[Bacula-users] centos7 autoloader problem - ok in Cento6
I am seeing a wierd autoloader problem in Centos7 I have an hp (Sun) Sl24 changer with one lt04 drive in it. It works fine in mt/mtx/bacula etc, perfect. The problem I am seeing is that if I pull a magazine to change tapes, or use the mailslot to load a tape, the system hangs on a device wait for the autoloader. The system is not hung, just the job that is using the autoloader, like bacula. If I unmount the drive in bacula before pulling the magazine, then nothing can access the drive, 'mtx status' gives a sense error, and all others, like 'mtx load 13' just hangs. The only way to clear it is to reboot! sg-reset, and all scsi bus reset programs do not clear the error. As I said, this is working fine in centos6 and I did report it as a bug in Centos7 bug tracking system. Anyone else see this or come up with a workaround? Having to reboot after loading restore tapes is a real pain!!! +-- |This was sent by p...@isone.biz via Backup Central. |Forward SPAM to ab...@backupcentral.com. +-- -- Comprehensive Server Monitoring with Site24x7. Monitor 10 servers for $9/Month. Get alerted through email, SMS, voice calls or mobile push notifications. Take corrective actions from your mobile device. http://pubads.g.doubleclick.net/gampad/clk?id=154624111iu=/4140/ostg.clktrk ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] Bacula error? Attr spool not clearing?
Hi. I am using Bacula 7.0.5. I havde disk spooling turned on (80G). During bacups, it spools to the data spool, and attr spool, then writes data to tape as 80g fills up. When it is done, the data spool shows empty, but the attr spool doesnt: Used Volume status: Reserved volume: PH0036L4 on tape device LTO-4-Drive (/dev/nst0) Reader=0 writers=0 reserves=0 volinuse=0 Data spooling: 0 active jobs, 0 bytes; 38 total jobs, 80,530,662,250 max bytes/job. Attr spooling: 0 active jobs, 700,781,712 bytes; 38 total jobs, 700,781,712 max bytes. As you see, nothing is running, but the attr spool show 700m of data in it. Is this a bug? Anyone know? Thanks +-- |This was sent by p...@isone.biz via Backup Central. |Forward SPAM to ab...@backupcentral.com. +-- -- Comprehensive Server Monitoring with Site24x7. Monitor 10 servers for $9/Month. Get alerted through email, SMS, voice calls or mobile push notifications. Take corrective actions from your mobile device. http://pubads.g.doubleclick.net/gampad/clk?id=154624111iu=/4140/ostg.clktrk ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Configuration reload for bacula-sd
On 11/9/2014 6:53 AM, Kern Sibbald wrote: On 11/08/2014 07:35 PM, Dmitri Maziuk wrote: On 11/8/2014 5:36 AM, Kern Sibbald wrote: By the way, in case you have not noticed, there are three white papers posted on the bacula.org web site, two of them, if I am not mistaken, document Virtual Autochangers as implemented in the community version (slightly different from the Enterprise version). I notice now, thanks. CommunityDiskBackup.pdf has the same old problem in 2.1 Grouping Storage Devices: as usual, it talks multiple devices and shows 2 Device definitions with Archive Device = /disk in both. Personally I don't know how to mount multiple physical devices in the same /disk at the same time and keep them separate too. Bacula can only mount one device in any given Device section at a time, but in an Autochanger (virtual or not) there are multiple Devices and each can have its own directory. However, if you use different directories, you must use different Media Types otherwise, Bacula will not know the right directory to look in for fixed disks. Same goes for 2.2 Virtual Autochanger: it doesn't let you write to multiple (disk) devices, it lets bacula treat a single Archive Device as multipe devices -- presumably for concurrent access. I am not sure why you believe the above. Each Device can have a different Archive Device path. The examples probably use the same directory so that it does not get too complicated (with Media Types and all). I suggest you just try using different disk devices and see what happens. I do not see how that is possible. It makes sense that each of the virtual autochanger's Devices use a different Media Type, since that forces volumes to only be loadable on the Device in which they exist. What makes no sense to me is how that is defined in the Director config. The Media Type directive in the Storage resource in bacula-dir.conf is required, and as far as I can tell is limited to a single Media Type. If a single Storage resource in the Director cannot utilize multiple Media Types, then I do not see how a SD virtual autochanger using Devices with different Media Types is addressable as a single Storage resource in Dir. In my testing, I used the below config. Note that I specified a comma-delimited list of the media types in the Media Type directive of the Storage resource in bacula-dir.conf (Media Type = disk0,disk1). Dir and SD start and run normally, accepting the syntax. Jobs run without errors, but only ever utilize the Device with Media Type = disk0, first media type listed. If I attempt to run two concurrent jobs, then they run sequentially, with one waiting on storage until the other completes. No job can use any volume that is not Media Type disk0. If I switch the order of the media types listed in the Media Type directive to Media Type = disk1,disk0, then all jobs will write to the Device with Media Type disk1 and never any volumes with media type disk0. This leads me to believe that while the SD has no problem with a virtual autochanger that has Devices with different Media Types, it isn't possible to define a single Storage resource in Dir that can utilize it. # bacula-sd.conf Autochanger { Name = changer1 Changer Device = /dev/null Changer Command = /dev/null Device = changer1-0,changer1-1 } Device { Name = changer1-0 Drive Index = 0 Autochanger = yes Archive Device = /mnt/disk0 Media Type = disk0 Automatic Mount = yes Always Open = yes Label Media = yes } Device { Name = changer1-1 Drive Index = 1 Autochanger = yes Archive Device = /mnt/disk1 Media Type = disk1 Automatic Mount = yes Always Open = yes Label Media = yes } # eof # bacula-dir.conf ... Storage { Name = changer Address = 192.168.2.9 SDPort = 9103 Password = whatever Device = changer1 Media Type = disk0,disk1 Autochanger = yes; Maximum Concurrent Jobs = 20 } ... #eof -- Comprehensive Server Monitoring with Site24x7. Monitor 10 servers for $9/Month. Get alerted through email, SMS, voice calls or mobile push notifications. Take corrective actions from your mobile device. http://pubads.g.doubleclick.net/gampad/clk?id=154624111iu=/4140/ostg.clktrk ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] CentOS 6.6 SELINUX Problems BACULA 5.2.18 [Help]
Hey Simone Thank you for your input I followed your instructions and I was able to fix (*some of) the SELinux https://danwalsh.livejournal.com/24750.htmlerrors with audit2allow https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security-Enhanced_Linux/sect-Security-Enhanced_Linux-Fixing_Problems-Allowing_Access_audit2allow.html backup/restore seems to be working again I will continue testing and see if I encounter any more problems. Things was not as easy or as straight forward as you presented it but after a lots of reading on SELinux and audit2allow http://selinuxproject.org/page/Audit2allowRecipe and countless trial and errors I was able to fix my backup/restore problems. For some reason most of the problems seems to be related to bacula-sd wanting to read,write,etc on files and directory, I will continue watch and update you. Thanks Again On 11/10/2014 09:45 AM, Simone Caronni wrote: It's a difficult topic but it's very rewarding :) My suggestion is, assuming you have the system in SELinux enforcing mode: - Install policycoreutils-python for SELinux debugging tools - Ask for relabeling of the system (fixfiles onboot) reboot to let the actual relabel happen - Stop Bacula daemons - Clear files in /var/log/audit/ - Set system in permissive mode (setenforce 0) - Start bacula and do whatever you need to test - Launch audit2allow -a or look directly in /var/log/audit/audit.log for hints - Fix what you need to fix and re-enable SELinux (setenforce 1) Redhat SELinux administration's guide for RHEL 7/6: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/SELinux_Users_and_Administrators_Guide/index.html https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security-Enhanced_Linux/index.html Regards, --Simone On 10 November 2014 15:10, Humphrey Bryant hbry...@fogadaley.com mailto:hbry...@fogadaley.com wrote: Hey Simone, Thanks for the reply, indeed you are right its not related to bacula but I was just trying to get some feedback from other users who might have experienced this issue. I don’t really know where to start debugging SELINUX so i guess I have some reading to do. I will have a look on the Red Hat Docs but If you know any useful SELINUX links please email me some, thanks much. Regards On 11/09/2014 04:27 AM, Simone Caronni wrote: Hello, you should do some debugging on the SELinux side, this is not related to Bacula. It is too complicated to explain by mail, Redhat docs are very good in this regard. On Fri, 2014-11-07 at 13:06 -0500, Humphrey Bryant wrote: I check, recheck and double check all permissions on my volumes/files and directory and everything was OK but when i run the backup they still hang nonetheless. It was after I temporarily disabled SELINUX backup start working again, so I am of the conclusion that SELINUX is at fault here.. I need some help getting SELINUX to play nice with Bacula on CENTOS 6.6, can anyone here help me out please. any one can help me create a policy or something, I don’t want to upgrade my production server and have this same problem. First of all, you can try to relabel your filesystem in case you have some mislabeled file; as root do fixfiles onboot and reboot the system. Second, you can delete all files in /var/log/audit/ and make the problem reappear, so you can debug the SELinux permission problems with audit2allow -a or by looking directly at a clean /var/log/audit/audit.log file. Then, it's worth saying that /backup is not a path that is part of SELinux labels. It is not a problem by itself (it should work anyway) but my suggestion is to use /bacula/ as the path for your backups. # semanage fcontext -l | grep bacula /bacula(/.*)? all files system_u:object_r:bacula_store_t:s0 /etc/bacula.* all files system_u:object_r:bacula_etc_t:s0 /etc/rc\.d/init\.d/bacula.* regular file system_u:object_r:bacula_initrc_exec_t:s0 /usr/sbin/bacula.* regular file system_u:object_r:bacula_exec_t:s0 /usr/sbin/bat regular file system_u:object_r:bacula_admin_exec_t:s0 /usr/sbin/bconsole regular file system_u:object_r:bacula_admin_exec_t:s0 /var/lib/bacula.* all files system_u:object_r:bacula_var_lib_t:s0 /var/log/bacula.* all files system_u:object_r:bacula_log_t:s0 /var/run/bacula.* regular file system_u:object_r:bacula_var_run_t:s0 /var/spool/bacula.* all files
Re: [Bacula-users] CentOS 6.6 SELINUX Problems BACULA 5.2.18 [Help]
On 11/11/2014 12:14 PM, Humphrey Bryant wrote: Hey Simone Thank you for your input I followed your instructions and I was able to fix (*some of) the SELinux errors ... Just checking: do you actually need selinux or you're just running it because it's on by default? -- Dimitri Maziuk Programmer/sysadmin BioMagResBank, UW-Madison -- http://www.bmrb.wisc.edu signature.asc Description: OpenPGP digital signature -- Comprehensive Server Monitoring with Site24x7. Monitor 10 servers for $9/Month. Get alerted through email, SMS, voice calls or mobile push notifications. Take corrective actions from your mobile device. http://pubads.g.doubleclick.net/gampad/clk?id=154624111iu=/4140/ostg.clktrk___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] CentOS 6.6 SELINUX Problems BACULA 5.2.18 [Help]
I'm slightly paranoid about security so I mainly use it because of the protection it offers and because it comes on by default. On 11/11/2014 03:32 PM, Dimitri Maziuk wrote: On 11/11/2014 12:14 PM, Humphrey Bryant wrote: Hey Simone Thank you for your input I followed your instructions and I was able to fix (*some of) the SELinux errors ... Just checking: do you actually need selinux or you're just running it because it's on by default? -- Comprehensive Server Monitoring with Site24x7. Monitor 10 servers for $9/Month. Get alerted through email, SMS, voice calls or mobile push notifications. Take corrective actions from your mobile device. http://pubads.g.doubleclick.net/gampad/clk?id=154624111iu=/4140/ostg.clktrk ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users -- Best Regards Humphrey Bryant Information System Admin Foga Daley Attorneys-at-Law 7 Stanton Terrace Kingston 6 Tel - (876) 927-4371-5 Fax - (876) 927-5081 This E-mail contains information which is confidential and privileged. Unless you are the addressee (or authorised to receive for the addressee), you may not use, copy or disclose to anyone the message or information contained in it. If you have received this e-mail in error, please destroy it and advise the sender. attachment: hbryant.vcf-- Comprehensive Server Monitoring with Site24x7. Monitor 10 servers for $9/Month. Get alerted through email, SMS, voice calls or mobile push notifications. Take corrective actions from your mobile device. http://pubads.g.doubleclick.net/gampad/clk?id=154624111iu=/4140/ostg.clktrk___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] summarizing messages into a single mail
Hello, Thanks everyone for the various suggestions. I should have more than enough options to choose from now. =) Regards, Florian S. -- Comprehensive Server Monitoring with Site24x7. Monitor 10 servers for $9/Month. Get alerted through email, SMS, voice calls or mobile push notifications. Take corrective actions from your mobile device. http://pubads.g.doubleclick.net/gampad/clk?id=154624111iu=/4140/ostg.clktrk ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users