Legato Client Installation notes (OBSOLETE)

Restoring Files

• https://cs.uwaterloo.ca/cscf/internal/infrastructure/setups/services/backup/restore.shtml

IST download links

• http://ist.uwaterloo.ca/download/networker/current/index.html

Backup servers

• Update /nsr/res/servers adding backup.cs.uwaterloo.ca

Windows 7

• Updated 27 Feb 2015 Mike Gore

Documentation

• http://ist.uwaterloo.ca/download/networker/current/nw82-Installation-Guide.pdf
  • See Chapter 13 for Install Steps

Installation Summary from installation guide notes

• Download Location: http://ist.uwaterloo.ca/download/networker/current/index.html
  • Download the WIndows client that matches your architecture ( 32 or 64 bit)
    • Example: http://ist.uwaterloo.ca/download/networker/current/nw82_win_x64.sfx.exe
• Right Click on the download file and pick run as administrator
  • You may see a warning from your SEP Antivirus software because the file was downloaded
    • this is not an infection warning - just a waning that it does not know how you got the file.
  • Language setup - > Next
  • Customer Information ( fill in your name and University of Waterloo) -? Next
  • Firewall window -> Pick Configure the Windows firewall -> Next
  • Installation type CLient
  • Pick default install location
  • Finish/Install Program
  • Specifying the list of trusted servers
    • Enter a server name -> backup.cs.uwaterloo.ca -> Add
    • Enter Server Name -> backup-0.cs.uwaterloo.ca -> Add
    • Next -> OK

Networking updates

• Unfortunately the way Legato does name resolution it will fail to resolve the backup server names and the short name of your computer.
• Updating Windows hosts files
  • Start Menu -> Programs -> Assessories -> Right Click on MS DOS Command Prompt -> Run as administrator -> OK
  • cd \Windows\Systems32\drivers\etc\hosts
  • You will need to know the hostname of your machine - for example we will use scspcxyz.cs.uwaterloo.ca below
  • nslookup scspcxyz.cs.uwaterloo.ca - write down the ipaddress - we will use 129.97.168.123
  • notepad hosts
    • Append these two lines
      • 129.97.167.100 backup.cs
      • 129.97.167.100 backup-0.cs
    • Append your host IP address and short hostname without any domain specs.
      • 129.97.168.123 scspcxyz

Windows 7 Legato Configuration

• Make sure you pick the backup drives you really want to backup!
  • Open Start Menu -> Programs -> Networker User
    • Pick only permanent drives like C: - uncheck all other drives not intened for backup

Ubuntu and Debian Users

Ubuntu Release Specific Notes

Installation

• Fully Automatic install that downloads, installs and configures networker
  • wget https://cs.uwaterloo.ca/twiki/pub/CF/LinuxLegatoClientSetup/install-networker
  • chmod 755 install-networker
  • ./install-netwoker

• Manual method
  • apt-get install libxp6
  • Download Debian file from Links: http://ist.uwaterloo.ca/download/networker/current
    • dpkg -i (name of debian package)
  • You will also need to manually install: libstdc5++ - from http://packages.ubuntu.com/trusty/amd64/libstdc++5/download
    • dpkg -i (name of debian package)
  • edit /etc/init.d/networker and append "-s backup.cs.uwaterloo.ca" to lines ending with /usr/sbin/nsrexecd
    • They will look like: "$NSR_ENVEXEC" -u "$NSRRC" -s "$NETWORKERRC" /usr/sbin/nsrexecd -s backup.cs.uwaterloo.ca

DEB Package method

• We are still using the RPM method because they include MAN pages

RPM method using alien to convert to DEB package

• sudo bash
• # download install script
• wget https://cs.uwaterloo.ca/twiki/pub/CF/LinuxLegatoClientSetup/install-networker
  • # or from your browser install-networker
• chmod 755 install-networker
• ./install-networker
  • # you shoud see You should see the task nsrexecd running
  • # 6665 ? Ssl 0:00 /usr/sbin/nsrexecd -s backup.cs.uwaterloo.ca

libstdc++5 on Ubuntu 10.04LTS

• If this package is missing you can get it here:
• http://packages.ubuntu.com/lucid-backports/amd64/libstdc++5/download

Redhat users install notes

• IST download page: http://ist.uwaterloo.ca/download/networker/current/index.html
• Direct links - chose based on your architecture. Use the arch command if unsure:
  • 32bit:
    • wget http://ist.uwaterloo.ca/download/networker/current/nw_linux_i686.tar
    • tar xf nw_linux_i686.tar
  • 64bit:
    • wget http://ist.uwaterloo.ca/download/networker/current/nw_linux_x86_64.tar * tar xf nw_linux_x86_64.tar*
• Install strtup script
  • wget https://cs.uwaterloo.ca/twiki/pub/CF/LinuxLegatoClientSetup/networker-backupcs
  • cp networker /etc/init.d/networker
  • chmod 755 /etc/init.d/networker
• The /nsr gets created when you start the service!
  • service networker start

SUSE 10 users install notes

• zypper install openmotif (you need this)
• Follow the Redhat user install notes
• Note: I think it is safe to ignore the error grep: /etc/syslog.conf: No such file or directory

TCP wrapper settings

If you use TCP wrapper security add the following configuration

/etc/hosts.allow

• ALL: backup.cs.uwaterloo.ca

Firewall issues

• IF you use a firewall add backup.cs and backup.math to your rule set

Ubuntu Shorewall rule (allow TCP7937-9936 from backup.cs)

MAC Ports

• OSX, TCP ports 7937-7939 and 10001-10100 should be sufficient.

Redhat Firewall

• Update firewall by editing /etc/sysconfig/iptables place these lines before COMMIT

   
        -A RH-Firewall-1-INPUT -m state --state NEW,ESTABLISHED,RELATED -p tcp -s 129.97.82.10/32 -j ACCEPT 
        -A RH-Firewall-1-INPUT -m state --state NEW,ESTABLISHED,RELATED -p tcp -s 129.97.152.100/32 -j ACCEPT 
   

• Using GUI Tool For the firewall, use the GUI tool * "system-configure-securitylevel" [desktop--system--security level](run it from the commandline if you must).
  • • It writes the file /etc/sysconfig/system-config-securitylevel, which you can modify under the covers if necessary.
    • The GUI syntax is a comma-delimited list of port:protocol pairs, eg 22:tcp for SSH
    • The syntax in the file is one rule per line, of the form "--port=nnn:prot", eg "--port=22:tcp" opens SSH.
• Note that for the GUI you will have to know the system's root password, or run the command from the commandline via sudo.

Mac OS X client installation

• download nw_macosx.pkg on your desktop.
• Rightclick nw_macosx.pkg -> Open
  • Use all defaults
• Open Terminal
  • Finder -> Terminal
• Become root
  • sudo bash
• echo backup.cs.uwaterloo.ca >/nsr/res/servers
• echo backup-0.cs.uwaterloo.ca >>/nsr/res/servers
• /bin/launchctl stop com.emc.NetWorker
• Update Firewall to permit access
  • /usr/bin/nsrports -S 7937-7941
• /bin/launchctl start com.emc.NetWorker

Excluding files from backup

See also Legato Directive File Examples

• Create a file called .nsr in the root (ie /.nsr ) of your file system
• See man 5 nsr

# For details on syntax see: man 5 nsr 
# =============================================================
# Skip Kernel file systems - /proc,sys    ... etc
# =============================================================
# SYS
# Skip kernel /sys file system
<< ./sys >>
   skip: .?* *
# DEV
# Skip kernel /dev/pts file system
<< ./dev/pts >>
   skip: .?* *
# Skip kernel /dev/shm file system
<< ./dev/shm >>
   skip: .?* *
# PROC
# Skip kernel /proc file system
<< ./proc  >>
   skip: .?* *
# Skip /proc/bus/usb file system
<< ./proc/bus/usb >>
   skip: .?* *
# Skip /proc/sys/fs/binfmt_misc file system
<< ./proc/sys/fs/binfmt_misc >>
   skip: .?* *
# VAR
# Skip /var/lib/nfs/rpc_pipefs file system
<< ./var/lib/nfs/rpc_pipefs >>
   skip: .?* *

Startup Scripts

• networker-backupcs: Networker Startup Script for Redhad/Suse
• install-networker: Install networker script for ubuntu and debian - includes service startup scrip