actcur/salt
3
0
Fork 0
Code Issues 5 Pull requests Projects Releases Wiki Activity

Backup freeipa #11

New issue
Open
opened 2020-01-29 16:37:04 -06:00 by ejparker · 3 comments
ejparker commented 2020-01-29 16:37:04 -06:00
Owner
Copy link

use ipa-backup to regularly back up freeipa so that it can be restored to new server if necessary

use ipa-backup to regularly back up freeipa so that it can be restored to new server if necessary
ejparker commented 2020-01-29 16:44:16 -06:00
Author
Owner
Copy link

Restore process if backup is from latest freeipa:

  1. Join to saltstack
  2. Run highstate
  3. Run freeipa-server build state
  4. Run highstate
  5. Copy backup to new server
  6. Run ipa-restore
  7. Run highstate

Restore process if backup is not from latest freeipa:

  1. Determine freeipa version from backup
  2. Download ipa-server ipa-server-common ipa-client ipa-client-common ipa-common python2-ipalib python2-ipaclient python2-ipaserver packages for version used by backup
  3. Install ipa-server (to get dependencies installed)
  4. Uninstall above packages
  5. Install downloaded packages
  6. Manually run commands from freeipa-server build and maintain states
  7. Copy backup to new server
  8. Run ipa-restore
  9. Update to new ipa-server version
  10. Join to salt
  11. Run highstate twice
Restore process if backup is from latest freeipa: 1) Join to saltstack 2) Run highstate 3) Run freeipa-server build state 4) Run highstate 5) Copy backup to new server 6) Run ipa-restore 7) Run highstate Restore process if backup is *not* from latest freeipa: 1) Determine freeipa version from backup 2) Download ipa-server ipa-server-common ipa-client ipa-client-common ipa-common python2-ipalib python2-ipaclient python2-ipaserver packages for version used by backup 3) Install ipa-server (to get dependencies installed) 4) Uninstall above packages 5) Install downloaded packages 6) Manually run commands from freeipa-server build and maintain states 7) Copy backup to new server 8) Run ipa-restore 9) Update to new ipa-server version 10) Join to salt 11) Run highstate twice
ejparker commented 2020-01-29 16:48:36 -06:00
Author
Owner
Copy link

Possibly create restore state? Probably better to handle it by hand though to ensure inconsistent freeipa versions are handled properly.

Possibly create restore state? Probably better to handle it by hand though to ensure inconsistent freeipa versions are handled properly.
ejparker self-assigned this 2022-07-28 08:16:06 -05:00
ejparker commented 2022-08-11 09:40:40 -05:00
Author
Owner
Copy link

This should probably rely on a script rather than a restore state. The script should be able to determine freeipa version used for backup and download/install appropriate files automatically before running restore.

This should probably rely on a script rather than a restore state. The script should be able to determine freeipa version used for backup and download/install appropriate files automatically before running restore.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
prod
dev
seer
nginx
bazarr
qual
matrix
fix_secrets
No results found.
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
ejparker
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: actcur/salt#11
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?