No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

HUAWEI CLOUD Stack 6.5.0 Backup and Restoration Guide 03

Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring a Backup Policy

Configuring a Backup Policy

After the OceanStor DJ system is successfully installed, it automatically backs up the Gauss database, KMC key, WCC key, and certificate at 00:00 every day, using the default password CloudService@123! to encrypt backup data. It retains the latest seven copies of backup data.

Prerequisites

The management IP address of an OceanStor DJ node and the password of the djmanager account have been obtained.

If a Gauss database, KMC key, WCC key, or certificate is backed up during service running, some data may not be saved into the database, resulting in data inconsistency. You are advised to back up the database after services are complete or when there are a few services running.

Procedure

Local Backup

  1. Run the PuTTY software.
  2. Use the djmanager account and its password to log in to an OceanStor DJ node.

    The default password of the djmanager account is CloudService@123!. To ensure system security, change the password periodically.

  3. Run the following command to change the backup time and encryption password.

    set_backup_policy --service gaussdb --time hh:mm-hh:mm
    set_backup_policy --service gaussdb --time 00:00-01:00 
    Do you want to reset the backup password(y/n):y 
    Input new password: 
    Confirm password: 
    Commit successfully
    NOTE:

    In the preceding command, hh:mm indicates the backup time, where hh indicates hour and mm indicates minute. You can set a maximum of 24 backup times. Each backup time is separated by a hyphen (-). You are advised to keep an interval of 24 hours.

Configuring an FTP Server

  1. Log in to OceanStor DJ portal as an administrator.
  2. On the navigation bar, choose System > System Settings > System Backup.
  3. Select Enable.
  4. In the Basic Information area, set Protocol to FTP. Set FTP Protocol Type to the actual type of FTP used between the OceanStor DJ system and FTP server.

    NOTE:
    • By default, FTPS is used.
    • If FTP is used, there are network security risks. Therefore, FTPS is recommended.

  5. Set IP Address, Port (default value: 21), FTP User Name, and FTP Password.

    NOTE:

    Contact the O&M personnel to create an FTP account of OceanStor DJ for logging in to the FTP server, and the account is granted with the read and write permissions on the workspace root directory of the FTP server. If permissions on the FTP server are restricted, you need to create the SFSDJ directory under the root directory where the FTP server is running. The FTP account has the read and write permissions on the SFSDJ directory.

  6. Set a path for storing backup data on the FTP server. The path can be customized and will be created on the FTP server.
  7. Set Execution Time for copying backup data to the FTP server, Number of Retained DB Backups, and Log Retention Time.

    OceanStor DJ first automatically backs up the GaussDB database, KMC key, WCC key, and certificate based on the configured time and then immediately copies the backup data to the FTP server.

  8. Click Save.

Configuring an SFTP Server

  1. Log in to OceanStor DJ as an administrator.
  2. On the navigation bar, choose System > System Settings > System Backup.
  3. Select Enable.
  4. In the Basic Information area, set Protocol to SFTP.
  5. Set IP Address, Port (default value: 22), SFTP User Name, and SFTP Password.

    NOTE:

    Contact the O&M personnel to create an SFTP account of OceanStor DJ for logging in to the SFTP server, and the account is granted with the read and write permissions on the workspace root directory of the SFTP server. If permissions on the SFTP server are restricted, you need to create the SFSDJ directory under the root directory where the SFTP server is running. The SFTP account has the read and write permissions on the SFSDJ directory.

  6. Set a path for storing backup data on the SFTP server. The path can be customized and will be created on the SFTP server.
  7. Set Execution Time for copying backup data to the SFTP server, Number of Retained DB Backups, and Log Retention Time.

    OceanStor DJ first automatically backs up the GaussDB database, KMC key, WCC key, and certificate based on the configured time and then immediately copies the backup data to the SFTP server.

  8. Click Save.

Configuring an NFS Shared Path

  1. Run PuTTY.

    Use the djmanager account and its password to log in to the OceanStor DJ node.

    The default password of the djmanager account is CloudService@123!. To ensure system security, you are advised to change the password periodically.

  2. Run the following command and enter the password of user root to switch to user root.

    su root

    The default password of user root is Cloud12#$.

  3. Run the following command to check the status of the rpcbind service:

    systemctl status rpcbind

    The command output is as follows:

    rpcbind.service - RPC bind service
       Loaded: loaded (/usr/lib/systemd/system/rpcbind.service; disabled; vendor preset: enabled)
       Active: inactive (dead)
    • If disabled is displayed in the command output:
      1. Run the following command to enable the rpcbind service:

        systemctl enable rpcbind

        If the following command output is displayed, the rpcbind service is successfully enabled.

        Created symlink from /etc/systemd/system/multi-user.target.wants/rpcbind.service to /usr/lib/systemd/system/rpcbind.service.
      1. Run the following command to restart the rpcbind service:

        systemctl start rpcbind

    • If enabled is displayed in the command output, go to Step 4.

  4. Perform Step 1 to Step 3 on other OceanStor DJ nodes. Ensure that the rpcbind service is enabled on each node.
  5. Log in to OceanStor DJ as an administrator.
  6. On the navigation bar, choose System > System Settings > System Backup.
  7. Select Enable.
  8. In the Basic Information area, set Protocol to NFS.
  9. Set an NFS shared path.

    The NFS shared path is in the format of IP address (or domain name):/Shared path, where IP address and domain name refer to the service IP address and domain name of the NAS storage system, respectively. For example, 192.168.10.10:/home/storage. Obtain the NFS shared path from the administrator.

  10. Set an identifier, which is the name of the self-defined folder for storing backup data in the NFS shared path. It differentiates the folder from other existing folders in the NFS shared path. It also facilitates quick locating of backup data when restoring data is required.
  11. Set the time for copying backup data to the NFS shared path.

    OceanStor DJ first automatically backs up the GaussDB database, KMC key, WCC key, and certificate based on the configured time and then immediately copies the backup data to the path of an OceanStor DJ node to which the NFS shared space is mounted.

  12. Click Save.
Translation
Download
Updated: 2019-06-14

Document ID: EDOC1100062366

Views: 760

Downloads: 9

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next