Re: Backing up ACLs on FreeBSD 10
Toomas, Amanda 3.3.6 will have a new ambsdtar application that use the bsd tar program to back up with ACLs. Jean-Louis On 03/17/2014 05:19 PM, Toomas Aas wrote: Hello! This first FreeBSD 10 server is also my first encounter with filesystem ACLs. As thousands of Amanda users before me, I discovered that GNU tar doesn't back up ACLs and star is often recommended as an alternative which does. Only thing is, the star port doesn't want to build on FreeBSD 10 amd64. Or more precisely, smake, which is required to build star, does not build. Seems like it's been this way for quite a while and nobody has fixed the situation. Before I spend too much time trying to fix it myself, I'd like to find out if there is perhaps an alternative solution that I'm missing. So, if anyone has a success story about backing up filesystem ACLs on FreeBSD 10 amd64 (with Amanda, of course), I'm all ears :) Regards,
Backing up ACLs on FreeBSD 10
Hello! This first FreeBSD 10 server is also my first encounter with filesystem ACLs. As thousands of Amanda users before me, I discovered that GNU tar doesn't back up ACLs and star is often recommended as an alternative which does. Only thing is, the star port doesn't want to build on FreeBSD 10 amd64. Or more precisely, smake, which is required to build star, does not build. Seems like it's been this way for quite a while and nobody has fixed the situation. Before I spend too much time trying to fix it myself, I'd like to find out if there is perhaps an alternative solution that I'm missing. So, if anyone has a success story about backing up filesystem ACLs on FreeBSD 10 amd64 (with Amanda, of course), I'm all ears :) Regards, -- Toomas Aas
Re: amgtar + acls?
Am 03.07.09 22:39 schrieb(en) Dustin J. Mitchell: Albrecht -- amgtar is now an Amanda application, and its interface is not the same as the tar executable. I see - I forgot to mention that I use amanda 2.5.2p1 on a set of Ubuntu Hardy and RHEL boxes. I re-compiled it myself to get access to my own tar application. I'd be interested in a patch that causes Amanda's amgtar application to optinonally use 'setar'. I imagine this would be fairly simple? The configure option to switch to a different tar application (again, in 2.5.2p1). Actually to switch the shell script, not to setar directly. Cheers, Albrecht. pgpe56kGNf68C.pgp Description: PGP signature
amgtar + acls?
Does anyone have a working example of using amgtar to backup ACLs and/or selinux attributes? It seems that any of the --acls, --selinux or --xattrs flags are actually incompatible with the --listed-incremental flag to GNU tar? I hacked the --xattrs option into amgtar but I can't seem to get it to work with --listed-incremental, which it seems is necessary for incremental backups. I can get star to work, but restores seem much less reliable than gtar, and that makes me really nervous. Thanks for any assistance. Using Amanda 2.6.1p1 on CentOS 5.3 x86_64. -- Anyone who believes exponential growth can go on forever in a finite world, is either a madman or an economist.
Re: amgtar + acls?
Am 03.07.09 17:58 schrieb(en) Alan Hodgson: Does anyone have a working example of using amgtar to backup ACLs and/or selinux attributes? Apparently Fedora comes with a patched tar which supports xattr's, see https://bugzilla.redhat.com/show_bug.cgi?id=200925 and https://bugzilla.redhat.com/show_bug.cgi?id=472355. I believe it is possible to compile it manually for your disto. It seems that any of the --acls, --selinux or --xattrs flags are actually incompatible with the --listed-incremental flag to GNU tar? I hacked the --xattrs option into amgtar but I can't seem to get it to work with --listed-incremental, which it seems is necessary for incremental backups. My /usr/local/sbin/amgtar is simply a shell script wrapping the Fedora tar as to include the extended attributes: snip #!/bin/sh /opt/bin/setar --xattrs $@ /snip Hope this helps, Albrecht. pgpXej0AbJ5lo.pgp Description: PGP signature
Re: amgtar + acls?
On Fri, Jul 3, 2009 at 2:43 PM, Albrecht Dreßalbrecht.dr...@arcor.de wrote: My /usr/local/sbin/amgtar is simply a shell script wrapping the Fedora tar as to include the extended attributes: snip #!/bin/sh /opt/bin/setar --xattrs $@ /snip Hope this helps, Albrecht. Albrecht -- amgtar is now an Amanda application, and its interface is not the same as the tar executable. I'd be interested in a patch that causes Amanda's amgtar application to optinonally use 'setar'. I imagine this would be fairly simple? Dustin -- Open Source Storage Engineer http://www.zmanda.com
Re: amgtar + acls?
On Friday 03 July 2009, Albrecht Dreß albrecht.dr...@arcor.de wrote: Am 03.07.09 17:58 schrieb(en) Alan Hodgson: Does anyone have a working example of using amgtar to backup ACLs and/or selinux attributes? Apparently Fedora comes with a patched tar which supports xattr's, see https://bugzilla.redhat.com/show_bug.cgi?id=200925 and https://bugzilla.redhat.com/show_bug.cgi?id=472355. I believe it is possible to compile it manually for your disto. Don't know why I didn't think of that. Using Fedora Core 11's tar works well. Thank you! CentOS's tar does support the xattrs flag but it wasn't working with all the options used by Amanda - the Fedora Core version does. -- Anyone who believes exponential growth can go on forever in a finite world, is either a madman or an economist.
Re: ACLs in inode #bla won't be dumped
Thanks again for all your help. Comments inline. Well, I guess I'm convinced to try out tar Setting up tar was a snap, and there were no errors! One more perhaps silly question, but just something I'd like to verify... I assume that the tar program is run on the client machine, so that means I'll have to upgrade to the ideal version of tar on each client. Is my assumption correct? Our workaround was to use a GNU tar wrapper (2000+ lines of finely crafted Perl) for LVM volumes that created a snapshot and backed that up. We just ignored the access time problem for file systems not under LVM control. Is something that is publicly available? If so, where could I find this? Any info on this? Thanks a lot! Dave
Re: ACLs in inode #bla won't be dumped
On Sunday 02 October 2005 20:57, David Leangen wrote: Thanks again for all your help. Comments inline. Well, I guess I'm convinced to try out tar Setting up tar was a snap, and there were no errors! One more perhaps silly question, but just something I'd like to verify... I assume that the tar program is run on the client machine, so that means I'll have to upgrade to the ideal version of tar on each client. Is my assumption correct? Yup. Our workaround was to use a GNU tar wrapper (2000+ lines of finely crafted Perl) for LVM volumes that created a snapshot and backed that up. We just ignored the access time problem for file systems not under LVM control. Is something that is publicly available? If so, where could I find this? Any info on this? Thanks a lot! Most of that stuff is usually written on the spot, for that particular system. But why did the tar wrapper grow to 2000 lines? Dave -- Cheers, Gene There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order. -Ed Howdershelt (Author) 99.35% setiathome rank, not too shabby for a WV hillbilly Yahoo.com and AOL/TW attorneys please note, additions to the above message by Gene Heskett are: Copyright 2005 by Maurice Eugene Heskett, all rights reserved.
Re: ACLs in inode #bla won't be dumped
Gene Heskett wrote: Well, tar is file based, and its recovery can be to an already occupied directory. Dump does the disk structure (AIUI) so that the recovered stuff goes back to the same place on the disk (if I've got it right that is, corrections welcome) Files from backups made with dump can also be restored to any point in the filesystem. I'm using dump with Amanda on my FreeBSD machinery and I've done this many times. The actual reasons why one might prefer tar to dump are that tar is cross-platform (you can restore files tar'ed from FreeBSD machine to a Linux machine, for example, which you can't do with dump) and tar allows you to make backups of arbitrary (sub-)directory trees instead of entire filesystems. -- Toomas Aas
Re: ACLs in inode #bla won't be dumped
The actual reasons why one might prefer tar to dump are that tar is cross-platform ... ... and tar allows you to make backups of arbitrary (sub-)directory trees instead of entire filesystems. In addition to that, the reason tar is **strongly** pushed on Linux is that dump works with the raw disks while tar goes through the file system to get its data. The more aggressive the OS is about caching file data (and metadata) in memory (which Linux tries very hard to do), the less likely it is the raw disk has the real data, or at least a consistent version of it. Linus sent out a pretty firm you should never use dump E-mail quite a while back. On the other hand ... I don't (didn't) use tar at Purdue, in general, because it changes the access time on the files it backs up. That's a very bad thing. If you're about to mention --atime-preserve, don't :-). Setting that flag causes the change time to be altered. Our workaround was to use a GNU tar wrapper (2000+ lines of finely crafted Perl) for LVM volumes that created a snapshot and backed that up. We just ignored the access time problem for file systems not under LVM control. Toomas Aas John R. Jackson, Senior Systems Analyst, Engineering Solutions, Inc
Re: ACLs in inode #bla won't be dumped
Well, I guess I'm convinced to try out tar, but not to play the devil's advocate, I'm just curious... I don't (didn't) use tar at Purdue, in general, because it changes the access time on the files it backs up. That's a very bad thing. Why is this such a bad thing? If we suppose that (1) crashes do not occur often, so recovering is really an extreme situation, and (2) just having the data is good enough, why would access times and the like matter so much? Our workaround was to use a GNU tar wrapper (2000+ lines of finely crafted Perl) for LVM volumes that created a snapshot and backed that up. We just ignored the access time problem for file systems not under LVM control. Is something that is publicly available? If so, where could I find this? Thank you!!
Re: ACLs in inode #bla won't be dumped
On Thu, Sep 29, 2005 at 09:30:05AM +0900, David Leangen wrote: Well, I guess I'm convinced to try out tar, but not to play the devil's advocate, I'm just curious... I don't (didn't) use tar at Purdue, in general, because it changes the access time on the files it backs up. That's a very bad thing. Why is this such a bad thing? If we suppose that (1) crashes do not occur often, so recovering is really an extreme situation, and (2) just having the data is good enough, why would access times and the like matter so much? Nothing to do with backups, but daily usage and admin functions. What is access time supposed to record? The last time the data in that file was used for some purpose. I'd rather that the use that changes atime NOT be backing up the data. I'd prefer that atime give some indication of when some human or some application other than backup used the data. If every file has the same atime, i.e. the time of the backup, then a file's atime is a worthless datum. -- Jon H. LaBadie [EMAIL PROTECTED] JG Computing 4455 Province Line Road(609) 252-0159 Princeton, NJ 08540-4322 (609) 683-7220 (fax)
Re: ACLs in inode #bla won't be dumped
Interesting... Ok, so I tried a few things, but it seems that things are only getting worse... Ok, I'll check that out. Maybe it has something to do with SELinux... Good possibility. One of the first things a secure unix system generally does is remove the notion of a super-user. Actually, my SELinux is set to disabled, so this can't be the problem after all... Is it possible that dump doesn't do symbolic links? So, if I have /part1/somedir -- /part2/some/other/dir, since I am trying to dump data that is not actually on the partition, would this cause a problem? Start with man pages setfacl and getfacl (I think those are the names in FC3). Yes, you're right. Ok, so ACL is just the name for file and directory permissions... no big deal at all. Appears your release does not do ACLs, but if you upgrade your dump/restore by 3 releases maybe the messages will go away. Tried that. You were right! It did solve the ACL error. I'm getting a new error now, though: sendbackup: time xxx 88: strange(?): dump: symbol lookup error: dump: undefined symbol: ext2fs_read_inode_full sendbackup: time xxx 93: normal(|): DUMP: DUMP* Bad return code from dump: 127 Also, unfortunately, NOTHING is getting copied now to my backup disk... We'ed prefer that tar was used in most cases. Why would tar be better than dump? It seems to me, based on what my understanding of the two are, that dump is more appropriate. That's not the case? Thanks again! Dave
Re: ACLs in inode #bla won't be dumped
On Tuesday 27 September 2005 02:48, David Leangen wrote: [...] Why would tar be better than dump? It seems to me, based on what my understanding of the two are, that dump is more appropriate. That's not the case? Well, tar is file based, and its recovery can be to an already occupied directory. Dump does the disk structure (AIUI) so that the recovered stuff goes back to the same place on the disk (if I've got it right that is, corrections welcome) Tar frankly is all I've ever used here, and one can actually do a bare metal restore with nothing more than dd, tar gzip. Thanks again! Dave -- Cheers, Gene There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order. -Ed Howdershelt (Author) 99.35% setiathome rank, not too shabby for a WV hillbilly Yahoo.com and AOL/TW attorneys please note, additions to the above message by Gene Heskett are: Copyright 2005 by Maurice Eugene Heskett, all rights reserved.
ACLs in inode #bla won't be dumped
Hello! I am getting something like the following in my logs, and somehow it doesn't seem right... sendbackup : time xxx.xxx : normal(|) DUMP+ ACLs in inode #xxx wont't be dumped sendbackup : time xxx.xxx : index tee cannot write [Broken pipe] Any ideas what all this about? Thanks! Dave
Re: ACLs in inode #bla won't be dumped
On Monday 26 September 2005 05:21, David Leangen wrote: Hello! I am getting something like the following in my logs, and somehow it doesn't seem right... sendbackup : time xxx.xxx : normal(|) DUMP+ ACLs in inode #xxx wont't be dumped sendbackup : time xxx.xxx : index tee cannot write [Broken pipe] Any ideas what all this about? Offhand, it sounds like a permissions problem but what do I know? Thanks! Dave -- Cheers, Gene There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order. -Ed Howdershelt (Author) 99.35% setiathome rank, not too shabby for a WV hillbilly Yahoo.com and AOL/TW attorneys please note, additions to the above message by Gene Heskett are: Copyright 2005 by Maurice Eugene Heskett, all rights reserved.
Re: ACLs in inode #bla won't be dumped
On Mon, Sep 26, 2005 at 06:21:46PM +0900, David Leangen wrote: Hello! I am getting something like the following in my logs, and somehow it doesn't seem right... sendbackup : time xxx.xxx : normal(|) DUMP+ ACLs in inode #xxx wont't be dumped sendbackup : time xxx.xxx : index tee cannot write [Broken pipe] I don't know what dump program that is coming from and have never seen the message. I suspect that sendbackup is simply showing the stderr of the dump program to you. Thus my approach to investigating this would be to look at the man page (or other docs) for your particular dump program. Some man pages list all possible error messages and some explanation. Just a WAG, perhaps some of your files have access control list permissions that prevent even root from reading them. jl -- Jon H. LaBadie [EMAIL PROTECTED] JG Computing 4455 Province Line Road(609) 252-0159 Princeton, NJ 08540-4322 (609) 683-7220 (fax)
Re: ACLs in inode #bla won't be dumped
I am getting something like the following in my logs, and somehow it doesn't seem right... sendbackup : time xxx.xxx : normal(|) DUMP+ ACLs in inode #xxx wont't be dumped First, please realize that it's your dump program reporting this, not Amanda. Amanda is just echoing the messages through. What kind of OS is being dumped and what kind of dump (e.g. ufsdump, vxdump, etc)? Some versions of dump just don't do ACL's. Vendors want you to buy their spiffy proprietary backup software that actually works and leave the normal stuff crippled. Wonderful folks, those vendors. Dave John R. Jackson, Senior Systems Analyst, Engineering Solutions, Inc
RE: ACLs in inode #bla won't be dumped
Thank you for all the replies! Comments inline... sendbackup : time xxx.xxx : normal(|) DUMP+ ACLs in inode #xxx wont't be dumped sendbackup : time xxx.xxx : index tee cannot write [Broken pipe] Offhand, it sounds like a permissions problem but what do I know? Just a WAG, perhaps some of your files have access control list permissions that prevent even root from reading them. Ok, I'll check that out. Maybe it has something to do with SELinux... First, please realize that it's your dump program reporting this, not Amanda. Amanda is just echoing the messages through. Yeah, I kind of figured this, but thought this would be a good place to ask. Hope you don't mind... What kind of OS is being dumped Linux FC3 and what kind of dump (e.g. ufsdump, vxdump, etc)? Hmmm... good question. How do I figure that out? In any case, I'm using the default dump that comes with FC3. [EMAIL PROTECTED] ~]# dump --version dump: invalid option -- - dump 0.4b37 (using libext2fs 1.35 of 28-Feb-2004) Some versions of dump just don't do ACL's. Vendors want you to buy their spiffy proprietary backup software that actually works and leave the normal stuff crippled. Wonderful folks, those vendors. :-) What is an ACL anyway? Where can I find out more about this while trying to figure out what's going on? Thanks for all the advice!!
Re: gnutar and IRIX ACLs
* Joshua Baker-LePain [EMAIL PROTECTED] [20040730 11:20]:
On Fri, 30 Jul 2004 at 10:50am, Jean-Francois Malouin wrote
I find myself forced to use ACLs for a finer-grained permissions setup
of a few filesystems (Irix CXFS) and I wonder if any of you had done a
similar thing. The irix tar claims to have the capability of backing
up ACLs but I can't use it because of other problems with this
version. Right now I'm using gtar (GNU tar) 1.13.25 along with
Amanda-2.4.4p1-20031120. I can't use xfsdump/xfsrestore due to the
fact that these filesystems are much bigger than my tapes (LTO1) and I
cannot split the filesystems like I do with gtar (xfsdump will only do
full backups for directories).
If that is still not possible to backup (and restore!) ACLs with
gnutar I was thinking of periodically updating a file containing all
the ACLs and I case of a restore just apply the relevent ACLs on top
of the restored file.
Am I fishing in troubled waters?
Has anyone done something similar?
Where I can't use xfsdump/restore, I do indeed dump the ACLs to a file for
future restore if the need arises. At least I used to... fx: roots
around in FSs/memory/man pages. Ah, try something like this in your
crontab before amanda runs:
getfacl -R dirname /somewhare/safe/dirname.ACLs
If the need to restore the ACLs on dirname, you'd do
setfacl --restore=/somewhare/safe/dirname.ACLs
Note that I took the command line flags from the man pages for {s|g}etfacl
on a Red Hat 9 box, so check them against the IRIX man pages.
Thank you very much for your answer Joshua.
I don't think there is an equivalent of 'getfacl/setfacl' for Irix
however with 'chacl' (irix command to change ACLs) and a few lines of
perl it should prove easy to write a program to save and restore ACLs.
bye,
jf
--
Joshua Baker-LePain
Department of Biomedical Engineering
Duke University
--
Better to be silent and thought a fool than to speak and remove all doubt.
Re: Solaris ACLs
Talking of snapshots, FreeBSD 5.x can do this too with the -L flag to dump. Can someone remind me of how to generate a specific backup type (in amanda.conf) that passes the -L flag to dump on the remote system. Ta -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Jon LaBadie wrote: big snip As Solaris also can do FS snapshots, the OP should be informed of that feature. Not amanda specific, but neat. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support.
Re: Solaris ACLs
On Tue, Mar 09, 2004 at 12:33:55AM -0500, Jon LaBadie wrote: On Mon, Mar 08, 2004 at 06:35:49PM -0600, Frank Smith wrote: Someone on the sage-members list is looking for free backup software that met his listed requirements, and I was about to reply with Amanda, but I wasn't sure about his requirement #5 (below) pertaining to Solaris ACLs. Will Amanda actually do what he wants? ... The man page doesn't mention ACL's, but I suspect it will That was supposed to say ufsdump man page but the internet gremlin deleted the command name :) have to preserve them. Tar/gnutar of course will not. However, if Shilly's 'star' can be made to work, it claims to preserve Solaris ACL's (and not affect atime). If ufsdump is used the normal caveats apply, exclude/include don't work, only entire file systems which must fit on tape, ... As Solaris also can do FS snapshots, the OP should be informed of that feature. Not amanda specific, but neat. -- Jon H. LaBadie [EMAIL PROTECTED] JG Computing 4455 Province Line Road(609) 252-0159 Princeton, NJ 08540-4322 (609) 683-7220 (fax) End of included message -- Jon H. LaBadie [EMAIL PROTECTED] JG Computing 4455 Province Line Road(609) 252-0159 Princeton, NJ 08540-4322 (609) 683-7220 (fax)
Solaris ACLs
Someone on the sage-members list is looking for free backup software that met his listed requirements, and I was about to reply with Amanda, but I wasn't sure about his requirement #5 (below) pertaining to Solaris ACLs. Will Amanda actually do what he wants? Thanks, Frank I currently work for a large university. We currently have a Very Large tape library system (a walk-in model, terrabites of storage, hundreds of tapes, blah blah blah) We currently have robotics software (unitree) and some interesting home-grown custom jobbies. Unfortunately, they are rather ugly. So I'd like to be able to migrate our backups to something a little more sane, and a little more widely used. Given the amount of data, and number of hosts, and our limited funding for software, getting a license for veritas or legato backup software, etc. is going to be out of the question. So I need a free solution suggested. My ideal backup solution would handle: 1. multiple incoming backup streams, ideally multiplexing then to a single tape or virtual restoral device, for streaming speed purposes, etc. 2a. know about interfacing with unitree directly, OR 2b. be flexible about save all the data to a pseudo-'file' which is actually managed by HSM 3. be able to handle restore requests along the lines of, Give me all the files in directory X, on machine Y, at date YYY/MM/DD:HH/MM/SS and pull in the appropriate files from the last full dump, and all relevant incrementals. And if there was a level0, level2, level3, and level4 dump, and the most recent versions of the file(s) were on level3, it would not have to go through the level0 and level2 dumps to find out the data is not there. 4. it must be able to handle Very Large Filesystems (I'm not sure we have any terrabytes filesystems... Yet. But we probably will have them soon) 5. It should be able to handle restoring Solaris ACLs It is not neccessary to have any kind of non-root-user interface. Restores are handled by the sysadmins only. Of all of the above, I think that everything except #2 is mandatory. Am I dreaming, or is there anything out there for free that can actually handle all of this? -- Frank Smith [EMAIL PROTECTED] Sr. Systems Administrator Voice: 512-374-4673 Hoover's Online Fax: 512-374-4501
Re: Solaris ACLs
On Mon, Mar 08, 2004 at 06:35:49PM -0600, Frank Smith wrote: Someone on the sage-members list is looking for free backup software that met his listed requirements, and I was about to reply with Amanda, but I wasn't sure about his requirement #5 (below) pertaining to Solaris ACLs. Will Amanda actually do what he wants? Thanks, Frank I currently work for a large university. We currently have a Very Large tape library system (a walk-in model, terrabites of storage, hundreds of tapes, blah blah blah) We currently have robotics software (unitree) and some interesting home-grown custom jobbies. Unfortunately, they are rather ugly. So I'd like to be able to migrate our backups to something a little more sane, and a little more widely used. Given the amount of data, and number of hosts, and our limited funding for software, getting a license for veritas or legato backup software, etc. is going to be out of the question. So I need a free solution suggested. My ideal backup solution would handle: 1. multiple incoming backup streams, ideally multiplexing then to a single tape or virtual restoral device, for streaming speed purposes, etc. 2a. know about interfacing with unitree directly, OR 2b. be flexible about save all the data to a pseudo-'file' which is actually managed by HSM 3. be able to handle restore requests along the lines of, Give me all the files in directory X, on machine Y, at date YYY/MM/DD:HH/MM/SS and pull in the appropriate files from the last full dump, and all relevant incrementals. And if there was a level0, level2, level3, and level4 dump, and the most recent versions of the file(s) were on level3, it would not have to go through the level0 and level2 dumps to find out the data is not there. 4. it must be able to handle Very Large Filesystems (I'm not sure we have any terrabytes filesystems... Yet. But we probably will have them soon) 5. It should be able to handle restoring Solaris ACLs It is not neccessary to have any kind of non-root-user interface. Restores are handled by the sysadmins only. Of all of the above, I think that everything except #2 is mandatory. Am I dreaming, or is there anything out there for free that can actually handle all of this? The man page doesn't mention ACL's, but I suspect it will have to preserve them. Tar/gnutar of course will not. However, if Shilly's 'star' can be made to work, it claims to preserve Solaris ACL's (and not affect atime). If ufsdump is used the normal caveats apply, exclude/include don't work, only entire file systems which must fit on tape, ... As Solaris also can do FS snapshots, the OP should be informed of that feature. Not amanda specific, but neat. -- Jon H. LaBadie [EMAIL PROTECTED] JG Computing 4455 Province Line Road(609) 252-0159 Princeton, NJ 08540-4322 (609) 683-7220 (fax)
Re: Backup of ACLs
You wrote: tar won't get ACLs. An FS specific dump program probably will. If i must use star instead of tar, where i must configure this? (which entry in which file?) I don't know if star is drop-in replaceable for tar. ISTR that it only does one level of incrementals, which amanda won't like if it needs to bump some backups. Star is a drop in replacement for tar but GNU tar unfortunately is not, so star will not be able to replace GNU tar.. Many things that Amanda does are better handled by star directly. - Buffereing to the tape (star includes a FIFO) - error control. Star allows you to specify pairs of error conditions and file name patterns that cause a specific error condition to be suppressed. There are others, see ftp://ftp.berlios.de/pub/star for more information. Star recently started to support 'true incremental backups' similar to what ufsdump does. There is not yet support for incremental restores if a file is removed (and the restored tree should not include this file), if a file changed its type and if a file has been renamed. Jörg EMail:[EMAIL PROTECTED] (home) Jörg Schilling D-13353 Berlin [EMAIL PROTECTED](uni) If you don't have iso-8859-1 [EMAIL PROTECTED](work) chars I am Jorg Schilling URL: http://www.fokus.fraunhofer.de/usr/schilling ftp://ftp.berlios.de/pub/schily
Backup of ACLs
Hi, we are thinking about using ACLs (extended attributes and access control lists) on our file server, of which we make a full backup by using Amanda every night. So my question concerning the backup is: Can Amanda also backup ACLs? Do i have to change something in my configuration? I have heard something about star, is this really necessary or can i use tar? If i must use star instead of tar, where i must configure this? (which entry in which file?) Any experiences with ACL in combination with Amanda? Thank you for information, best regards, Dalton
Re: Backup of ACLs
On Thu, 2003-04-03 at 13:15, Dalton Hubert wrote: Hi, we are thinking about using ACLs (extended attributes and access control lists) on our file server, of which we make a full backup by using Amanda every night. So my question concerning the backup is: Can Amanda also backup ACLs? That depends on what filesystem you want to use. If you first install SGI's XFS, and then rebuild amanda, amanda will use xfsdump (which is capable of backing up acl's/extended attributes) automagically. This works for me. hope this'll help you out.. roger Do i have to change something in my configuration? I have heard something about star, is this really necessary or can i use tar? If i must use star instead of tar, where i must configure this? (which entry in which file?) Any experiences with ACL in combination with Amanda? Thank you for information, best regards, Dalton
Re: Backup of ACLs
On Thu, 3 Apr 2003 at 1:15pm, Dalton Hubert wrote we are thinking about using ACLs (extended attributes and access control lists) on our file server, of which we make a full backup by using Amanda every night. So my question concerning the backup is: Can Amanda also backup ACLs? Amanda doesn't do backups. Amanda *schedules* backups. Amanda uses another program (a dump, or GNUtar) to actually do the backups. Do i have to change something in my configuration? Well, since we don't know what your config is now... I have heard something about star, is this really necessary or can i use tar? tar won't get ACLs. An FS specific dump program probably will. If i must use star instead of tar, where i must configure this? (which entry in which file?) I don't know if star is drop-in replaceable for tar. ISTR that it only does one level of incrementals, which amanda won't like if it needs to bump some backups. Any experiences with ACL in combination with Amanda? I just started using ACLs on one of my Linux servers using XFS. The partition is too large for a tape, so I can't use xfsdump (which will get the ACLs). What I do is have cron run '/usr/bin/getfacl -R $DIR' on the $DIR in which I'm using ACLs. I dump the output of that somewhere else on disk that gets backed up. If I have to restore that $DIR, I can just run 'setfacl -R' on the directory after I restore it from tape. It may not be elegant, but it's what I came up with. -- Joshua Baker-LePain Department of Biomedical Engineering Duke University
Re: Backup of ACLs
Amanda manages backups using whatever native tool it's configured to use. You don't state what platform you're using I can't speculate as to an ACL-aware tool for it.
Re: Backup of ACLs
On Thu, Apr 03, 2003 at 01:15:32PM +0200, Dalton Hubert wrote: Hi, we are thinking about using ACLs (extended attributes and access control lists) on our file server, of which we make a full backup by using Amanda every night. So my question concerning the backup is: Can Amanda also backup ACLs? The problem with your question is that amanda doesn't backup anything. It manages backups done by other programs. The common programs are gnutar and the OS's file system dump program. The question then becomes can the backup program you choose save and restore ACL's. Best way to answer that is to read the local documentation and run a test backup and recovery. Amanda is not needed to check this out. Do i have to change something in my configuration? I have heard something about star, is this really necessary or can i use tar? If i must use star instead of tar, where i must configure this? (which entry in which file?) During configuration and build of amanda you specify what program is your gnutar. If you point it at star, amanda will try to use it. But beware that amanda will think it is gnutar and use gnutar options. They may, or may not, be the same for star. BTW what's star? -- Jon H. LaBadie [EMAIL PROTECTED] JG Computing 4455 Province Line Road(609) 252-0159 Princeton, NJ 08540-4322 (609) 683-7220 (fax)
Re: Backup of ACLs
On Thu April 3 2003 10:02, Jon LaBadie wrote: On Thu, Apr 03, 2003 at 01:15:32PM +0200, Dalton Hubert wrote: Hi, we are thinking about using ACLs (extended attributes and access control lists) on our file server, of which we make a full backup by using Amanda every night. So my question concerning the backup is: Can Amanda also backup ACLs? The problem with your question is that amanda doesn't backup anything. It manages backups done by other programs. The common programs are gnutar and the OS's file system dump program. The question then becomes can the backup program you choose save and restore ACL's. Best way to answer that is to read the local documentation and run a test backup and recovery. Amanda is not needed to check this out. Do i have to change something in my configuration? I have heard something about star, is this really necessary or can i use tar? If i must use star instead of tar, where i must configure this? (which entry in which file?) During configuration and build of amanda you specify what program is your gnutar. If you point it at star, amanda will try to use it. But beware that amanda will think it is gnutar and use gnutar options. They may, or may not, be the same for star. BTW what's star? STar is Jeorg Schilling's *posix* compliant tar replacement. 'Schillings Tar' in other words. I believe it has additional features over and above gnutar, but thats just from reading the press releases :-) But like others, I've not tried to use it with amanda, so I have NDI if its gnutar compatible or not. Thats the same Schilling (or is it Schilly? Alzheimers strikes again) that is much more famous as the author of the CD-RW toolbox and its ancilliary utilities such as cdrecord and others in that family. His code should be as solid as it comes, but absolute compatibility questions have neither been asked very often here, nor answered here. Such questions in my observations, seem to be ignored. Lack of knowledge, or something actually wrong with it, I have no clue. However, I believe there is a flag you can set on its command line that makes it 100% gnutar compatible. Do a search on freshmeat for more details. -- Cheers, Gene AMD [EMAIL PROTECTED] 320M [EMAIL PROTECTED] 512M 99.25% setiathome rank, not too shabby for a WV hillbilly Yahoo.com attornies please note, additions to this message by Gene Heskett are: Copyright 2003 by Maurice Eugene Heskett, all rights reserved.
Re: ACLs
On Mon, Mar 10, 2003 at 11:30:14AM -0500, Mitch Collinsworth said: On Mon, 10 Mar 2003, Adam Smith wrote: On FreeBSD 5.0 with UFS2 + ACLs, what is my best method for backing up my ACLs along with my files? I am only experimenting with Amanda at this point, but it seems to use the native tar utility, however tar does not support the backing up of ACLs. Can anyone show me what I need to do? I don't have a 5.0 system to look at, but looking briefly at the CVS tree, it appears their ACL system is designed to not require special consideration. There seems to be more explanation of the UFS1 implementation, which requires more manual setup, than the UFS2 implementation, which is natively available. Do your filesystems have a special directory at their root? Possibly .attribute ? No, with UFS2 the ACLs just 'exist' as part of the filesystem, yet I am not sure how to export them out. -- Adam Smith Information Technology Officer SAGE Automation Ltd. [EMAIL PROTECTED] http://www.sageautomation.com
Re: ACLs
On Mon, 10 Mar 2003 at 10:25am, Adam Smith wrote On FreeBSD 5.0 with UFS2 + ACLs, what is my best method for backing up my ACLs along with my files? I am only experimenting with Amanda at this point, but it seems to use the native tar utility, however tar does not support the backing up of ACLs. Can anyone show me what I need to do? Amanda will use tar or the appropriate fs-specific 'dump' program provided by your vendor, depending on what's in the dumptype. If there's a dump program that will handle those ACLs, amanda will use it if you tell it to. -- Joshua Baker-LePain Department of Biomedical Engineering Duke University
Re: ACLs
Check your acl package to see if it supports recursive fetch/restore. If it does, just before dump time, do a recursive getfacl , redirected to a file. After a tar restore, you can use your listed acls file to restore the acls. I currently don't use this method ( on RH7.3) , but I'm headed that way. -- toby bluhm philips medical systems, it support, mr development, cleveland ohio [EMAIL PROTECTED] 440-483-5323 Adam Smith [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 03/09/2003 06:55 PM Please respond to adam.smith To: [EMAIL PROTECTED] cc: (bcc: Tobias Bluhm/CLE/MS/PHILIPS) Subject:ACLs Classification: On FreeBSD 5.0 with UFS2 + ACLs, what is my best method for backing up my ACLs along with my files? I am only experimenting with Amanda at this point, but it seems to use the native tar utility, however tar does not support the backing up of ACLs. Can anyone show me what I need to do? Regards, -- Adam Smith Information Technology Officer SAGE Automation Ltd. [EMAIL PROTECTED] http://www.sageautomation.com
Re: ACLs
On Mon, 10 Mar 2003, Adam Smith wrote: On FreeBSD 5.0 with UFS2 + ACLs, what is my best method for backing up my ACLs along with my files? I am only experimenting with Amanda at this point, but it seems to use the native tar utility, however tar does not support the backing up of ACLs. Can anyone show me what I need to do? I don't have a 5.0 system to look at, but looking briefly at the CVS tree, it appears their ACL system is designed to not require special consideration. There seems to be more explanation of the UFS1 implementation, which requires more manual setup, than the UFS2 implementation, which is natively available. Do your filesystems have a special directory at their root? Possibly .attribute ? (This is the name documented for UFS1.) If this is there then this is where your ACLs are stored and if you're backing up those dirs then you're getting the ACLs. -Mitch
ACLs
On FreeBSD 5.0 with UFS2 + ACLs, what is my best method for backing up my ACLs along with my files? I am only experimenting with Amanda at this point, but it seems to use the native tar utility, however tar does not support the backing up of ACLs. Can anyone show me what I need to do? Regards, -- Adam Smith Information Technology Officer SAGE Automation Ltd. [EMAIL PROTECTED] http://www.sageautomation.com
Re: problem with ACLs
On Tue, 2 Jul 2002 09:53:54 +0200 Guillaume Roger [EMAIL PROTECTED] wrote: Hi, I have to save Windows (NTFS) files, but it seems that Amanda doesn't keep the ACLs. Does someone know if there is a mean to do that, or is it definitly not possible? thanks Guillaume Hi! Search in Sourceforge for amanda client Win32. It is the Linux client adapted to Windows NT stuff, it can back up Windows files natively, so with the ACLs also! Jean-Christian SIMONETTIemail: [EMAIL PROTECTED] SysAdmin Wanadoo Operations phone: (+33)492283200 (standard) Sophia Antipolis, France
