BackupPC-users

Re: [BackupPC-users] Transferring backuppc to another machine.

2008-06-04 23:17:25
Subject: Re: [BackupPC-users] Transferring backuppc to another machine.
From: Adam Goryachev <mailinglists AT websitemanagers.com DOT au>
To: Bruno Faria <brunothebigb AT gmail DOT com>
Date: Thu, 05 Jun 2008 13:16:44 +1000
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Bruno Faria wrote:
> Hi,
> 
> I have a single machine that's running backuppc, but as I add more and
> more hosts to the backuppc server, the load for it keeps on getting
> bigger as guys can imagine.
> 
> Anyways, I just got a new server that will run backuppc. That way, I can
> split the backups between the two servers. So here's what I would like
> to know: I have about 50+ hosts added to the first backuppc server, so I
> might move 25 of those hosts to the new backup server, that way each
> server will take care of half of the backups. But it would be a little
> time consuming for me to create a new backuppc key on the new server and
> add that key to each host (about 25) so that I can login without a
> password. So could I just copy the backuppc ssh key from the first
> backuppc server to the new one and also the "known_hosts" file, so that
> I can login to all hosts to be backed up without a password?
> 
> Thanks for the help!

Yes, or you could:
1) create a new key on the new server
2) copy the public key to the old backup server
3) copy the known_hosts from the old to the new server
4) Using the old key on the old server, scp the new key to each of the
25 hosts like this:
for host in host1 host2 host3;do cat newkey.pub | ssh $host cat - >>
~root/.ssh/authorised_keys;done

Then test to make sure you can login without the password from the new host.

BTW, the above code is untested, so test briefly first. Also, you might
like to read about the authorized_keys file, and add additional
configuration to restrict where the key can be used from so that if your
key is compromised, it will limit the problem. Which means, if you
already used this, then you would need to modify it on each server
before you can do what you suggested.

Regards,
Adam

- --
Adam Goryachev
Website Managers
www.websitemanagers.com.au
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIR1qcGyoxogrTyiURArXDAKCTeHx87nyq5JJfCXmVgoQ1PW4g2gCgrXfQ
gKW6iiNVK+r3wuju2afY0hY=
=aqY0
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

<Prev in Thread] Current Thread [Next in Thread>