Date: Sun, 15 Dec 2002 14:10:31 -0800 From: Marcus Reid <marcus@blazingdot.com> To: Mike Tancsa <mike@sentex.net> Cc: Simon <simon@optinet.com>, freebsd-isp@freebsd.org Subject: Re: network backup Message-ID: <20021215221031.GA72287@blazingdot.com> In-Reply-To: <bm3pvu06umktacjbt9g5vi0i7n6kkvtcfi@4ax.com> References: <20021213165625.GB91604@dan.emsphone.com> <mailman.1039802762.69058.fisp-l@lists.sentex.ca> <bm3pvu06umktacjbt9g5vi0i7n6kkvtcfi@4ax.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Dec 15, 2002 at 09:22:06AM -0500, Mike Tancsa wrote: > On Fri, 13 Dec 2002 13:07:18 -0500, in sentex.lists.freebsd.isp you wrote: > > >archive grew over gig or so in size, it errored out on me). Dump is a > >mess to work with, it doesn't work with directories nor with single > >archive file. You need to keep creating new dumps using different > >backup levels and I don't know how you will restore files for x user > >using all those little dumps when you need to efficiently. > > > Dump will work with a single archive file per level. Yes, it does work on a > file system basis and not directory, but your generally want a level0 > backup of your entire system anyways. Its also very efficient for restoring > the odd file from the archive file. restore -i -f <filename> and its MUCH > nicer to work with than tar this way. If you keep 5 levels of incremental > dumps, yes, you will need to do this potentially for 5 different files, but > still works as expected. We do something like this > > /sbin/dump -0uanf - /usr |gzip -9 | ssh > remoteuser@backupserver.example.com dd > of=/home/targetdir/root-server-al0.gz Agreed that dump is the way to go much of the time.. There is something that bothers me in your example though. Your backup machine trusts the server, and not the other way around. IMHO, the backup machine needs to be one of the most trusted machines on your network, like your management workstation. It logs into machines below it, and not the other way around. Compromise of server X should not allow access to the backups of every machine on the network! Marcus To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021215221031.GA72287>