Bacula and selinux...
-
Looking at different backup methods for the XS virtual machines, decided to take a look at bacula this morning. Everything went smooth except for selinux, which I didn't find a guide for. I'm assuming the bacula user needs to have read/write permissions to that part of the file system/mount point. Just started to trouble shoot this, and wanted to get it documented as no guides I saw have this information already.
-
Very nice, what clients (systems) do you have backing up currently with Bacula?
-
@DustinB3403 said in Bacula and selinux...:
Very nice, what clients do you have backing up currently with Bacula?
Currently, just the local machine itself, but will be mostly CentOS. This would be in addition to XO images.
-
@travisdh1 said in Bacula and selinux...:
@DustinB3403 said in Bacula and selinux...:
Very nice, what clients do you have backing up currently with Bacula?
Currently, just the local machine itself, but will be mostly CentOS. This would be in addition to XO images.
So file level and block level backups, very nice.
All open source as well!
-
http://www.pkill.info/linux/man/8-bacula_selinux/
Trying turning off selinux for just the bacula processes.
-
Yes, confirmed, restore job starts after running
semanage permissive -a bacula_t
I know I could make it much more secure by going through every available option for bacula in selinux, but the time it would take is quite large.
-
Now, just so I have notes to make a guide latter.
Initial Setup
https://www.digitalocean.com/community/tutorials/how-to-install-bacula-server-on-centos-7SELinux Config
http://www.pkill.info/linux/man/8-bacula_selinux/ -
Also for bacula-web
http://www.bacula-web.org/download.html
http://www.chriscouture.com/installing-bacula-webmin-bacula-webon-centos-7/
http://www.bacula-web.org/docs/installing/downloading.htmlAnd selinux @JaredBusch owncloud instructions, same thing
https://mangolassi.it/topic/6938/install-owncloud-8-x-on-centos-7/28 -
I've been experimenting with Relax and Recover. I've used Amanda and it's nice because it just uses normal tools to do the backups. I haven't experimented with Bacula at all, is it worth the set up?
-
@stacksofplates said in Bacula and selinux...:
I've been experimenting with Relax and Recover. I've used Amanda and it's nice because it just uses normal tools to do the backups. I haven't experimented with Bacula at all, is it worth the set up?
I don't know yet. Honestly haven't found an interface for it I like yet. All of your setup is within config files at the command line. I suppose that's ok if you're environment doesn't change much if ever, but even my work environment is in a constant state of change. The only experience I have with it so far is what I did today tho, so I haven't really dived into the management side of it yet besides testing the backup and restore of the machine it's self.
bconsole seems to be the tool, I'm going to determine if it stays or goes tomorrow based on how easily I can learn to use that piece.
The bacula-web client looks like a great status dashboard, but that's all it is, a status display.
-
I don't know much about Bacula but when I was researching a couple months ago I came across Bareos which is a fork of Bacula. Not sure if that is the new direction for the software.
-
@syko24 said in Bacula and selinux...:
I don't know much about Bacula but when I was researching a couple months ago I came across Bareos which is a fork of Bacula. Not sure if that is the new direction for the software.
Does bareos come with a built in web console? I know bacula didn't and required you to chose one of the several choices, and then set it up.
Which made the solution that much more difficult to "sell to management".
-
Again I didn't get too far with it but they appear to have their own web ui.
-
@syko24 said in Bacula and selinux...:
Again I didn't get too far with it but they appear to have their own web ui.
Maybe a thread looking at that product would make sense. I don't know it but am interested to see what they are bringing to the table that make forking Bacula make sense.
-
@scottalanmiller said in Bacula and selinux...:
@syko24 said in Bacula and selinux...:
Again I didn't get too far with it but they appear to have their own web ui.
Maybe a thread looking at that product would make sense. I don't know it but am interested to see what they are bringing to the table that make forking Bacula make sense.
I agree, and I'll start another one after lunch once I get the basic platform setup. Gotta love a good base image.