backup --sudo",restrict,from="client.example.org" ssh-ed25519 ~~AAAAC3NzaC1lZDI1NTE5AAAAIDwxT6AaiAjahdUBeitkRDK6FXeZhI10rVN8BIeVriXG~~ root@client.example.org		command="/usr/share/btrbk/scripts/ssh_filter_btrbk.sh --target --info -p /backup/<client> --sudo",restrict,from="client.example.org" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFWJQzmdbnWfJqfa/YqXHQXh5bhkRir76mkkdVSln+eo root@client.example.org
	</syntaxhighlight>		</syntaxhighlight>
	{{TODO\|msg = }}		{{TODO\|msg = }}

Vincent: Fix source

2016-03-30T22:30:40Z

Fix source

← Older revision		Revision as of 22:30, 30 March 2016
Line 4:		Line 4:

	== Install ==		== Install ==
	btrbk is not yet included in Debian Jessie. Make sure you configure [[Apt\|stretch source]] before running the command bellow.<syntaxhighlight lang="console">		btrbk is not yet included in Debian Jessie. Make sure you configure [[Apt\|stretch source]] before running the command bellow.
			<syntaxhighlight lang="console">
	# apt install btrbk		# apt install btrbk
	</syntaxhighlight>		</syntaxhighlight>
Line 22:		Line 23:
	# mkdir /backup/.ssh		# mkdir /backup/.ssh
	# touch /backup/.ssh/authorized_keys		# touch /backup/.ssh/authorized_keys
	</syntaxhighlight>This user will need to run <code>btrfs</code> tools as root. Let’s add this to the <code>/etc/sudoers</code> file<syntaxhighlight>		</syntaxhighlight>
			This user will need to run <code>btrfs</code> tools as root. Let’s add this to the <code>/etc/sudoers</code> file
			<syntaxhighlight lang="sh">
	btrbk ALL=NOPASSWD:/bin/btrfs		btrbk ALL=NOPASSWD:/bin/btrfs
	</syntaxhighlight>If you limited access to certain users through SSH, add <code>btrbk</code> to the [[SSH\|AllowUsers]] list and [[SSH\|restart SSH]]		</syntaxhighlight>If you limited access to certain users through SSH, add <code>btrbk</code> to the [[SSH#Authentication\|AllowUsers]] list and [[SSH#Restart\|restart SSH]]

	== Setup Client ==		== Setup Client ==
Line 36:		Line 39:
	# cat /etc/btrbk/ssh/id_ed25519		# cat /etc/btrbk/ssh/id_ed25519
	AAAAC3NzaC1lZDI1NTE5AAAAIFWJQzmdbnWfJqfa/YqXHQXh5bhkRir76mkkdVSln+eo root@client.example.org		AAAAC3NzaC1lZDI1NTE5AAAAIFWJQzmdbnWfJqfa/YqXHQXh5bhkRir76mkkdVSln+eo root@client.example.org
	</syntaxhighlight>Then, '''on the backup server''', add the following line to <code>/backup/.ssh/authorized_keys</code>.<syntaxhighlight lang="sh">		</syntaxhighlight>Then, '''on the backup server''', add the following line to <code>/backup/.ssh/authorized_keys</code>.
			<syntaxhighlight lang="sh">
	command="/usr/share/btrbk/scripts/ssh_filter_btrbk.sh --target --info -p /backup --sudo",restrict,from="client.example.org" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDwxT6AaiAjahdUBeitkRDK6FXeZhI10rVN8BIeVriXG root@client.example.org		command="/usr/share/btrbk/scripts/ssh_filter_btrbk.sh --target --info -p /backup --sudo",restrict,from="client.example.org" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDwxT6AaiAjahdUBeitkRDK6FXeZhI10rVN8BIeVriXG root@client.example.org
	</syntaxhighlight>{{TODO\|msg = }}[[Category:Debian Release]]		</syntaxhighlight>
			{{TODO\|msg = }}

			[[Category:Debian Release]]
	[[Category:Linux Desktop]]		[[Category:Linux Desktop]]
	[[Category:Linux Server]]		[[Category:Linux Server]]

Vincent: Setup SSH access

2016-03-30T21:15:27Z

Setup SSH access

← Older revision		Revision as of 21:15, 30 March 2016
Line 15:		Line 15:
	=== User ===		=== User ===
	<syntaxhighlight lang="console">		<syntaxhighlight lang="console">
	# adduser --system --home /backup/ --group --no-create-home btrbk		# adduser --system --shell /bin/sh --home /backup/ --group --no-create-home btrbk
	Adding system user `btrbk' (UID 122) ...		Adding system user `btrbk' (UID 122) ...
	Adding new group `btrbk' (GID 124) ...		Adding new group `btrbk' (GID 124) ...
	Adding new user `btrbk' (UID 122) with group `btrbk' ...		Adding new user `btrbk' (UID 122) with group `btrbk' ...
	Not creating home directory `/backup/'.		Not creating home directory `/backup/'.
	</syntaxhighlight>		# mkdir /backup/.ssh
			# touch /backup/.ssh/authorized_keys
			</syntaxhighlight>This user will need to run <code>btrfs</code> tools as root. Let’s add this to the <code>/etc/sudoers</code> file<syntaxhighlight>
			btrbk ALL=NOPASSWD:/bin/btrfs
			</syntaxhighlight>If you limited access to certain users through SSH, add <code>btrbk</code> to the [[SSH\|AllowUsers]] list and [[SSH\|restart SSH]]

	== Setup Client ==		== Setup Client ==
	{{TODO\|msg = }}[[Category:Debian Release]]
			=== SSH Key ===
			Create an SSH key dedicated to your backups<syntaxhighlight lang="console">
			# mkdir /etc/btrbk/ssh
			# chmod 700 /etc/btrbk/ssh
			# ssh-keygen -t ed25519 -N "" -f /etc/btrbk/ssh/id_ed25519
			...
			# cat /etc/btrbk/ssh/id_ed25519
			AAAAC3NzaC1lZDI1NTE5AAAAIFWJQzmdbnWfJqfa/YqXHQXh5bhkRir76mkkdVSln+eo root@client.example.org
			</syntaxhighlight>Then, '''on the backup server''', add the following line to <code>/backup/.ssh/authorized_keys</code>.<syntaxhighlight lang="sh">
			command="/usr/share/btrbk/scripts/ssh_filter_btrbk.sh --target --info -p /backup --sudo",restrict,from="client.example.org" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDwxT6AaiAjahdUBeitkRDK6FXeZhI10rVN8BIeVriXG root@client.example.org
			</syntaxhighlight>{{TODO\|msg = }}[[Category:Debian Release]]
	[[Category:Linux Desktop]]		[[Category:Linux Desktop]]
	[[Category:Linux Server]]		[[Category:Linux Server]]