Re: [Bacula-users] [Bacularis/Baculum] Restore with web doesn't create job before 1 hour

2024-04-03 Thread Marcin Haba
Hello Timothé,

Thanks for your detailed description of the problem.

For start I would propose to check what is going inside Bacula and the
Catalog when this restore is trying to start.

Yes, observing 'ps aux' is a good idea, that you did. Also useful can be
'top' command with watching what process takes the most resources.

>From the Bacula side you can set debug for Director by this bconsole
command:

setdebug level=500 tags=bvfs,sql trace=1 dir

in the Bacula Director working directory you will see the
youdirector-dir.trace file where this debug lines will be written.

If your Catalog database is PostgreSQL you ran run in the time of the
restore hanging this SQL query to see currently pending SQL queries:

SELECT * FROM pg_stat_activity;

Please let us know about the results.

Good luck.

Best regards,
Marcin Haba (gani)

On Wed, 3 Apr 2024 at 20:40, timothe pennec  wrote:

> Hi everyone,
>
> I've one issue with Bacularis (and same with Baculum) WEB when i follow
> the restore wizzard :
>
>- I select my client and let checked "Enable restore from copy job
>feature"
>- I select the Last full Backup of my client
>- I select one folder with add button (total of files about 55 000 and
>total syse about 4Go)
>- I select the same client and "/tm/restore" folder for testing
>- I let default setting for Restore job (RestoreFiles and no replace
>file and no relocate files)
>- I submit with "Run restore"
>
>
> When i submit nothing happen (i got only "loading" favicon and not
> redirect or validation message for create job).
> At the same time if i open new tab to default web page it seems the server
> not responding for a while and after a time the page loaded for the default
> tab and error "504 Gateway timeout" for restore tab
> If i ssh and launch bconsole and enter "status director" i can see that no
> job was created (terminated or running or whatever state).
>
> Here a "ps aux | grep bconsole" at this time :
> www-data   21059  0.0  0.0   2892   964 ?S19:45   0:00 sh -c
> sudo /usr/bin/bconsole -c "/etc/bacula/bconsole.conf" -D bacula-dir 2>&1
> < replace="never" restorejob="RestoreFiles" where="/tmp/restore" yes quit
> END_OF_DATA
> root   21060  0.0  0.0   8488  5228 ?S19:45   0:00 sudo
> /usr/bin/bconsole -c /etc/bacula/bconsole.conf -D bacula-dir
> root   21061  0.0  0.1 165928 10516 ?Sl   19:45   0:00
> /usr/bin/bconsole -c /etc/bacula/bconsole.conf -D bacula-dir
>
> I'm running with bacula 15.0.2 with apt for server and clients all in
> Ubuntu 22.04
> The result of "tail -f /opt/bacula/log/bacula.log" is empty for all
> process.
>
> For about 50min / 70 min nothing happen then i got job created !
>
> For exemple the log for the test run at 17:03 (job created at 18:00 and
> all file copied in < 1 min)
>
> bacula-dir JobId 4831: End auto prune.
> bacula-dir JobId 4831: No Files found to prune.
> bacula-dir JobId 4831: Begin pruning Files.
> bacula-dir JobId 4831: No Jobs found to prune.
> bacula-dir JobId 4831: Begin pruning Jobs older than 6 months .
> bacula-dir JobId 4831: Bacula bacula-dir 15.0.2 (21Mar24):
>   Build OS:   x86_64-pc-linux-gnu-bacula ubuntu 22.04
>   JobId:  4831
>   Job:RestoreFiles.2024-04-02_18.00.36_48
>   Restore Client: "www.example.org" 15.0.2 (21Mar24)
> x86_64-pc-linux-gnu-bacula,ubuntu,22.04
>   Where:  /tmp/restore
>   Replace:Never
>   Start time: 02-avril-2024 18:00:38
>   End time:   02-avril-2024 18:01:19
>   Elapsed time:   41 secs
>   Files Expected: 53,888
>   Files Restored: 53,888
>   Bytes Restored: 4,066,211,495 (4.066 GB)
>   Rate:   99175.9 KB/s
>   FD Errors:  0
>   FD termination status:  OK
>   SD termination status:  OK
>   Termination:Restore OK
> bacula-sd JobId 4831: Elapsed time=00:00:41, Transfer rate=99.38 M
> Bytes/second
> bacula-sd JobId 4831: Forward spacing Volume "Monthlyvol-0017" to
> addr=22149617617
> bacula-sd JobId 4831: Ready to read from volume "Monthlyvol-0017" on File
> device "FileStorage" (/backup).
> wwwexampleorg-fd JobId 4831: Connected to Storage at
> bacula.esx2.example.org:9103 with TLS
> bacula-dir JobId 4831: Connected to Client "www.example.org" at
> 2001:41d0:303:f006::3:9102 with TLS
> bacula-dir JobId 4831: Using Device "FileStorage" to read.
> bacula-dir JobId 4831: Connected to Storage
> "bacula.esx2.example.org_backup" at bacula.esx2.example.org:9103 with TLS
> bacula-dir JobId 4831: Restoring files from JobId(s) 4792
> bacula-dir JobId 4831: Start Restore Job
> RestoreFiles.2024-04-02_18.00.36_48
>
> If i try to run restore by the bconsole command and follow the prompt job
> is created instantaly.
>
> I didn't have test by the past the restore feature but i think something
> is wrong.
>
> Anyone can help me for this issue ?
>
> Best regards
> Timothé
> 

Re: [Bacula-users] Bacularis API host initial setup with postgresql and bacula.

2024-04-03 Thread Marcin Haba
Hello Rob,

Bacularis is not able to use the peer authentication method easily because
it is authentication that is based on system users. In this case the
Bacularis PHP user usually is different from the default Bacula database
user.

In your case I think if you want you can stay in the peer method for Bacula
connections and add a line in pg_hba.conf to TCP/IP connections for
Bacularis. Something like:

# "local" is for Unix domain socket connections only (for Bacula)
local   all all peer
# IPv4 local connections (for Bacularis):
hostall all 127.0.0.1/32
 scram-sha-256

The only thing to do is to set password for your 'bacula' user:

ALTER USER bacula WITH PASSWORD 'STRONG_PASSWORD';

This password will be used for TCP/IP connections but Bacula will not need
it.

Best regards,
Marcin Haba (gani)

On Wed, 3 Apr 2024 at 17:27, Rob Gerber  wrote:

> Marcin,
>
> Thank you for the very quick response! I will experiment with this when I
> have some time.
>
> I am guessing because I've never configured a password for the bacula
> database, and based on my pg_hba.conf, that bacula is authenticating to the
> database server via peer connections, so bacula doesn't need a password to
> access the database (in my default configuration). This detail kind of
> stumped me at first. Please let me know if you think this is incorrect. My
> original fear was that resetting the database password would lock bacula
> out of the database.
>
> Robert Gerber
> 402-237-8692
> r...@craeon.net
>
> On Tue, Apr 2, 2024, 11:40 PM Marcin Haba  wrote:
>
>> Hello Rob,
>>
>> At the moment I prepared a section about the authentication methods in
>> the Bacularis documentation. You can read it here:
>>
>>
>> https://bacularis.app/doc/brief/configuration.html#bacula-catalog-database-access
>>
>> Best regards,
>> Marcin Haba (gani)
>>
>> On Wed, 3 Apr 2024 at 04:51, Marcin Haba  wrote:
>>
>>> Hello Rob,
>>>
>>> Thanks for your question.
>>>
>>> As the authentication method in PostgreSQL pg_hba.conf you can use
>>> scram-sha-256 This method is available starting from PostgreSQL 10.
>>>
>>> For the Bacularis documentation, yes, it looks to be missing there. I
>>> will add to the doc this section about configuring the Catalog Database
>>> access in Bacularis. Thanks for pointing it.
>>>
>>> Best regards,
>>> Marcin Haba (gani)
>>>
>>> On Wed, 3 Apr 2024 at 00:50, Rob Gerber  wrote:
>>>
 I have previously set up bacula and bacularis on Rocky Linux 9. At the
 time I ran into issues giving bacularis access to bacula's postgresql
 database. I didn't know the bacula database password. At that time I set
 the postgresql pg_hba.conf file to use "trust". However I am concerned that
 this isn't a good security best practice.

 I am setting up a second bacula / Bacularis system and I'd like to
 revisit this postgres authentication issue so I can follow best practice
 better.

 The bacularis documentation doesn't make it clear how I am supposed to
 authenticate bacularis to bacula's database.

 I suspect there is a process that is obvious to many others and not to
 me.

 Does anyone here have suggestions for how I might authenticate
 bacularis to the bacula database?

 Robert Gerber
 402-237-8692
 r...@craeon.net
 ___
 Bacula-users mailing list
 Bacula-users@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/bacula-users

>>>
>>>
>>> --
>>>
>>> "Greater love hath no man than this, that a man lay down his life for his 
>>> friends." Jesus Christ
>>>
>>> "Większej miłości nikt nie ma nad tę, jak gdy kto życie swoje kładzie za 
>>> przyjaciół swoich." Jezus Chrystus
>>>
>>>
>>
>> --
>>
>> "Greater love hath no man than this, that a man lay down his life for his 
>> friends." Jesus Christ
>>
>> "Większej miłości nikt nie ma nad tę, jak gdy kto życie swoje kładzie za 
>> przyjaciół swoich." Jezus Chrystus
>>
>>

-- 

"Greater love hath no man than this, that a man lay down his life for
his friends." Jesus Christ

"Większej miłości nikt nie ma nad tę, jak gdy kto życie swoje kładzie
za przyjaciół swoich." Jezus Chrystus
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users


[Bacula-users] [Bacularis/Baculum] Restore with web doesn't create job before 1 hour

2024-04-03 Thread timothe pennec
Hi everyone,

I've one issue with Bacularis (and same with Baculum) WEB when i follow the 
restore wizzard :

  *
I select my client and let checked "Enable restore from copy job feature"
  *
I select the Last full Backup of my client
  *
I select one folder with add button (total of files about 55 000 and total syse 
about 4Go)
  *
I select the same client and "/tm/restore" folder for testing
  *
I let default setting for Restore job (RestoreFiles and no replace file and no 
relocate files)
  *
I submit with "Run restore"

When i submit nothing happen (i got only "loading" favicon and not redirect or 
validation message for create job).
At the same time if i open new tab to default web page it seems the server not 
responding for a while and after a time the page loaded for the default tab and 
error "504 Gateway timeout" for restore tab
If i ssh and launch bconsole and enter "status director" i can see that no job 
was created (terminated or running or whatever state).

Here a "ps aux | grep bconsole" at this time :
www-data   21059  0.0  0.0   2892   964 ?S19:45   0:00 sh -c sudo 
/usr/bin/bconsole -c "/etc/bacula/bconsole.conf" -D bacula-dir 2>&1 
<___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users


Re: [Bacula-users] Any suggestions for fail2ban jail for Bacula Director ?

2024-04-03 Thread Josh Fisher via Bacula-users
Nothing against fail2ban, which is quite good at mitigating brute force 
and dictionary attacks against password protection, but for opening Dir 
to the public internet, I would most definitely suggest looking into 
using TLS certificates issued by your own private CA instead.



On 4/2/24 19:05, MylesDearBusiness via Bacula-users wrote:

I nailed this.

I created a cron job that, every ten minutes or so, runs "journalctl 
-u bacula-dir > /opt/bacula/log/bacula-dir-journal.log" (since I 
opened bacula-dir's firewall port up to the public internet).


I then created a fail2ban jail that scanned for authentication failure 
patterns and banned (via temporary firewall rules) users who 
repeatedly failed to log in successfully.


root:/etc/fail2ban/jail.d# cat bacula.conf
[bacula]
enabled  = true
port = 9101
filter   = bacula
logpath  = /opt/bacula/log/bacula-dir-journal.log
maxretry = 10
findtime = 3600
bantime  = 900
action = iptables-allports

root:/etc/fail2ban/filter.d# cat /etc/fail2ban/filter.d/bacula.conf

# Fail2Ban filter for Bacula Director
[Definition]
failregex = Hello from client: is invalid
ignoreregex =

root:/etc/fail2ban/filter.d#

Best,



On 2023-12-04 12:22 p.m., MylesDearBusiness wrote:

Hello,

I just installed Bacula director on one of my cloud servers.

I have set the firewall to allow traffic in/out of port 9101 to allow 
it to be utilized to orchestrate remote backups as well.


What I want to do is to identify the potential attack surface and 
create a fail2ban jail configuration.


Does anybody have an exemplar that I can work with?

Also, is there a way to simulate a failed login attempt with a tool 
such as netcat?  I could possibly use PostMan and dig into the REST 
API spec, but I was hoping the community would be able to shortcut 
this effort.


What say you?

Thanks,






___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users


Re: [Bacula-users] Bacularis API host initial setup with postgresql and bacula.

2024-04-03 Thread Rob Gerber
Marcin,

Thank you for the very quick response! I will experiment with this when I
have some time.

I am guessing because I've never configured a password for the bacula
database, and based on my pg_hba.conf, that bacula is authenticating to the
database server via peer connections, so bacula doesn't need a password to
access the database (in my default configuration). This detail kind of
stumped me at first. Please let me know if you think this is incorrect. My
original fear was that resetting the database password would lock bacula
out of the database.

Robert Gerber
402-237-8692
r...@craeon.net

On Tue, Apr 2, 2024, 11:40 PM Marcin Haba  wrote:

> Hello Rob,
>
> At the moment I prepared a section about the authentication methods in the
> Bacularis documentation. You can read it here:
>
>
> https://bacularis.app/doc/brief/configuration.html#bacula-catalog-database-access
>
> Best regards,
> Marcin Haba (gani)
>
> On Wed, 3 Apr 2024 at 04:51, Marcin Haba  wrote:
>
>> Hello Rob,
>>
>> Thanks for your question.
>>
>> As the authentication method in PostgreSQL pg_hba.conf you can use
>> scram-sha-256 This method is available starting from PostgreSQL 10.
>>
>> For the Bacularis documentation, yes, it looks to be missing there. I
>> will add to the doc this section about configuring the Catalog Database
>> access in Bacularis. Thanks for pointing it.
>>
>> Best regards,
>> Marcin Haba (gani)
>>
>> On Wed, 3 Apr 2024 at 00:50, Rob Gerber  wrote:
>>
>>> I have previously set up bacula and bacularis on Rocky Linux 9. At the
>>> time I ran into issues giving bacularis access to bacula's postgresql
>>> database. I didn't know the bacula database password. At that time I set
>>> the postgresql pg_hba.conf file to use "trust". However I am concerned that
>>> this isn't a good security best practice.
>>>
>>> I am setting up a second bacula / Bacularis system and I'd like to
>>> revisit this postgres authentication issue so I can follow best practice
>>> better.
>>>
>>> The bacularis documentation doesn't make it clear how I am supposed to
>>> authenticate bacularis to bacula's database.
>>>
>>> I suspect there is a process that is obvious to many others and not to
>>> me.
>>>
>>> Does anyone here have suggestions for how I might authenticate bacularis
>>> to the bacula database?
>>>
>>> Robert Gerber
>>> 402-237-8692
>>> r...@craeon.net
>>> ___
>>> Bacula-users mailing list
>>> Bacula-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/bacula-users
>>>
>>
>>
>> --
>>
>> "Greater love hath no man than this, that a man lay down his life for his 
>> friends." Jesus Christ
>>
>> "Większej miłości nikt nie ma nad tę, jak gdy kto życie swoje kładzie za 
>> przyjaciół swoich." Jezus Chrystus
>>
>>
>
> --
>
> "Greater love hath no man than this, that a man lay down his life for his 
> friends." Jesus Christ
>
> "Większej miłości nikt nie ma nad tę, jak gdy kto życie swoje kładzie za 
> przyjaciół swoich." Jezus Chrystus
>
>
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users


Re: [Bacula-users] Bacula 15.02 upgrade on Centos 7 -- Storage Daemon not starting

2024-04-03 Thread sruckh--- via Bacula-users

On 2024-04-02 14:43, Bill Arlofski via Bacula-users wrote:


Hello,

Glad we got this working. :)

P.S. I think it is time to upgrade/migrate from CentOS 7  ;)


Absolutely agree.  Thank you for the help.

Best regards,
Bill


___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users


Re: [Bacula-users] Again vchanger and volumes in error...

2024-04-03 Thread Josh Fisher via Bacula-users


I have found the problem. See below.

On 4/2/24 05:33, Marco Gaiarin wrote:

Mandi! Josh Fisher via Bacula-users
   In chel di` si favelave...


This is the Easter weekend in italy, so backup will fail in most of my
sites; i'm enabling debug for sites, i'll come back here on monday...

When the magazine is ejected and no magazine is in drive, the output of
'list media' command from bconsole should be saved to see if it shows all
volumes to be not in changer, if that is possible for you.

...


So, trying to determine what happened... cartdrige 1 (0) ejected on friday 
morning:

Mar 29 07:00:02:  [30941]: restored state of magazine 0
Mar 29 07:00:02:  [30941]: filesystem ea70e0c4-8076-4448-9b7e-4bb268a56c18 has 
udev assigned device /dev/sdc1
Mar 29 07:00:02:  [30941]: filesystem ea70e0c4-8076-4448-9b7e-4bb268a56c18 
(device /dev/sdc1) mounted at /mnt/vchanger/ea70e0c4-8076-4448-9b7e-4bb268a56c18
Mar 29 07:00:02:  [30941]: magazine 0 has 10 volumes on 
/mnt/vchanger/ea70e0c4-8076-4448-9b7e-4bb268a56c18
Mar 29 07:00:02:  [30941]: 10 volumes on magazine 0 assigned slots 1-10
Mar 29 07:00:02:  [30941]: magazine 1 is not mounted
Mar 29 07:00:02:  [30941]: magazine 2 is not mounted
Mar 29 07:00:02:  [30941]: saved state of magazine 0
Mar 29 07:00:02:  [30941]: saved dynamic configuration (max used slot: 10)
Mar 29 07:00:02:  [30941]: found symlink for drive 0 -> 
/mnt/vchanger/ea70e0c4-8076-4448-9b7e-4bb268a56c18/VIPVE2RDX__0001
Mar 29 07:00:02:  [30941]: drive 0 previously loaded from slot 2 
(VIPVE2RDX__0001)
Mar 29 07:00:02:  [30941]: found symlink for drive 1 -> 
/mnt/vchanger/ea70e0c4-8076-4448-9b7e-4bb268a56c18/VIPVE2RDX__0006
Mar 29 07:00:02:  [30941]: drive 1 previously loaded from slot 7 
(VIPVE2RDX__0006)
Mar 29 07:00:02:  [30941]: found symlink for drive 2 -> 
/mnt/vchanger/ea70e0c4-8076-4448-9b7e-4bb268a56c18/VIPVE2RDX__0007
Mar 29 07:00:02:  [30941]: drive 2 previously loaded from slot 8 
(VIPVE2RDX__0007)
Mar 29 07:00:02:  [30941]:  preforming UNLOAD command
Mar 29 07:00:02:  [30941]: deleted symlink for drive 0
Mar 29 07:00:02:  [30941]: deleted state file for drive 0
Mar 29 07:00:02:  [30941]: unloaded drive 0
Mar 29 07:00:02:  [30941]:   SUCCESS unloading slot 2 from drive 0
Mar 29 07:00:05:  [31075]: restored state of magazine 0
Mar 29 07:00:05:  [31075]: filesystem ea70e0c4-8076-4448-9b7e-4bb268a56c18 has 
udev assigned device /dev/sdc1
Mar 29 07:00:05:  [31075]: device /dev/sdc1 not found in system mounts, 
searching all udev device aliases
Mar 29 07:00:05:  [31075]: filesystem ea70e0c4-8076-4448-9b7e-4bb268a56c18 
(device /dev/sdc1) not mounted
Mar 29 07:00:05:  [31075]: magazine 0 is not mounted
Mar 29 07:00:05:  [31075]: update slots needed. magazine 0 no longer mounted; 
previous: 10 volumes in slots 1-10
Mar 29 07:00:05:  [31075]: magazine 1 is not mounted
Mar 29 07:00:05:  [31075]: magazine 2 is not mounted
Mar 29 07:00:05:  [31075]: saved dynamic configuration (max used slot: 10)
Mar 29 07:00:05:  [31075]: drive 0 previously unloaded
Mar 29 07:00:05:  [31075]: volume VIPVE2RDX__0006 no longer available, 
unloading drive 1
Mar 29 07:00:05:  [31075]: deleted symlink for drive 1
Mar 29 07:00:05:  [31075]: volume VIPVE2RDX__0007 no longer available, 
unloading drive 2
Mar 29 07:00:05:  [31075]: deleted symlink for drive 2
Mar 29 07:00:05:  [31075]:  preforming REFRESH command
Mar 29 07:00:05:  [31075]: running '/usr/sbin/bconsole -n -u 30'
Mar 29 07:00:05:  [31075]: popen: child stdin uses pipe (4 -> 5)
Mar 29 07:00:05:  [31075]: popen: child stdout uses pipe (6 -> 7)
Mar 29 07:00:05:  [31075]: popen: forking now
Mar 29 07:00:05:  [31075]: popen: parent closing pipe ends 4,7,-1 used by child
Mar 29 07:00:05:  [31075]: popen: parent writes child's stdin to 5
Mar 29 07:00:05:  [31075]: popen: parent reads child's stdout from 6
Mar 29 07:00:05:  [31075]: popen: parent returning pid=31076 of child
Mar 29 07:00:05:  [31075]: sending bconsole command 'update slots storage="VIPVE2RDX" 
drive="0"'
Mar 29 07:00:05:  [31076]: popen: child closing pipe ends 5,6,-1 used by parent
Mar 29 07:00:05:  [31076]: popen: child will read stdin from 4
Mar 29 07:00:05:  [31076]: popen: child will write stdout to 7
Mar 29 07:00:05:  [31076]: popen: child executing '/usr/sbin/bconsole'
Mar 29 07:00:06:  [31079]: filesystem ea70e0c4-8076-4448-9b7e-4bb268a56c18 has 
udev assigned device /dev/sdc1
Mar 29 07:00:06:  [31079]: device /dev/sdc1 not found in system mounts, 
searching all udev device aliases
Mar 29 07:00:06:  [31079]: filesystem ea70e0c4-8076-4448-9b7e-4bb268a56c18 
(device /dev/sdc1) not mounted
Mar 29 07:00:06:  [31079]: magazine 0 is not mounted
Mar 29 07:00:06:  [31079]: magazine 1 is not mounted
Mar 29 07:00:06:  [31079]: magazine 2 is not mounted
Mar 29 07:00:06:  [31079]: saved dynamic configuration (max used slot: 10)
Mar 29 07:00:06:  [31079]: drive 0 previously unloaded
Mar 29 07:00:06:  [31079]:  preforming SLOTS command
Mar 29 07:00:06:  [31079]:   

Re: [Bacula-users] Backup in disk AND tape

2024-04-03 Thread Roberto Greiner

Em 02/04/2024 19:58, Bill Arlofski via Bacula-users escreveu:

On 4/2/24 12:01 PM, Roberto Greiner wrote:

Hi,

I've installed Bacula recently in a server with a 7TB RAID5 storage, and
a LTO-6 tape unit.

I have configured 9 remote servers (most Linux, one Windows) to have the
backup made in this server in the disk storage, and I'm finish to
understand how to do the tape backup. Now, I have a question about
making the backup into both destinations.

I have the following setup for JobsDef:

JobDefs {
    Name = "DefaultJob"
    Type = Backup
    Level = Incremental
    Client = bacula2-fd
    FileSet = "Full Set"
    Schedule = "WeeklyCycle"
    Storage = FileAligned
    Messages = Standard
    Pool = File
    SpoolAttributes = yes
    Priority = 10
    Write Bootstrap = "/opt/bacula/working/%c.bsr"
}

Then I added a server to have the backup, let's say (it's a linux,
despite the name):

Job {
    Name = "AD"
    JobDefs = "DefaultJob"
    Client = ad-fd
    FileSet = "etc"
}

This will, obviously go to the dedup-disk storage. The question is, how
should I add the tape setup? Is there a way to add a couple of lines to
the job definition above so that the backup goes to both systems? Should
I create a separate job definition for the tape backup? Some other way I
didn't consider?

Thanks,

Roberto


PS: The storage definitions for the disk and tape destinations:

Storage {
    Name = FileAligned
    Address = bacula2
    SDPort = 9103
    Password = ""
    Device = Aligned-Disk
    Media Type = File1
}

Storage {
    Name = Fita
    Address = bacula2
    SDPort = 9103
    Password = ""
    Device = Ultrium
    Media Type = LTO
}


Hello Marcos,

With Bacula, there are almost always 10+ different ways to accomplish 
things, and/or to even think about them.


For example, you can override the Pool, Level, and Storage in a 
Schedule...


So, with this in mind, you might set your job to run Incs each weekday 
to disk, and then set the Fulls to run to tape on the weekend. (just 
one idea)


Another option is to use Copy jobs. With Copy jobs, you can run your 
Incs and Fulls to disk, then you can run a Copy job to copy your Incs, 
Fulls, or both to tape during normal working hours because Copy jobs 
do not make use of any Clients, so business productivity will not be 
affected on your server(s).


In your case, I would probably go with a Copy job. This way, you have 
your backups on disk for fast restores when needed, and you have the 
same data copied to new jobids onto tape - maybe with longer retention 
periods, for example.


Also have a look at the `SelectionType = PoolUncopiedJobs` feature for 
Copy jobs. This is a nice, handy "shortcut" to make sure that each of 
your jobs in some Pool is copied once, and only once to tape.


In this case, you can have two Copy jobs configured, one looking at 
your Full disk pool and one looking at your Inc disk pool and copying 
jobs that have not been copied.


OR, you can have one copy job running on a schedule where the Pool is 
overridden at two different times of the day to copy from the Full 
disk pool, and then also from the Inc disk pool.


OR... (lol I said 10, so I am working towards that number, and I am 
getting close :) ... You can have your normal backup jobs include a 
`RunScript {RunsWhen = after}` section which triggers an immediate 
copy of the job to tape as soon as it is completed.


So, I would start with a look at Copy jobs and see where that goes. :)

Feel free to ask more questions once you have taken a look at Copy jobs.


Hope this helps,
Bill


Yes, this helps A LOT. I will study the copy job option. It really seems 
perfect for my scenario.


Tks

Roberto


--
-
Marcos Roberto Greiner

   Os otimistas acham que estamos no melhor dos mundos
Os pessimistas tem medo de que isto seja verdade
 James Branch Cabell
  -



___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users


Re: [Bacula-users] Bacula support LTO9?

2024-04-03 Thread Jose Alberto
Thank you for your answers.

On Tue, Apr 2, 2024 at 7:10 PM Bill Arlofski via Bacula-users <
bacula-users@lists.sourceforge.net> wrote:

> On 4/2/24 3:52 PM, Jose Alberto wrote:
> > Hi.
> >
> > I work with Bacula (11 and 13)  with lto8,  all fine.
> >
> > with bacula 13 or 15   work  LTO9 ?
>
> Yes.  ;)
>
> You may want to run some tests using btape to find the right
> `MaximumFileSize` and `MaximumBlockSize` for your tape drive(s),
> but I can assure you (personally working in Quantum's lab testing Bacula
> with their latest Scalar i6000 library and LTO9
> drives), Bacula absolutely works fine with them.
>
> The settings I found that work quite well with LTO9 drives (with 10+
> concurrent backup streams) are:
> 8<
> MaximumFileSize = 32GB
> MaximumBlockSize = 2097152
> 8<
>
> I have also attached a script I wrote to automate the testing of several
> file and block size combinations using btape.
>
> Please have a look and be sure to read the btape documentation to
> understand what is going on before running the script -
> also there are variable settings at the top you will need to edit to fit
> your environment.
>
>
> Hope this helps,
> Bill
>
> --
> Bill Arlofski
> w...@protonmail.com
> ___
> Bacula-users mailing list
> Bacula-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bacula-users
>


-- 
#
#   Sistema Operativo: Debian  #
#Caracas, Venezuela  #
#
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users