From: Simon F. <sim...@gm...> - 2009-03-30 10:42:47
|
I have been trying to get this added to the Wiki on SourceForge but it refuses to save my changes. Here then is a guide to installing BackupPC on OpenSolaris10. Please will someone try and get it onto the wiki? INSTALL BACKUPPC on SOLARIS (running onSunOS 5.10 Generic_138889-05 i86pc i386 i86pc). **Credit for all this hard work goes to Garith Dugmore - THE Solaris Man.** * Installation dependencies pkg-get -i samba_client par2cmdline apache2 apache2_manual ap2_modphp5 ap2_modperl perl perldoc gcc4g++\ pm_termreadkey pm_compressrawzlib pm_compresszlib pm_iocompresszlib pm_iozlib rsync vim top sudo pkg install SUNWhea #Only on OpenSolaris * Fix bug in IO:Compress:Zlib cd /tmp/ wget http://search.cpan.org/CPAN/authors/id/P/PM/PMQS/IO-Compress-Zlib-2.015.tar.gz gzip -d IO-Compress-Zlib-2.015.tar.gz tar xf IO-Compress-Zlib-2.015.tar cd IO-Compress-Zlib-2.015 CC=gcc /opt/csw/bin/perl Makefile.PL make make install * Setup Sun Studio so we can use "cc" to compile. cd /tmp/ wget StudioExpress-sol-x86-2008-11-v2-ii.sh (you will need to register to get a url for this but it is free) mkdir /opt/studio cd /opt/studio sh /tmp/StudioExpress-sol-x86-2008-11-v2-ii.sh --accept-sla ln -s /opt/studio/SUNWspro/bin/cc /usr/bin/ * Adding perl modules cpan * Hit enter through all options and choose ftp.is.co.za as a mirror. Once you at the cpan prompt: install File::RsyncP * Install BackupPC mkdir /tmp/backuppc cd /tmp/backuppc wget http://url/BackupPC-3.1.0.tar.gz (insert working URL here) gzip -d BackupPC-3.1.0.tar.gz tar xf BackupPC-3.1.0.tar cd BackupPC-3.1.0 * For the next step hit enter for the defaults except for: /opt/csw/bin/perl configure.pl 1. --> BackupPC should run as user [backuppc]? nobody 2. --> Data directory (full path) [/data/BackupPC]? /data 3. --> CGI bin directory (full path) []? /opt/csw/apache2/share/cgi-bin/ 4. --> Apache image directory (full path) []? /opt/csw/apache2/share/htdocs/image 5. --> URL for image directory (omit http://host; starts with '/') []? /image * Configure BackupPC startup script cd /etc/init.d/ ; touch backuppc Insert the following into the backuppc file you just created: ___________________ #!/usr/bin/sh # # DESCRIPTION # # Startup init script for BackupPC for solaris. # # Distributed with BackupPC version 3.1.0, released 25 Nov 2007. # # Not tested... # case "$1" in start) # # You can set the SMB share password here is you wish. Otherwise # you should put it in the config.pl script. # If you put it here make sure this file has no read permissions # for normal users! See the documentation for more information. # #BPC_SMB_PASSWD= #export BPC_SMB_PASSWD # su nobody -c "/usr/local/BackupPC/bin/BackupPC -d" ;; stop) /usr/bin/pkill -f "/usr/bin/perl /usr/local/BackupPC/bin/BackupPC -d" ;; restart) /usr/bin/pkill -f "/usr/bin/perl /usr/local/BackupPC/bin/BackupPC -d" su nobody -c "/usr/local/BackupPC/bin/BackupPC -d" ;; reload) /usr/bin/pkill -1 -f "/usr/local/BackupPC/bin/BackupPC -d" ;; *) echo "Usage: $0 {start|stop|restart|reload}" exit 1 esac exit $? ________________________ chmod 777 backuppc cd /etc/rc0.d ln -s ../init.d/backuppc K40backuppc cd /etc/rc2.d ln -s ../init.d/backuppc S99backuppc usermod -s /usr/bin/bash nobody /etc/init.d/backuppc restart chmod u+x /var/log/BackupPC/status.pl cd /opt/csw/apache2/share/cgi-bin/ ln -s BackupPC_Admin index.cgi * Setup up /opt/csw/etc/sudoers ; append: nobody ALL=NOPASSWD: /usr/sfw/bin//gtar nobody ALL=NOPASSWD: /usr/bin/env nobody ALL=NOPASSWD: /usr/bin/ssh nobody ALL=NOPASSWD: /opt/csw/bin/rsync * Put sudo in its normal place: ln -s /opt/csw/bin/sudo /usr/bin/ Configure Apache2 (you may need to install apache) * Append the following to /opt/csw/apache2/etc/httpd.conf * NOTE that the ssl keys line in the httpd.conf will differ between machines. If apache2 doesn't start (check using - ps -fel | grep httpd) then try running /opt/csw/apache2/sbin/httpd to see what the problem is. Also note we are using LDAP auth - choose your auth method and modify accordingly Alias /BackupPC/ /opt/csw/apache2/share/cgi-bin/ <Directory /opt/csw/apache2/share/cgi-bin> RewriteEngine on RewriteCond %{SERVER_PORT} =80 RewriteRule ^(.*) https://%{SERVER_NAME}%{REQUEST_URI} AllowOverride None Options ExecCGI FollowSymlinks Order Allow,Deny Allow from all AddHandler cgi-script .cgi DirectoryIndex index.cgi AuthType basic AuthBasicProvider ldap AuthBasicAuthoritative On AuthLDAPURL ldap://<Your.LDAP>/ou=people,dc=<yourDC>?uid AuthName "BackupPC admin" require valid-user </Directory> LoadModule ssl_module libexec/mod_ssl.so Listen 443 NameVirtualHost *:443 <VirtualHost *:443> ServerAdmin root@<SERVERNAME> SSLEngine on SSLCertificateFile /opt/csw/apache2/etc/apache.pem <Directory "/opt/csw/apache2/share/cgi-bin"> SSLOptions +StdEnvVars </Directory> </VirtualHost> * Enable and start Apache: svcadm enable svc:/network/http:cswapache2 svcadm refresh svc:/network/http:cswapache2 Done - hopefully. |
From: Holger P. <wb...@pa...> - 2009-04-09 10:22:30
|
Hi, Simon Fishley wrote on 2009-03-30 12:42:36 +0200 [[BackupPC-users] BackupPC on OpenSolaris]: > I have been trying to get this added to the Wiki on SourceForge but it > refuses to save my changes. Here then is a guide to installing > BackupPC on OpenSolaris10. Please will someone try and get it onto > the wiki? I have been trying to find the time to do so for a few days, but I haven't got around to it yet. Still, there is one thing I want to point out: > INSTALL BACKUPPC on SOLARIS (running onSunOS 5.10 Generic_138889-05 > i86pc i386 i86pc). **Credit for all this hard work goes to Garith > Dugmore - THE Solaris Man.** > [...] > * For the next step hit enter for the defaults except for: > > /opt/csw/bin/perl configure.pl > > 1. --> BackupPC should run as user [backuppc]? nobody I think it is a really bad idea to run BackupPC as user nobody. There seems to be no reason not to create a 'backuppc' user. As far as I understand it, the 'nobody' user is used for daemons that do not need to own any files or access any specially protected files. This is not the case for BackupPC. The whole pool (all your backup data) is owned by BackupPC. If someone manages to gain 'nobody' privileges (!) on your system, they can read and even write to all of your backup data. True, the same holds for 'backuppc' privileges if you use that user, but the 'nobody' user is used for other services as well, possibly including services that are not much trusted. After all, if your service cannot be attacked and abused, why not just run it as 'root'? You lower the privileges to what is needed as a safeguard, and 'nobody' is a sort of "least-privilege-pool" for services that are supposed to have no privileges at all (but suddenly they do: they can read the BackupPC pool). root NFS access gets mapped to 'nobody' by default (for whatever that is actually worth; actually it means any 'root' with NFS access to your server can probably create setuid 'nobody' programs). > [...] > * Configure BackupPC startup script > > cd /etc/init.d/ ; touch backuppc > Insert the following into the backuppc file you just created: That's kind of 'cat <<EOF > /etc/init.d/backuppc', isn't it? :) > [...] > start) > # > # You can set the SMB share password here is you wish. Otherwise > # you should put it in the config.pl script. > # If you put it here make sure this file has no read permissions > # for normal users! See the documentation for more information. > # > #BPC_SMB_PASSWD= > #export BPC_SMB_PASSWD > # > su nobody -c "/usr/local/BackupPC/bin/BackupPC -d" One 'nobody' also found here ... > [...] > restart) > /usr/bin/pkill -f "/usr/bin/perl /usr/local/BackupPC/bin/BackupPC -d" > su nobody -c "/usr/local/BackupPC/bin/BackupPC -d" ... and one here. > [...] > usermod -s /usr/bin/bash nobody Presuming that is Solaris' version of 'chsh': I'm not sure that is a good idea (or even necessary) for much the same reasons. What was it before? /bin/false? > [...] > * Setup up /opt/csw/etc/sudoers ; append: > > nobody ALL=NOPASSWD: /usr/sfw/bin//gtar > nobody ALL=NOPASSWD: /usr/bin/env That's a free root shell for 'nobody', isn't it? Why did you add that? > nobody ALL=NOPASSWD: /usr/bin/ssh > nobody ALL=NOPASSWD: /opt/csw/bin/rsync 'tar' and 'rsync' are free access to any file on the system, even those not in the backup (read: /etc/shadow). I'm not sure what you would put 'env' and 'ssh' in there for. > Configure Apache2 (you may need to install apache) Is Apache run as 'nobody'? Or is BackupPC_Admin setuid 'nobody'? ;-) Regards, Holger |
From: Linker3000 <bac...@ba...> - 2009-09-23 05:22:33
|
Spent a day trying to make this work and have just given up! Looks like things have moved on and this guide needs updating - I had to do a lot more work to get the package installer & perl installed and then the link between cgi-bin/index.cgi just didn't go anywhere so there was nothing to run. Might try again in a few days when I feel less frustrated. Soo much easier on Linux, but I wanted to try the benefits of ZFS [Shocked] +---------------------------------------------------------------------- |This was sent by lin...@go... via Backup Central. |Forward SPAM to ab...@ba.... +---------------------------------------------------------------------- |
From: Pedro M. S. O. <pms...@gm...> - 2009-09-23 06:47:05
|
I did this sometime ago, What's failling? On Tuesday 22 September 2009 20:29:02 Linker3000 wrote: > > Spent a day trying to make this work and have just given up! > > Looks like things have moved on and this guide needs updating - I had to do a lot more work to get the package installer & perl installed and then the link between cgi-bin/index.cgi just didn't go anywhere so there was nothing to run. > > Might try again in a few days when I feel less frustrated. Soo much easier on Linux, but I wanted to try the benefits of ZFS [Shocked] > > +---------------------------------------------------------------------- > |This was sent by lin...@go... via Backup Central. > |Forward SPAM to ab...@ba.... > +---------------------------------------------------------------------- > > > > ------------------------------------------------------------------------------ > Come build with us! The BlackBerry® Developer Conference in SF, CA > is the only developer event you need to attend this year. Jumpstart your > developing skills, take BlackBerry mobile applications to market and stay > ahead of the curve. Join us from November 9-12, 2009. Register now! > http://p.sf.net/sfu/devconf > _______________________________________________ > BackupPC-users mailing list > Bac...@li... > List: https://lists.sourceforge.net/lists/listinfo/backuppc-users > Wiki: http://backuppc.wiki.sourceforge.net > Project: http://backuppc.sourceforge.net/ > -- ---------------------------------------------------------------------------------------------------------- Pedro M. S. Oliveira IT Consultant Email: pms...@gm... URL: http://www.linux-geex.com Cellular: +351 96 5867227 ---------------------------------------------------------------------------------------------------------- |
From: Holger P. <wb...@pa...> - 2009-09-23 08:21:50
|
Hi, Pedro M. S. Oliveira wrote on 2009-09-23 07:48:50 +0100 [Re: [BackupPC-users] BackupPC on OpenSolaris]: > On Tuesday 22 September 2009 20:29:02 Linker3000 wrote: > > [...] > > Looks like things have moved on and this guide needs updating - "this guide" being? > > I had to do a lot more work to get the package installer & perl installed > > and then the link between cgi-bin/index.cgi just didn't go anywhere Have you got a file "BackupPC_Admin" anywhere? That is probably what it should point to. But you'll also need a few images and a stylesheet to be in the right place for things to work properly. If you need any more help, you probably need to give *a lot* more details, such as which web server you are trying to integrate BackupPC with. And, of course, > [...] > What's failing? ;-). While you may want to use the web interface, it's not a component involved in actually making backups. Regards, Holger |
From: Nigel K. <sup...@pe...> - 2009-09-23 09:04:03
|
-----Original Message----- From: Holger Parplies [mailto:wb...@pa...] Sent: Wednesday, September 23, 2009 9:22 AM To: lin...@go... Cc: bac...@li... Subject: Re: [BackupPC-users] BackupPC on OpenSolaris Hi, Pedro M. S. Oliveira wrote on 2009-09-23 07:48:50 +0100 [Re: [BackupPC-users] BackupPC on OpenSolaris]: > On Tuesday 22 September 2009 20:29:02 Linker3000 wrote: > > [...] > > Looks like things have moved on and this guide needs updating - "this guide" being? > > I had to do a lot more work to get the package installer & perl installed > > and then the link between cgi-bin/index.cgi just didn't go anywhere Have you got a file "BackupPC_Admin" anywhere? That is probably what it should point to. But you'll also need a few images and a stylesheet to be in the right place for things to work properly. If you need any more help, you probably need to give *a lot* more details, such as which web server you are trying to integrate BackupPC with. And, of course, > [...] > What's failing? ;-). While you may want to use the web interface, it's not a component involved in actually making backups. Regards, Holger Hi Holger, My original post was a comment over at the Web-based forums under here: http://www.backupcentral.com/phpBB2/two-way-mirrors-of-external-mailing-list s-3/backuppc-21/backuppc-on-opensolaris-97029/ so it seems out of context when it replicates to the list. I followed the Solaris install guidelines but there seemed to be a lot more to do to get the package installers & C compiler in place in order to load up all the other required packages and, ultimately, the instructions: cd /opt/csw/apache2/share/cgi-bin/ ln -s BackupPC_Admin index.cgi ...are ineffective because, as you say, there's no BackupPC_Admin there. I am sure that a lot of the hassle I have had is down to the fact that I have not used OpenSolaris before and I am re-doing the installation. I have been given some advice on IRC (#solaris) and am following it up... Nigel |
From: Evan T. D. <eva...@ho...> - 2009-10-06 18:06:05
|
Works fine for me. Been using it for a year now. Even survived an upgrade from 2008.11 to 2009.06 -:) The most time consuming thing I had to do was install the required perl modules. I did this via CPAN. Make sure you have gcc and sunstudioexpress installed first. Also, install the latest rsync. Add the following repositories. these will give you more package selection: $ pfexec pkg set-authority -O http://blastwave.network.com:10000/ Blastwave $ pfexec pkg set-authority -O http://pkg.sunfreeware.com:9000/ SunFreeware $ pfexec pkg set-authority -O http://pkg.opensolaris.org/webstack Webstack To find a package just do a pkg search. Such as pkg search rsync >From blastwave you would get something like: INDEX ACTION VALUE PACKAGE basename file opt/csw/bin/pentium/rsync pkg:/IPSrsync@0.5.11-2.6 Use the package string to feed to 'pkg install' pkg install pkg:/IPSrsync@0.5.11-2.6 I can also send you my http and backuppc config is you wish. Thanks! On Tue, 22 Sep 2009 15:29 -0400, "Linker3000" <bac...@ba...> wrote: > > Spent a day trying to make this work and have just given up! > > Looks like things have moved on and this guide needs updating - I had to > do a lot more work to get the package installer & perl installed and then > the link between cgi-bin/index.cgi just didn't go anywhere so there was > nothing to run. > > Might try again in a few days when I feel less frustrated. Soo much > easier on Linux, but I wanted to try the benefits of ZFS [Shocked] > > +---------------------------------------------------------------------- > |This was sent by lin...@go... via Backup Central. > |Forward SPAM to ab...@ba.... > +---------------------------------------------------------------------- > > > > ------------------------------------------------------------------------------ > Come build with us! The BlackBerry® Developer Conference in SF, CA > is the only developer event you need to attend this year. Jumpstart your > developing skills, take BlackBerry mobile applications to market and stay > ahead of the curve. Join us from November 9-12, 2009. Register > now! > http://p.sf.net/sfu/devconf > _______________________________________________ > BackupPC-users mailing list > Bac...@li... > List: https://lists.sourceforge.net/lists/listinfo/backuppc-users > Wiki: http://backuppc.wiki.sourceforge.net > Project: http://backuppc.sourceforge.net/ -- Evan T. Dickinson "I have not failed. I've just found 10,000 ways that won't work." - Thomas Alva Edison (1847-1931) |
From: dan <dan...@gm...> - 2009-10-07 00:25:51
|
Evan, if you dont mind me asking, what is your hardware setup. How many hosts and what type of host do you have an how do you like ZFS in this environment? Do you run into RAM issues with ZFS? Do you use backuppc compression or have ZFS do the compression? |