Lentil

From Nuclear Physics Group Documentation Pages
Jump to navigationJump to search

General Information

Lentil performs backups. Its backup script needs further investigation to determine exactly how it works. (It's supposed to send an e-mail summarizing what it did, but that isn't working.) Matt's in the process of consolidating backups and zipping them up in an effort to free up a drive or two..

rsync is back to running, as of ~3AM, 6/27/2007.

Hostnames: lentil.unh.edu, lentil.farm.physics.unh.edu

Network Configuration

Currently connected to the unh and farm networks via the switch and VLAN.

/etc/sysconfig/network-scripts/ifcfg-farm

DEVICE=eth0
BOOTPROTO=none
HWADDR=00:0E:0C:4C:E1:52
IPADDR=10.0.0.250
NETMASK=255.255.252.0
ONBOOT=yes
TYPE=Ethernet
USERCTL=no
IPV6INIT=no
PEERDNS=yes

/etc/sysconfig/network-scripts/ifcfg-unh

# UNH network
VLAN=yes
DEVICE=eth0.2
BOOTPROTO=none
BROADCAST=132.177.91.255
IPADDR=132.177.88.254
NETMASK=255.255.252.0
NETWORK=132.177.88.0
ONBOOT=yes
REORDER_HDR=no
GATEWAY=132.177.88.1
TYPE=Ethernet
USERCTL=no
IPV6INIT=no
PEERDNS=yes

/etc/sysconfig/network-scripts/ifcfg-lo

DEVICE=lo
IPADDR=127.0.0.1
NETMASK=255.0.0.0
NETWORK=127.0.0.0
# If you're having problems with gated making 127.0.0.0/8 a martian,
# you can change this to something else (255.255.255.255, for example)
BROADCAST=127.255.255.255
ONBOOT=yes
NAME=loopback

Access Configuration

/etc/security/access.conf


Backup Configuration

/etc/rsync-backup.conf

# Backups are 'pull' only.  Too bad there isn't a better way to enforce this.
read only       = yes

# Oh for the ability to retain CAP_DAC_READ_SEARCH, and no other.  
#uid            = root
# XXX There seems to be an obscure bug with pam_ldap and rsync whereby 
# getpwnam(3) segfaults when (and only when) archiving /etc.  Using a numeric
# uid avoids this bug.  Only verified on Fedora Core 2.
uid             = 0

# There's not much point in putting the superuser in a chroot jail
# use chroot    = yes

# This isn't really an effective "lock" per se, since the value is per-module,
# but there really ought never be more than one, and it would at least 
# ensure serialized backups.
max connections = 1

[usr_local]
        path    = /usr/local
        comment = unpackaged software

[opt]
        path    = /opt
        comment = unpackaged software

[etc]
        path    = /etc
        comment = conf files

[var]
        path    = /var
        comment = user and system storage