Duplicity - Ƙirƙiri Ƙirƙiri Ƙirƙiri Ƙarfafa Ajiyayyen a cikin Linux


Kwarewa tana nuna cewa ba za ku taɓa zama mai ban tsoro ba game da madadin tsarin. Idan ya zo ga karewa da adana bayanai masu mahimmanci, yana da kyau a yi nisan mil kuma ku tabbata za ku iya dogara da abubuwan ajiyar ku idan buƙatar ta taso.

Ko da a yau, lokacin da wasu dabarun wariyar ajiya ta amfani da kayan aikin ku don adana wasu kuɗi sannan watakila amfani da shi don siyan ƙarin ajiya ko samun VPS mafi girma.

Hakanan kuna iya son: 25 Fitattun Abubuwan Ajiyayyen Ajiyayyen don Linux Systems.

Sauti mai ban sha'awa? A cikin wannan labarin, za mu nuna muku yadda ake amfani da kayan aiki da ake kira Duplicity don adanawa da ɓoye fayiloli da kundayen adireshi. Bugu da kari, yin amfani da madaidaicin kari don wannan aikin zai taimaka mana mu adana sarari.

Wannan ya ce, bari mu fara.

Shigar da Kayan Ajiyayyen Duplicity a cikin Linux

Don shigar da duplicity a cikin distros na tushen RHEL, dole ne ku fara kunna ma'ajiyar EPEL (zaku iya barin wannan matakin idan kuna amfani da Fedora kanta):

# yum update 
# yum install epel-release
OR
# yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm

Sai gudu,

# yum install duplicity

Don Debian da abubuwan da aka samo asali:

$ sudo apt update 
$ sudo apt install duplicity

A ka'idar, yawancin hanyoyin haɗi zuwa uwar garken fayil ana goyan bayan duk da cewa ftp, HSI, WebDAV, da Amazon S3 ne kawai aka gwada a aikace har yanzu.

Da zarar an gama shigarwa, za mu yi amfani da sftp na musamman a cikin yanayi daban-daban, duka don adanawa da dawo da bayanan.

Wurin gwajin mu ya ƙunshi akwatin RHEL 8 (wanda za'a tallafawa) da injin Debian 11 (sabar madadin).

Ƙirƙirar Maɓallan SSH don Shiga mara kalmar wucewa zuwa Sabar Nesa

Bari mu fara da ƙirƙirar maɓallan SSH a cikin akwatin RHEL ɗin mu kuma canza su zuwa uwar garken madadin Debian.

Idan kuna gudana SSH akan tashar jiragen ruwa daban, to, umarnin da ke ƙasa yana ɗauka cewa sshd daemon yana sauraron tashar jiragen ruwa XXXXX a cikin uwar garken Debian. Sauya AAA.BBB.CCC.DDD tare da ainihin IP na uwar garken nesa.

# ssh-keygen -t rsa
# ssh-copy-id [email 
# ssh-copy-id -p XXXXX [email   

Sannan yakamata ku tabbatar zaku iya haɗawa zuwa uwar garken madadin ba tare da amfani da kalmar sirri ba:

# ssh [email 

Yanzu muna buƙatar ƙirƙirar maɓallan GPG waɗanda za a yi amfani da su don ɓoyewa da ɓoye bayanan mu:

# gpg2 --full-gen-key

Za a sa ka shigar:

  • Irin maɓalli
  • Girman maɓalli
  • Yaya tsawon lokacin da maɓalli ya kamata ya kasance mai aiki
  • Yanayin kalmar wucewa

Don ƙirƙirar entropy da ake buƙata don ƙirƙirar maɓallai, zaku iya shiga uwar garken ta wata taga ta ƙarshe kuma ku aiwatar da ƴan ayyuka ko gudanar da wasu umarni don samar da entropy (in ba haka ba kuna jira na dogon lokaci don wannan ɓangaren. tsarin gamawa).

Da zarar an samar da makullin, zaku iya jera su kamar haka:

# gpg --list-keys

Zaren da aka yi alama a cikin rawaya a sama ana san shi da ID ɗin maɓalli na jama'a, kuma hujja ce da ake nema don ɓoye fayilolinku.

Ƙirƙirar Ajiyayyen Linux tare da Duplicity

Don farawa mai sauƙi, bari mu ajiye /var/log directory kawai, ban da /var/log/anaconda da /var/log/sa.

Tunda wannan shine madadin mu na farko, zai zama cikakke. Gudun da ke gaba za su ƙirƙiri ƙarin tallafi (sai dai idan mun ƙara cikakken zaɓi ba tare da dashes ba kusa da kwafi a cikin umarnin da ke ƙasa):

# PASSPHRASE="tecmint" duplicity --encrypt-key 115B4BB13BC768B8B2704E5663C429C3DB8BAD3B --exclude /var/log/anaconda --exclude /var/log/sa /var/log scp://[email //backups/rhel8
OR
# PASSPHRASE="YourPassphraseHere" duplicity --encrypt-key YourPublicKeyIdHere --exclude /var/log/anaconda --exclude /var/log/sa /var/log scp://[email :XXXXX//backups/rhel8

Tabbatar cewa ba ku rasa slash sau biyu a cikin umarnin da ke sama! Ana amfani da su don nuna cikakkiyar hanya zuwa kundin adireshi mai suna/backups/rhel8 a cikin akwatin ajiyar kuma shine inda za a adana fayilolin ajiyar.

Maye gurbin YourPassphraseHere, YourPublicKeyIdHere, da RemoteServer tare da kalmar wucewa da kuka shigar a baya, GPG ID key na jama'a, kuma tare da IP ko sunan mai masauki na uwar garken madadin, bi da bi.

Fitowar ku yakamata tayi kama da hoto mai zuwa:

Hoton da ke sama yana nuna cewa an adana jimlar 86.3 MB zuwa 3.22 MB a wurin da aka nufa. Bari mu canza zuwa uwar garken madadin don duba sabon madadin mu da aka ƙirƙira:

Gudun gudu na biyu na wannan umarni yana haifar da ƙarami mai girma da lokaci:

Maido da Ajiyayyen Linux ta amfani da Duplicity

Don samun nasarar maido da fayil, kundin adireshi tare da abinda ke cikinsa, ko madaidaicin gabaɗaya, ba dole ba ne wurin zama wurin da zai kasance ba (na biyun ba zai sake rubuta fayil ɗin da ke akwai ko kundin adireshi ba). Don fayyace, bari mu share log ɗin cron a cikin akwatin CentOS:

# rm -f /var/log/cron

Ma'anar daidaitawa don dawo da fayil guda ɗaya daga uwar garken nesa shine:

# PASSPHRASE="YourPassphraseHere" duplicity --file-to-restore filename sftp://[email //backups/rhel8 /where/to/restore/filename

ku,

  • filename shine fayil ɗin da za a ciro, tare da hanyar dangi zuwa kundin adireshi da aka samu tallafi
  • /inda/zuwa/mayar da ita ita ce directory a cikin tsarin gida inda muke son mayar da fayil ɗin zuwa.

A cikin yanayinmu, don dawo da babban log ɗin cron daga madadin nesa muna buƙatar gudu:

# PASSPHRASE="YourPassphraseHere" duplicity --file-to-restore cron sftp://[email :XXXXX//backups/rhel8 /var/log/cron

Ya kamata a mayar da log ɗin cron zuwa wurin da ake so.

Hakanan, jin kyauta don share kundin adireshi daga/var/log kuma mayar da shi ta amfani da madadin:

# rm -rf /var/log/mail
# PASSPHRASE="YourPassphraseHere" duplicity --file-to-restore mail sftp://[email :XXXXX//backups/rhel8 /var/log/mail

A cikin wannan misalin, ya kamata a mayar da littafin adireshi zuwa wurinsa na asali tare da duk abinda ke cikinsa.

Sauran fasalulluka na Duplicity

A kowane lokaci zaka iya nuna jerin fayilolin da aka adana tare da umarni mai zuwa:

# duplicity list-current-files sftp://[email :XXXXX//backups/rhel8

Share abubuwan ajiya sama da watanni 6:

# duplicity remove-older-than 6M sftp://[email :XXXXX//backups/rhel8

Mayar da myfile cikin directory gacanepa kamar yadda yake kwanaki 2 da awanni 12 da suka gabata:

# duplicity -t 2D12h --file-to-restore gacanepa/myfile sftp://[email :XXXXX//remotedir/backups /home/gacanepa/myfile

A cikin umarni na ƙarshe, zamu iya ganin misali na amfani da tazarar lokaci (kamar yadda aka ƙayyade ta -t): jerin nau'i-nau'i inda kowannensu ya ƙunshi lamba wanda ɗayan haruffan s, m, h, D ke bi. W, M, ko Y (yana nuna sakanni, mintuna, awanni, kwanaki, makonni, watanni, ko shekaru bi da bi).

Takaitawa

A cikin wannan labarin, mun bayyana yadda ake amfani da Duplicity, mai amfani da madadin da ke ba da ɓoyewa ga fayiloli da kundayen adireshi daga cikin akwatin. Ina ba da shawarar ku duba gidan yanar gizon aikin duplicity don ƙarin takaddun bayanai da misalai.

Mun samar da shafin mutum na kwafi a cikin tsarin PDF don dacewar karatun ku, kuma cikakkiyar jagora ce.

Jin kyauta don sanar da mu idan kuna da tambayoyi ko sharhi.