Difference between revisions of "Lentil"
From Nuclear Physics Group Documentation Pages
Jump to navigationJump to search| Line 55: | Line 55: | ||
== Backup Configuration == | == Backup Configuration == | ||
=== /etc/rsync-backup.conf === | === /etc/rsync-backup.conf === | ||
| − | <pre> | + | <pre># Backups are 'pull' only. Too bad there isn't a better way to enforce this. |
| + | read only = yes | ||
| + | |||
| + | # Oh for the ability to retain CAP_DAC_READ_SEARCH, and no other. | ||
| + | #uid = root | ||
| + | # XXX There seems to be an obscure bug with pam_ldap and rsync whereby | ||
| + | # getpwnam(3) segfaults when (and only when) archiving /etc. Using a numeric | ||
| + | # uid avoids this bug. Only verified on Fedora Core 2. | ||
| + | uid = 0 | ||
| + | |||
| + | # There's not much point in putting the superuser in a chroot jail | ||
| + | # use chroot = yes | ||
| + | |||
| + | # This isn't really an effective "lock" per se, since the value is per-module, | ||
| + | # but there really ought never be more than one, and it would at least | ||
| + | # ensure serialized backups. | ||
| + | max connections = 1 | ||
| + | |||
| + | [usr_local] | ||
| + | path = /usr/local | ||
| + | comment = unpackaged software | ||
| + | |||
| + | [opt] | ||
| + | path = /opt | ||
| + | comment = unpackaged software | ||
| + | |||
| + | [etc] | ||
| + | path = /etc | ||
| + | comment = conf files | ||
| + | |||
| + | [var] | ||
| + | path = /var | ||
| + | comment = user and system storage | ||
</pre> | </pre> | ||
Revision as of 15:44, 18 July 2007
General Information
Lentil performs backups. Its backup script needs further investigation to determine exactly how it works. (It's supposed to send an e-mail summarizing what it did, but that isn't working.) Matt's in the process of consolidating backups and zipping them up in an effort to free up a drive or two..
rsync is back to running, as of ~3AM, 6/27/2007.
Hostnames: lentil.unh.edu, lentil.farm.physics.unh.edu
Network Configuration
Currently connected to the unh and farm networks via the switch and VLAN.
/etc/sysconfig/network-scripts/ifcfg-farm
DEVICE=eth0 BOOTPROTO=none HWADDR=00:0E:0C:4C:E1:52 IPADDR=10.0.0.250 NETMASK=255.255.252.0 ONBOOT=yes TYPE=Ethernet USERCTL=no IPV6INIT=no PEERDNS=yes
/etc/sysconfig/network-scripts/ifcfg-unh
# UNH network VLAN=yes DEVICE=eth0.2 BOOTPROTO=none BROADCAST=132.177.91.255 IPADDR=132.177.88.254 NETMASK=255.255.252.0 NETWORK=132.177.88.0 ONBOOT=yes REORDER_HDR=no GATEWAY=132.177.88.1 TYPE=Ethernet USERCTL=no IPV6INIT=no PEERDNS=yes
/etc/sysconfig/network-scripts/ifcfg-lo
DEVICE=lo IPADDR=127.0.0.1 NETMASK=255.0.0.0 NETWORK=127.0.0.0 # If you're having problems with gated making 127.0.0.0/8 a martian, # you can change this to something else (255.255.255.255, for example) BROADCAST=127.255.255.255 ONBOOT=yes NAME=loopback
Access Configuration
/etc/security/access.conf
Backup Configuration
/etc/rsync-backup.conf
# Backups are 'pull' only. Too bad there isn't a better way to enforce this.
read only = yes
# Oh for the ability to retain CAP_DAC_READ_SEARCH, and no other.
#uid = root
# XXX There seems to be an obscure bug with pam_ldap and rsync whereby
# getpwnam(3) segfaults when (and only when) archiving /etc. Using a numeric
# uid avoids this bug. Only verified on Fedora Core 2.
uid = 0
# There's not much point in putting the superuser in a chroot jail
# use chroot = yes
# This isn't really an effective "lock" per se, since the value is per-module,
# but there really ought never be more than one, and it would at least
# ensure serialized backups.
max connections = 1
[usr_local]
path = /usr/local
comment = unpackaged software
[opt]
path = /opt
comment = unpackaged software
[etc]
path = /etc
comment = conf files
[var]
path = /var
comment = user and system storage
