Am 29.10.26 um 10:45 schrieb Marcin Haba:
Hello Stefan,
On Thu, 29 Oct 2026 at 09:55, Stefan G. Weichinger via Bacula-users
<[email protected]> wrote:
I want to test the new Ransomware Detection and started to follow the YT
videos ..
OK, great.
On my local test server (Debian-13) I have all on one host: dir, sd, fd,
nginx, bacularis .. backups work fine with one additional client (my
laptop).
And I thought I have the API-host also installed and working on that
server ... under Deployment-Hosts it is shown as "Main" with http and
its LAN IP.
API Panel in Bacularis works also.
But if I press Install it doesn't "detect" that Catalog and Client are
already there etc
If you have installed DIR, SD, FD and Bacularis (API/Web) on that host
then everything is fine. You do not need to install anything else
because you have everything that is needed.
The Deployment => Hosts does not detect your installed Bacula
components because to detect it, the Software Management feature needs
to be enabled. This is one of the API capabilities that enable
Bacularis to install Bacula components.
If you installed Bacularis in a typical way by going through the
install wizard and by adding Bacularis to existing Bacula
installation, then the Software Management API feature is disabled by
default. And this is probably the reason why your Bacula components
are not detected on the Deployment page. To enable the Software
Management, you can do it in the API panel in:
[Main menu] => [Page: Settings] => [Tab: Software management]
and there you can configure it.
But in your case this is not needed at all because, as you wrote, you
already have the local API host and this is sufficient.
I have already enabled and configured that, just to say.
But as you mention, I shouldn't need that.
(and why I got here: the restore test job also fails, because it seems
not to be able to correctly contact the API host)
For the Ransomware Detection, the one important thing to check is if
the IP address in API host configuration and Address in client
configuration (used for Restore Destination) are the same. Otherwise
you can experience the problem with not valid API host in the Restore
Verification. To check the IP address please go in the web interface
to:
[Main menu] => [Page: Security] => [Tab: API hosts] => [Table: Row
with 'Main' host] => [Button: Edit] => [Field: IP Address/Hostname]
and
[Main menu] => [Page: Clients] => [Tab: Clients] => [Table: Row with
your local client] => [Button: Edit] => [Field: Address]
Please check if these two fields contain the same value:
[Field: IP Address/Hostname] is equal [Field: Address]
If for example in one field you have 'localhost' and in another
'127.0.0.1' please unify them to the same value.
I compared these and made sure they point to the same IP address that
host has in my LAN.
To provide context for any logs below:
tx100-dir is the director on the host tx100, with the IP 172.32.99.6
After that the Ransomware Detection should start working.
Hm, not yet.
The job fails with a call to some localhost-URL:
"tx100-dir JobId 2076: shell command: run BeforeJob
"/usr/share/bacularis/protected/Common/Bin/restore verification/run
--token="dTASavRUT6LENbnLyUf_0CLGWuJxUhL9SmFDuOs5kMr0ZLCEKnvlhjvF"
--web-address="localhost""
tx100-dir JobId 2076: BeforeJob:
tx100-dir JobId 2076: BeforeJob: [ERROR] Error while starting restore
test. URL:
http://localhost:9097/web/access/dTASavRUT6LENbnLyUf_0CLGWuJxUhL9SmFDuOs5kMr0ZLCEKnvlhjvF,
HTTP Code: 200, Error: 0, Body:
{"error":5,"message":"Action failed. See
logs."}."
Do I have to recreate the "restore destination" or so?
Thanks, Marcin, for your detailed and quick reply.
Please let us know about the results. Good luck.
Best regards,
Marcin Haba
_______________________________________________
Bacula-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bacula-users
