NVP vProxy:VM 映像還原失敗,並顯示「無法從輸入串流讀取 JSON 編碼: [5034] 使用者權限不足」
摘要: 使用 NetWorker VMware Protection (NVP) vProxy 裝置執行 VM 映像還原失敗。傳回的失敗訊息為「無法從輸入串流讀取 JSON 編碼: [5034] 使用者沒有足夠的權限。」只有在還原較舊的存儲集時,才會發生這種情況。執行最近儲存集的修復時 (例如,從同一天開始),修復會完成,不會發生問題。
症狀
還原較舊的 VM 儲存集時,恢復會立即失敗,並且 VM 復原工作階段記錄會傳回下列內容:
159373:nsrvproxy_recover: vProxy Log: YYYY-MM-DDTHH:MM:SSZ ERROR: [@(#) Build number: ###] Failed to recover to a new VM. Failed to load version 1 backup descriptor from file 'nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/BackupDescriptor.json'. Failed to read JSON encoding from input stream: [5034] the user has insufficient privilege
152793:nsrvproxy_recover: vProxy Log Ends =================================================
153335:nsrvproxy_recover: Virtual machine recovery failed: vProxy recovery failed with error message: Session "86981eef-599d-44cd-9e78-1b55e6e5e03f" failed. Error: Failed to load version 1 backup descriptor from file 'nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/BackupDescriptor.json'. Failed to read JSON encoding from input stream: [5034] the user has insufficient privilege
使用較新的儲存集 (例如,當天或前一天的備份) 還原同一個虛擬機器時,不會發生問題。
原因
Data Domain 設定了以「期限範圍」為基礎的資料移動原則,可在使用中層和雲端層之間移動資料:
從 Data Domain 上的 SSH 工作階段中,我們可以看到 NetWorker 伺服器的 mtree 具有使用期限範圍原則的雲端層目標:
sysadmin@ddct# data-movement policy show
Mtree Target(Tier/Unit Name) Policy Value
------------------------------------- ---------------------- ------------- ----------
...
/data/col1/nsr Cloud/test01 age-range 14-60 day
------------------------------------- ---------------------- ------------- ---------
復原工作階段輸出會列出 mtree 路徑 (不包括 /data/col1):
/MTREE_NAME/DEVICE_PATH/##/##/NW_LONG_SSID/FILE_NAME
使用下列 Data Domain 命令,我們可以判斷此檔案的位置是在使用中階層或雲端層中:
filesys report generate file-location path /data/col1/MTREE_NAME/DEVICE_PATH/##/##/NW_LONG_SSID/FILE_NAME
範例:
filesys report generate file-location path /data/col1/MTREE_NAME/DEVICE_PATH/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56
在此範例中,檔案不在 使用中 階層中。它已根據 Data Domain「年齡範圍」資料移動原則移至雲端單元儲存:
sysadmin@ddct# filesys report generate file-location path /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56 -------------------------------- ---------------------- ------------- ----------------- File Name Location(Unit Name) Size Placement Time -------------------------------- ---------------------- ------------- ------------------- /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-config-file-0.cfg test01 3.79 KiB Sun Oct 20 20:51:37 2024 /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-config-file-1.cfg test01 264.49 KiB Sun Oct 20 20:51:37 2024 /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-disk-key-2000-used-blocks.json test01 13.98 KiB Sun Oct 20 20:51:37 2024 /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-disk-key-2000-flat.vmdk test01 100.00 GiB Sun Oct 20 20:52:56 2024 /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-disk-key-2000.vmdk test01 345.00 B Sun Oct 20 20:51:37 2024 /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-disk-key-2000-metadata.json test01 322.00 B Sun Oct 20 20:51:37 2024 /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/BackupVmSessions.json test01 5.34 KiB Sun Oct 20 20:51:37 2024 /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/BackupDescriptor.json test01 2.29 KiB Sun Oct 20 20:51:37 2024 -----------------------------------------------------------------
當資料移動原則設定為期限範圍時,NetWorker 不知道儲存集正在 Data Domain 中從使用中層移到雲端層。vProxy 儲存集必須位於 Data Domain 的作用層上,才能復原。在此範例中,NetWorker 認為複本位於作用層中,並嘗試還原 VM,但無法從雲端層存取儲存集。
解析度
下列步驟必須從 Data Domain sysadmin SSH 工作階段執行。
- 請確定雲端單元儲存裝置 為使用中。如果雲端單元儲存裝置顯示連線中斷,則必須聯絡 Data Domain 支援。
cloud unit list
範例:
sysadmin@ddct# cloud unit list Name Profile Status Bucket Reason ------ ------------- ------ ------------------------------------ ------------------------------- test01 ecs_testdrive Active testbucketcork Cloud unit connected and ready.
- 如果雲端單元儲存裝置沒有問題,而儲存集顯示它不在作用層中,請使用下列 DD 命令將儲存集檔案回作用層:
data-movement recall path /data/col1/MTREE_NAME/DEVICE_PATH/##/##/LONG_SSID/FILE_NAME
範例:
sysadmin@ddct# data-movement recall path /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-config-file-0.cfg
Recall initiated for "/data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-config-file-0.cfg". Run the "data-movement status" command to monitor its progress.
sysadmin@ddct# data-movement recall path /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-config-file-1.cfg
Recall initiated for "/data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-config-file-1.cfg". Run the "data-movement status" command to monitor its progress.
sysadmin@ddct# data-movement recall path /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-disk-key-2000-used-blocks.json
Recall initiated for "/data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-disk-key-2000-used-blocks.json". Run the "data-movement status" command to monitor its progress.
sysadmin@ddct# data-movement recall path /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-disk-key-2000-flat.vmdk
Recall initiated for "/data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-disk-key-2000-flat.vmdk". Run the "data-movement status" command to monitor its progress.
sysadmin@ddct# data-movement recall path /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-disk-key-2000.vmdk
Recall initiated for "/data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-disk-key-2000.vmdk". Run the "data-movement status" command to monitor its progress.
sysadmin@ddct# data-movement recall path /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-disk-key-2000-metadata.json
Recall initiated for "/data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-disk-key-2000-metadata.json". Run the "data-movement status" command to monitor its progress.
sysadmin@ddct# data-movement recall path /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/BackupVmSessions.json
Recall initiated for "/data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/BackupVmSessions.json". Run the "data-movement status" command to monitor its progress.
sysadmin@ddct# data-movement recall path /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/BackupDescriptor.json
Recall initiated for "/data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/BackupDescriptor.json". Run the "data-movement status" command to monitor its progress.
資料移動重新叫用完成後,檔案會顯示在使用層下:
sysadmin@ddct# filesys report generate file-location path /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56 -------------------------------- ---------------------- ------------- ----------------- File Name Location(Unit Name) Size Placement Time -------------------------------- ---------------------- ------------- ------------------- /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-config-file-0.cfg Active 3.79 KiB Sun Oct 20 23:12:02 2024 /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-config-file-1.cfg Active 264.49 KiB Sun Oct 20 23:12:10 2024 /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-disk-key-2000-used-blocks.json Active 13.98 KiB Sun Oct 20 23:12:18 2024 /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-disk-key-2000-flat.vmdk Active 100.00 GiB Sun Oct 20 23:12:35 2024 /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-disk-key-2000.vmdk Active 345.00 B Sun Oct 20 23:12:35 2024 /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/vm-4002-disk-key-2000-metadata.json Active 322.00 B Sun Oct 20 23:12:43 2024 /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/BackupVmSessions.json Active 5.34 KiB Sun Oct 20 23:12:52 2024 /data/col1/nsr/VMbackup03/00/84/66385d64-00000006-f6111cbf-67111cbf-000b5000-592bbe56/BackupDescriptor.json Active 2.29 KiB Sun Oct 20 23:13:04 2024 -----------------------------------------------------------------
替代方法是使用 NetWorker 將儲存集複製回作用層中的裝置:NVP vProxy:如何從非 Data Domain 裝置手動複製 VM 儲存集到 Data Domain 複製裝置?
- 一旦資料移回使用中階層,請從 NetWorker Management Console (NMC) 或 NetWorker Web 使用者介面 (NWUI) 執行 VM 還原。
其他資訊
將 NetWorker 與 Data Domain Cloud Tier 整合時,應在包含 NetWorker 資料的 mtree 上將「資料移動」原則設定為「應用程式管理」。
在 NetWorker 中建立 DD 雲端層級複製裝置:

在標記磁碟區之前,會出現警示,指出此程序會將 NetWorker mtree 設定為「應用程式管理」。
資料移動原則顯示為 NetWorker mtree 的應用程式管理:
sysadmin@ddct# data-movement policy show mtree /data/col1/nsr Mtree Target(Tier/Unit Name) Policy Value ------------------------- ---------------------- ----------- ------- /data/col1/nsr Cloud/test01 app-managed enabled ------------------------- ---------------------- ----------- -------
若要在作用層和雲端單元儲存裝置之間移動 NetWorker 資料,請使用 DD 雲端層 NetWorker 裝置作為複製目標,設定 NetWorker 複製工作。
在雲端層複製裝置上的儲存集進行 VM 還原期間,雲端層儲存集會出現在 「從非 Data Domain 裝置上的複製復原虛擬機 器」下方:
復原程序會提供選取「暫存集區」的選項。分段集區必須是使用在 NetWorker 伺服器本機儲存節點上設定的 Data Domain 磁碟裝置的複製集區。復原程序會將儲存集複製到 Data Domain 複製裝置,然後執行虛擬機器修復。詳見:NetWorker vProxy:從磁帶恢復恢復失敗,並顯示「無法重新恢復複製 SSID 到分段集區中的 Data Domain 卷」