# The script is halfway Norwegian and halfway English. Newer modifications are
# in English, we should probably stick to that.
-SCRIPTPATH="$( cd "$(dirname "$0")" ; pwd -P )" # Absolute directory the script lives in
-confdir=$SCRIPTPATH/conf/ # Directory configuration files
-[ -r $confdir/env ] && . $confdir/env
-
-# Default configuration; used unless $confdir/env has set something different.
-storagedir=${storagedir:-/backup} # Where we keep backups
-exclude=${exclude:-$confdir/exclude} # List of exclude patterns
-maxnumfull=${maxnumfull:-3} # Number of full backups
-daysbetweenfull=${daysbetweenfull:-30} # Days between full backups
-
-# Days between full backups for machines with fixed full-backup date
-# (in case the fixed day gets missed).
-daysbetweenfullforfixed=${daysbetweenfullforfixed:-32}
-
-# End of configuration.
-
computer=$1 # The computer to backup.
+SCRIPTPATH="$( cd "$(dirname "$0")" ; pwd -P )" # Absolute directory the script lives in
+confdir=$SCRIPTPATH/conf # Directory for configuration files
+conffile=$confdir/backup.config
LOCKFILE=$SCRIPTPATH/backuprun.lockfile.$computer
DAY_OF_MONTH=`date "+%d" | sed s/^0//` # from 1 to 31
DATE=`date "+%Y%m%d%H%M"` # format: touch
DATEs=`date "+%Y-%m-%d %H:%M"` # format: tar
+TOP_PID=$$
if [ -z "$computer" ]; then
echo "Usage: $0 COMPUTER"
infomsg() {
echo `date`": $computer: $@" >&2
}
+findconf() { # getconf is already taken
+ key=$1
+ computer=$2
+ filesystem=$( echo $3 | tr / . )
+
+ if [ "$computer" ] && [ "$filesystem" ] && git config -f $conffile $computer$filesystem.$key > /dev/null; then
+ git config -f $conffile $computer$filesystem.$key
+ elif [ "$computer" ] && git config -f $conffile $computer.$key > /dev/null; then
+ git config -f $conffile $computer.$key
+ elif git config -f $conffile defaults.$key > /dev/null; then
+ git config -f $conffile defaults.$key
+ else
+ warnmsg "No configuration found for $key in $conffile, aborting."
+ kill -TERM $TOP_PID
+ fi
+}
# Trap C-c and kill
trap die SIGINT SIGTERM
-# Don't start if we're already running
+# Don't start if we're already running. Don't use diemsg, as that removes the lock file!
if [ -e $LOCKFILE ]; then
- diemsg "$LOCKFILE exists for pid `cat $LOCKFILE`."
+ warnmsg "$LOCKFILE exists for pid `cat $LOCKFILE`."
+ exit 1
fi;
touch $LOCKFILE
echo $$ > $LOCKFILE
localsnar="${storagedir}/${computer}/${sfilesystem}/.incremental.snar"
remotesnar="$remotehome/.backup/${sfilesystem}.snar"
- if [ "$backuplevel" = "daglig" ]; then
+ if [ "$backuplevel" = "daily" ]; then
# If incremental backup, we need to copy the incremental status to $computer.
# If it does not exist, whine a bit and then run date-based instead.
if [ -s "$localsnar" ]; then
- if ! scp $localsnar $username@$computer:$remotesnar; then
+ if ! scp $localsnar $username@$computer:$remotesnar >&2; then
diemsg "Could not copy .incremental.snar to $computer"
fi
lastcmd="--listed-incremental=$remotesnar --no-check-device"
lastcmd="--listed-incremental=$remotesnar"
fi
+ # The file is usually stored to disk with a simple cat > $TARFILE,
+ # but in some cases, like backing up to a remote and untrusted
+ # file system, it could be useful to replace it with e.g.
+ # a GPG command line.
+ storageprogram=$( findconf storageprogram $computer $sfilesystem )
+
# We try to run tar on the remote computer
# c create archive
# C change to directory first
# Pipe the stuff over ssh to ourselves, run pee to cat the contents to a
# file and build a file list, respectivly.
TARFILE=$DATE.tmp
- TARCMD="ssh $username@$computer \"nice -n 19 ionice -c3 tar --one-file-system --use-compress-program $compressor -cf - -C $filesystem . $lastcmd \
- --exclude-from=$remotehome/.backup/exclude\" | pee \"cat > $TARFILE\" \"tar tzvf -\""
+ TARCMD="ssh -n $username@$computer \"$nice tar --one-file-system --use-compress-program $compressor -cf - -C $filesystem . $lastcmd \
+ --exclude-from=$remotehome/.backup/exclude\" | pee \"$storageprogram > $TARFILE\" \"tar tzvf -\""
infomsg "Running $TARCMD"
eval $TARCMD > $DATE.idx
# File is >0 in size and neither cat or tar tzvf failed; we assume it worked.
if [ "$remotesnar" ]; then
- if ! scp $username@$computer:$remotesnar $localsnar.tmp; then
+ if ! scp $username@$computer:$remotesnar $localsnar.tmp >&2; then
diemsg "Could not copy .incremental.snar from $computer"
fi
fi
chmod 644 *idx 2>/dev/null #everyone can read
# Let the remote computer know that we ran a successful backup (for nagios)
- ssh $username@$computer touch $filesystem/.lastbackup
+ ssh -n $username@$computer touch $filesystem/.lastbackup
else
# Something wrong happened.
rm $TARFILE
# - No touching of .lastbackup for Nagios.
# - Failed tar operations may go undetected, since we only see the error code
# the last process in the pipe chain, which is gpg.
+# - No storageprogram support (see above), because the file is typically already
+# encrypted.
nonprivbackup()
{
infomsg "$computer:$filesystem $backuplevel non-privileged backup"
- if [ "$backuplevel" = "daglig" ]; then
+ if [ "$backuplevel" = "daily" ]; then
lastd=`cat ../.date`
lastcmd="'$lastd'"
else
fi
TARFILE=$DATE.tmp
- TARCMD="ssh $username@$computer \"sudo /usr/local/sbin/output-encrypted-backup $filesystem $lastcmd\""
+ TARCMD="ssh -n $username@$computer \"sudo /usr/local/sbin/output-encrypted-backup $filesystem $lastcmd\""
infomsg "Running $TARCMD"
eval $TARCMD > $TARFILE
fi
}
+# Get basic configuration.
+storagedir=$( findconf storagedir $computer )
+username=$( findconf username $computer )
+exclude=$( findconf excludefile $computer )
+
# Check that the target filesystem is mounted (actually check that it's not
# the root filesystem)
if [ ! -d "$storagedir/$computer" ]; then
diemsg "Target filesystem ($storagedir/$computer) was mounted on /."
fi
-# Find the user to do the backup as.
-if [ -f $confdir/username.$computer ] ; then
- username=`cat $confdir/username.$computer`
-else
- username=root
-fi
-
infomsg "Backing up $computer"
# Try to SSH to the computer without entering a password.
fi
# Find the home directory of the backup user
-remotehome=`ssh $username@$computer "echo ~"`
+remotehome=`ssh -n $username@$computer "echo ~"`
if [ -z "$remotehome" ]; then
diemsg "Could not expand ~ for user $username"
fi
compressor=gzip
fi
+# Check if nice and ionice are available
+if ssh -n $username@$computer "nice -n 19 ionice -c3 /bin/true 2>/dev/null"; then
+ nice="nice -n 19 ionice -c3"
+else
+ infomsg "nice and/or ionice missing; will run at normal priority."
+ nice=""
+fi
+
# Check dump bit in fstab
filesystems=`ssh -n $username@$computer "cat /etc/fstab" \
| grep -v nfs \
| awk '{ if ( $(NF-1) != "0" ) print $2}' `
# Clean up our dir at this client
-if ! ssh $username@$computer "rm -r $remotehome/.backup ; mkdir -m 700 $remotehome/.backup"; then
+if ! ssh -n $username@$computer "rm -r $remotehome/.backup ; mkdir -m 700 $remotehome/.backup"; then
diemsg "Could not create backup staging area at $computer:$remotehome/.backup"
fi
# Try to copy $exclude to $computer
-if ! scp $exclude $username@$computer:$remotehome/.backup/exclude > /dev/null; then
+if ! scp $exclude $username@$computer:$remotehome/.backup/exclude >&2; then
diemsg "Could not copy exclude.txt to $computer"
fi
fi
# Try to run preexec if it exists
-if ! ssh $username@$computer "[ ! -f $remotehome/.backup/preexec ] || /bin/bash -x $remotehome/.backup/preexec" >&2; then
+if ! ssh -n $username@$computer "[ ! -f $remotehome/.backup/preexec ] || /bin/bash -x $remotehome/.backup/preexec" >&2; then
diemsg "Could not run $computer:$remotehome/.backup/preexec"
fi
# Prepare storage area
mkdir -m 755 -p $storagedir/$computer/$sfilesystem/full 2>/dev/null
- mkdir -m 755 -p $storagedir/$computer/$sfilesystem/daglig 2>/dev/null
+ mkdir -m 755 -p $storagedir/$computer/$sfilesystem/daily 2>/dev/null
# Default backuplevel
- backuplevel=daglig
+ backuplevel=daily
if [ ! -s $storagedir/$computer/$sfilesystem/.date ]; then
# Take the first full backup of this filesystem on this computer
fi
# Check if we want a full backup
- if [ -f $confdir/fastfullbackupdag.$computer.$sfilesystem ]; then
- fullbackup_min_for_this_machine=$daysbetweenfullforfixed
- if [ "$DAY_OF_MONTH" = "`cat $confdir/fastfullbackupdag.$computer.$sfilesystem`" ]; then
- backuplevel=full
- fi
- elif [ -f $confdir/fastfullbackupdag.$computer ]; then
- fullbackup_min_for_this_machine=$daysbetweenfullforfixed
- if [ "$DAY_OF_MONTH" = "`cat $confdir/fastfullbackupdag.$computer`" ]; then
+ fixedfullbackupday=$( findconf fixedfullbackupday $computer $filesystem )
+ if [ "$fixedfullbackupday" ]; then
+ fullbackup_min_for_this_machine=$( findconf daysbetweenfullforfixed $computer $filesystem )
+ if [ "$DAY_OF_MONTH" = "$fixedfullbackupday" ]; then
backuplevel=full
fi
else
- fullbackup_min_for_this_machine=$daysbetweenfull
+ fullbackup_min_for_this_machine=$( findconf daysbetweenfull $computer $filesystem )
fi
if [ -z "`find $storagedir/$computer/$sfilesystem/full/ -name \*tgz\* -mtime -$fullbackup_min_for_this_machine`" ]; then
cd $storagedir/$computer/$sfilesystem/$backuplevel || diemsg "$storagedir/$computer/$sfilesystem/$backuplevel does not exist"
# Perform the actual backup
- if [ "$username" = "root" ]; then
- backup
- else
+ if [ "$( findconf nonpriv $computer )" ]; then
nonprivbackup
- fi
-
- # Check if this box has a custom number of full backups
- if [ -f $confdir/maksfulle.$computer.$sfilesystem ]; then
- mf=$((`cat $confdir/maksfulle.$computer`+1))
- elif [ -f $confdir/maksfulle.$computer ] ; then
- mf=$((`cat $confdir/maksfulle.$computer`+1))
else
- mf=$(($maxnumfull+1))
+ backup
fi
# Delete old full backups
+ mf=$( findconf maxnumfull $computer $filesystem )
+ mf=$(( mf + 1 ))
for full in `ls -1t $storagedir/$computer/$sfilesystem/full/*tgz* | tail -n +$mf`; do
prefix=`echo $full | sed "s/\.[^.]*$//"`
infomsg "$computer:$filesystem Deleting full backup $prefix"
# Delete incremental backups older than the oldest full backup
oldf=`ls -t1 $storagedir/$computer/$sfilesystem/full/*tgz* | tail -1`
find \
- $storagedir/$computer/$sfilesystem/daglig \
+ $storagedir/$computer/$sfilesystem/daily \
-type f \
\! -newer $oldf \
-printf "`date`: $computer: Deleting old incremental backup: %p\n" \
done
# Try to run postexec if it exist
-if ! ssh $username@$computer "[ ! -f $remotehome/.backup/postexec ] || /bin/bash -x $remotehome/.backup/postexec" >&2; then
+if ! ssh -n $username@$computer "[ ! -f $remotehome/.backup/postexec ] || /bin/bash -x $remotehome/.backup/postexec" >&2; then
diemsg "Could not run $computer:$remotehome/.backup/postexec"
fi