X-Git-Url: https://git.hcoop.net/hcoop/scripts.git/blobdiff_plain/6d52e2691d5e9bae781131847ac175ee9a3f4630..3b16fa867a36f38b2032b8f49c8725f6ac711418:/hcoop-backup diff --git a/hcoop-backup b/hcoop-backup index 916bf1a..934c257 100755 --- a/hcoop-backup +++ b/hcoop-backup @@ -1,22 +1,44 @@ #!/bin/bash -e # -# run this script as root, on deleuze, in a directory that WILL NOT be -# part of the backup (/tmp is a good choice). +# it is dangerous to remove the "-e" above; please don't do that. # -# FIXME: -# postgres dumps -# mysql dumps +# +# run this script as root, on deleuze +# + +exec >& /var/log/backup-to-s3-log -#KEYFILE=$1 +PATH=$PATH:/bin:/usr/bin:/sbin:/usr/sbin +#COMPRESS_EXT=.bz2 +#COMPRESS_PROG=bzip2 +COMPRESS_EXT=.gz +COMPRESS_PROG=gzip KEYFILE=/etc/backup-encryption-key +BACKUPTMP=/var/backups/hcoop-backup-testing +CURDATE=$(date +%Y.%m.%d) + +MOVE_OVER=$(dirname $0)/s3-move + +IFS=$'\n' + +#prune_old_backups + +mkdir -p $BACKUPTMP +cd $BACKUPTMP + +groups +echo 'I am in:' +pwd +echo echo building package lists... -dpkg -W -f='${Package}\n' > packages -find / /usr/ /usr/local/ /var/ -xdev | sort | uniq > allfiles -dpkg-query -W -f='${Package}\n' | xargs dpkg -L | sort | uniq > debfiles -dpkg-query -W -f='${Conffiles}\n' | grep / | sort | uniq > conffiles +dpkg-query -W -f='${Package}\n' > packages +(cd /; find / /usr/ /usr/local/ /var/ -xdev) | sort | uniq > allfiles +dpkg-query -W -f='${Package}\n' | xargs dpkg -L | sort | uniq > debfiles +dpkg-query -W -f='${Conffiles}\n' | grep / | cut -b2- | \ + sed 's_ .*__' | sort | uniq > conffiles diff allfiles debfiles | grep '^<' | cut -b 3- | \ grep -v ^/var/cache | \ @@ -24,6 +46,7 @@ diff allfiles debfiles | grep '^<' | cut -b 3- | \ grep -v ^/var/lib/dpkg | \ grep -v ^/var/backups | \ grep -v ^/var/lib/changetrack | \ + grep -v ^/var/local/lib/spamd | \ grep -v ^/var/run | \ grep -v ^/var/lock | \ grep -v ^/var/lib/ucf | \ @@ -34,7 +57,23 @@ diff allfiles debfiles | grep '^<' | cut -b 3- | \ grep -v '^/$' | \ grep -v '^/usr/$' | \ grep -v ^/usr/src | \ - cat > backupfiles + grep -v '^/usr/.*\.pyc' | \ + grep -v '^/usr/.*\.elc' | \ + grep -v '^/usr/bin/perldoc\.stub$' | \ + grep -v '^/usr/bin/.*\.notslocate$' | \ + grep -v '^/usr/lib/courier/.*\.rand$' | \ + grep -v '^/usr/lib/gconv/gconv-modules\.cache$' | \ + grep -v '^/usr/lib/graphviz/config$' | \ + grep -v '^/usr/lib/locale/locale-archive$' | \ + grep -v '^/usr/share/info/dir$' | \ + grep -v '^/usr/share/info/dir\.old$' | \ + grep -v '^/usr/share/emacs21/site-lisp/' | \ + grep -v '^/usr/share/emacs22/site-lisp/' | \ + grep -v '^/usr/share/snmp/mibs/\.index$' | \ + grep -v '^/usr/share/vim/addons/doc/tags$' \ + > backupfiles + +cat conffiles >> backupfiles cat backupfiles | \ grep -v ^/home | \ @@ -43,21 +82,16 @@ cat backupfiles | \ grep -v ^/var/log | \ grep -v ^/usr/lib/python2.4/ | \ grep -v ^/var/lib/python-support | \ + grep -v ^/usr/share/jed/lib | \ grep -v ^/usr/share/man | \ + grep -v ^/usr/share/perl5/IkiWiki/Plugin | \ grep -v ^/media | \ grep -v ^/vmlinuz | \ grep -v ^/vmlinuz.old | \ - grep -v '^/sbin/[a-z\-]*.modutils$' | \ - cat > annoyingfiles- - -for A in `cat annoyingfiles-` -do \ - test -L "$A" || echo "$A" -done > annoyingfiles - -cat annoyingfiles | \ + grep -v '^/sbin/[a-z\-]*\.modutils$' | \ grep -v ^/opt/dell/srvadmin/ | \ grep -v ^/boot/ | \ + grep -v ^/dev/ | \ grep -v ^/etc/ | \ grep -v ^/root/ | \ grep -v ^/var/ | \ @@ -66,18 +100,70 @@ cat annoyingfiles | \ grep -v ^/var/lib/mysql/ | \ grep -v ^/var/lib/postgres/ | \ grep -v ^/var/lib/postgresql/ | \ - cat > complain - -mail -a 'From: Adam Megacz ' \ - -s "annoying files found on deleuze (please do something about them)" admins@hcoop.net \ - < complain + xargs -I{} -d\\n -- bash -c "test -L '{}' || echo '{}'" > complain -tar cvlpjf - -C / -T backupfiles | bzip2 | ccrypt -k $KEYFILE -e > hcoop.backup.tar.bz2.aescrypt -du -chs hcoop.backup.tar.bz2.aescrypt +F=hcoop.backup.tar$COMPRESS_EXT.aescrypt +tar clpf - --ignore-failed-read --no-recursion -C / -T backupfiles | \ + $COMPRESS_PROG | \ + ccrypt -k $KEYFILE -e | \ + $MOVE_OVER $CURDATE $F -vos listvol deleuze | tail -n +2 | head -n -3 | cut -b1-34 | grep -v "\.backup .*$" | grep -v "\.readonly .*$" > volumes -for A in `cat volumes` -do \ - echo "dumping afs volume $A..." - time vos dump -id $A -localauth -clone | bzip2 | ccrypt -k $KEYFILE -e > $A.dump.bz2.aescrypt +# Acquire lock before messing with spamd +COUNT=0 +LOCK=/var/local/lib/spamd/.lock +while test -f $LOCK; do + sleep 2m + COUNT=$(expr $COUNT + 1) + if test $COUNT -eq 10; then + # Enough waiting. Kill the process. + P=$(cat $LOCK) || : + test -n "$P" && kill $P || : + rm -f $LOCK + break + fi done +touch $LOCK + +F=common.spamd.tar$COMPRESS_EXT.aescrypt +tar clpf - --ignore-failed-read -C / /var/local/lib/spamd | \ + $COMPRESS_PROG | \ + ccrypt -k $KEYFILE -e > $F +rm -f $LOCK +< $F $MOVE_OVER $CURDATE $F +rm -f $F + +vos listvol deleuze | \ + tail -n +2 | \ + head -n -3 | \ + cut -b1-34 | \ + grep -v "\.backup .*$" | \ + grep -v "\.readonly .*$" | \ + sed 's_^ .*__' | \ + sed 's_ .*$__' | \ + grep '[A-Za-z]' \ + > volumes + +cat volumes | \ + grep -v not-backed-up | \ + xargs -I{} -d\\n -- \ + bash -c \ + "F={}.dump$COMPRESS_EXT.aescrypt ; + vos dump -id {} -localauth -clone | + $COMPRESS_PROG | ccrypt -k $KEYFILE -e | + $MOVE_OVER $CURDATE \$F" + +echo backing up databases +F=databases.tar$COMPRESS_EXT.aescrypt +tar -C /var/backups/databases/ -cf - . | \ + $COMPRESS_PROG | \ + ccrypt -k $KEYFILE -e | \ + $MOVE_OVER $CURDATE $F + +grep '[a-z/]' complain && \ + mail -a 'From: The Backup Program ' \ + -s "automated message: annoying files found on deleuze (please do something about them)" admins@hcoop.net \ + < complain \ + || true + +echo done +