Avamar:MCS 在遺失 mcserver.xml 檔案後無法啟動
Summary: 在復原過程中遺失mcserver.xml檔案後,管理主控台伺服器 (MCS) 確實會啟動。
Symptoms
復原後,管理主控台伺服器 (MCS) 正在修復。
作為該過程的標準部分, /usr/local/avamar/var/mc/server_data 目錄已移除。
由於 avtar 使用預設的 SSL 加密,MCS 還原失敗,移除 mcserver.xml 檔案 (導致 MCS 無法啟動)。
gsan 記錄中有復原的證據:
mapall --noerror 'grep -hi "rolled back" /data01/cur/gsan.log*' | sort | tail -1
2019/05/17-11:41:14.65109 {P0.0} [gsan] <1287> gsan::run gsan rolled back to cp.xxxxxxxxxxxx
dpnctl.log的輸出:
less dpnctl.log
2019/05/17-11:47:48 --restore will modify your Administrator Server database and preferences.
2019/05/17-11:47:48 Do you want to proceed with the restore Y/N? [Y]: sed: can't read /usr/local/avamar/var/mc/
server_data/prefs/mcserver.xml: No such file or directory
2019/05/17-11:47:48 sed: can't read /usr/local/avamar/var/mc/server_data/prefs/mcserver.xml: No such file or directory
2019/05/17-11:47:48 Decrypting all registered passwords...
2019/05/17-11:47:48 see MCCipher log for details: /usr/local/avamar/var/mc/server_log/mccipher.log.0
2019/05/17-11:47:48 Database server stopped.
2019/05/17-11:47:48 removing data dir /usr/local/avamar/var/mc/server_data
2019/05/17-11:47:48 INFO: /usr/local/avamar/var/mc already exists
2019/05/17-11:47:48 INFO: creating /usr/local/avamar/var/mc/server_data/postgres/data with permissions 0755
.
2019/05/17-11:47:48 Please wait....
2019/05/17-11:47:48 avtar Error <18838>: SSL certificate/key not found or invalid key. '/usr/local/avamar/etc/x.x.x.x/cert.pem' '/usr/local/avamar/etc/x.x.x.x/key.pem'
.
.
2019/05/17-11:47:48 rm -f /tmp/dpnctl-mcs-restore-status-6696 /tmp/dpnctl-mcs-restore-output-6696
2019/05/17-11:47:48 dpnctl: ERROR: MCS restore did not succeed, so not restarting MCS
使用 avtar 手動列出MC_BACKUPS會導致錯誤:
avtar --backups --path=/MC_BACKUPS |more
avtar Info <5552>: Connecting to Avamar Server (xxxx)
avtar Info <5554>: Connecting to one node in each datacenter
avtar Error <18838>: SSL certificate/key not found or invalid key. '/usr/local/avamar/etc/x.x.x.x/cert.pem' '/usr/local/avamar/etc/x.x.x.x/key.pem'
avtar Info <5557>: No connections available
avtar FATAL <8604>: Fatal server connection problem, aborting initialization. Verify correct server address and login credentials.
avtar FATAL <5308>: Failed to initiate session with server
avtar Info <6149>: Error summary: 8 errors: 5308, 8604, 18838(6)
avtar Info <5314>: Command failed (8 errors, exit code 10008: cannot establish connection with server (possible network or DNS failure))Cause
使用預設 SSL 加密還原 MCS 失敗,因為 SSL 憑證和金鑰不相符。
Resolution
因應措施:
1.以系統管理員身分登入 Avamar Utility Node。
2.前往 /home/admin 目錄:
cd /home/admin
3.建立新的暫存目錄:
mkdir mc_restore
4.變更為新建立的目錄:
cd /home/admin/mc_restore
5.列出新增「 MC_BACKUPS」--encrypt=proprietary“標誌,它使用明文加密。(所以完全沒有加密):
avtar --archives --path=/MC_BACKUPS --count=1 --encrypt=proprietary
avtar Info <19849>: Selecting 1 backups
avtar Info <7377>: Backups for /MC_BACKUPS as of 2019-05-23 11:39:43 BST
Date Time Seq Label Size Plugin Working directory Targets
---------- -------- ----- ----------------- ---------- -------- --------------------- -------------------
2019-05-15 08:45:32 10196 526254K Linux /usr/local/avamar var/mc/server_data
avtar Info <5314>: Command completed (exit code 0: success)
6.還原 /usr/local/avamar/var/mc/server_data 根據還原程序中步驟 3 的 after 使用目錄 Avamar:MCS 排清失敗,或 MCS 因 mcserver.xml 檔案問題而無法啟動:
例如:
avtar -x --path=/MC_BACKUPS --labelnum=10196 --target=.
avtar Info <5259>: Restoring backup to directory "."
avtar Info <5262>: Restore completed
avtar Info <7925>: Restored 510.0 MB from selection(s) with 513.9 MB in 35 files, 17 directories
avtar Info <6090>: Restored 510.0 MB in 1.06 minutes: 28.26 GB/hour (1,986 files/hour)
目錄會還原至 /home/admin/mc_restore/var/mc/server_data/。
7.複製內容 /home/admin/mc_restore/var/mc/server_data/ 到空 /usr/local/avamar/var/mc/server_data 目錄。
8.使用還原的標籤編號還原 MCS:
mcserver.sh --restore --labelnum=10196
9.啟動 MCS:
mcserver.sh --start
範例輸出:
Starting Administrator Server at: Thu May 23 12:09:15 BST 2019
Starting Administrator Server...
SLF4J: Failed to load class "org.slf4j.impl.StaticLoggerBinder".
SLF4J: Defaulting to no-operation (NOP) logger implementation
SLF4J: See http://www.slf4j.org/codes.html#StaticLoggerBinder for further details.
Administrator Server started.
10.啟動後,請執行 MCS 排清 (亦即備份):
mcserver.sh --flush
=== BEGIN === check.mcs (preflush)
check.mcs passed
=== PASS === check.mcs PASSED OVERALL (preflush)
Flushing Administrator Server...
Administrator Server flushed.
11.根據 Avamar 的解決方法區段重新產生 SSL 憑證:Avtar 無法連線至 Avamar 的 GSAN 服務,「致命的伺服器連線問題,中止初始化」:
12.列出MC_BACKUPS以驗證沒有 SSL 憑證錯誤:
avtar --archives --path=/MC_BACKUPS --count=10
範例輸出:
avtar Info <19849>: Selecting 1 backups
avtar Info <7377>: Backups for /MC_BACKUPS as of 2019-05-23 11:39:43 BST
Date Time Seq Label Size Plugin Working directory Targets
---------- -------- ----- ----------------- ---------- -------- --------------------- -------------------
2019-05-15 08:00:05 419 73K Linux /usr/local/avamar var/em/server_data
2019-05-14 08:00:04 418 73K Linux /usr/local/avamar var/em/server_data
2019-05-13 08:00:04 417 73K Linux /usr/local/avamar var/em/server_data
avtar Info <5314>: Command completed (exit code 0: success)Additional Information
在列出MC_BACKUPS時暫時克服 SSL 錯誤的另一個選項是使用 --encrypt=tls 旗:
avtar --backups --path=/MC_BACKUPS --encrypt=tls | head -30