On Wednesday 13 September 2006 20:58, Deric Abel wrote: > In terms of disaster recovery, if I lost my bacula server along with the > catalog (or the catalog is backed up but encrypted on a tape) can I > still restore from an encrypted tape? From your reply I know that I need > bacula installed to read the encrypted data, but (other then the keys) > what else do I need to recover the encrypted data from the tape?
This is off the top of my head, so it needs to be checked, but you need: 1. A bootstrap file to recover your catalog (or a valid catalog possibly on another machine. 2. A running Director, Storage daemon, and File daemon with their appropriate conf files. 2. The keys. > > I remember reading some where in the docs that if the job is no longer > in the catalog then I will need to use bscan to determine what's on the > tape and to restore from it (which is why I referenced btape, ect, in my > last E-mail). bscan should be a last resort. You should have an ASCII copy of your database on another machine, or at a minimum a bootstrap file of the catalog backup so that it can be quickly recovered. > Can I still do this with encrypted tapes or have I misunderstood the process? Yes, bscan works with encrypted Volumes as of 1.39.22 thanks to Eric. Regards, Kern > > Thanks, > > Deric > > On Wed, 2006-09-13 at 18:27 +0200, Kern Sibbald wrote: > > On Thursday 07 September 2006 20:30, Deric Abel wrote: > > > Hello, > > > > > > I am about to implement data encryption on my backup tapes using the > > > Bacula 1.39.18, and I just had one question dealing with restoring that > > > encrypted data. > > > > > > If I were to lose my backup server (but not losing the encryption keys) > > > because of some disaster, would I have to have all of bacula > > > installed/setup completely or will one of the command line progames > > > (i.e. btape) work to pull the encrypted data off of the tapes? > > > > None of the command line tools support encryption. In addition, I recently > > learned that they do not support access control lists either. > > > > The only reason that most of the command line tools are there is because 3 or > > 4 years ago, most people wouldn't accept a program very easily that writes > > the backup data in its own "non-Unix" format -- so I wrote those tools sort > > of like a security blinket, and I really would like to do away with bextract > > or rewrite it to use nothing but core routines. > -- > ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
