搜索 <book_title>...

NetBackup™ Snapshot Manager for Data Center 管理指南

Last Published: 2024-05-14

Product(s): NetBackup & Alta Data Protection (10.4)

在 Docker/Podman 环境中安装 NetBackup Snapshot Manager for Data Center

注意:

部署 NetBackup Snapshot Manager for Data Center 时，可能需要复制以下命令，并将其粘贴到命令行界面中。如果这样做，请替换这些示例中不同于您自己值的信息：产品和内部版本、下载目录路径等。

在 Podman 上安装 NetBackup Snapshot Manager for Data Center 的前提条件：

运行以下命令，在主机上安装所需的软件包（lvm2、udev、plugins、udica 和 policycoreutils-devel）：
#yum install -y lvm2-<version>
#yum install -y lvm2-libs-<version>
#yum install -y python3-pyudev-<version>
#yum install -y systemd-udev-<version>
#yum install -y podman-plugins
#yum install -y udica
#yum install -y policycoreutils-devel

安装 NetBackup Snapshot Manager for Data Center

根据 Docker 或 Podman 环境执行以下相应步骤。

安装 NetBackup Snapshot Manager for Data Center

从 Veritas 支持门户将 NetBackup Snapshot Manager for Data Center 映像下载到要部署 NetBackup Snapshot Manager for Data Center 的系统。
注意:
您必须登录到支持站点才能下载。
从“产品”下拉列表中选择 NetBackup，然后从“版本”下拉列表中选择所需版本。单击“浏览”。单击“基本和升级”安装程序。
对于 Docker 和 Podman 环境，NetBackup Snapshot Manager for Data Center 映像名称类似于以下格式：
NetBackup_SnapshotManager_<version>.tar.gz
注意:
实际文件名可能因版本而异。

解压缩映像文件并列出内容：

# ls
NetBackup_SnapshotManager_xx.x.x.x.xxxx.tar.gz
netbackup-flexsnap-xx.x.x.x.xxxx.tar.gz
flexsnap_preinstall.sh

运行以下命令准备 NetBackup Snapshot Manager for Data Center 主机以进行安装：

# sudo ./flexsnap_preinstall.sh

（对于 RHEL 7.9 上的 Docker）输出如下所示：

Validate host resources                  ...  done
Check for docker installation            ...  done
Validate docker version support          ...  done
Check for docker socket file             ...  done
Checking for required packages           ...  done
Validate required services health        ...  done
Loading Snapshot Manager service images  ...  done
Copying flexsnap_configure script        ...  done

（对于 RHEL 8.x/RHEL-9.x 上的 Podman）输出如下所示：

Checking for disk space                  ...  done
Checking for swap space                  ...  done
Validate host resources                  ...  done
Validate SELINUX                         ...  done
Check for podman installation            ...  done
Validate podman version support          ...  done
Check for podman socket file             ...  done
Checking for required packages           ...  done
Validate required services health        ...  done
Removing deprecated services             ...  done
Loading Snapshot Manager service images  ...  done
Creating nbsvcusr user and group         ...  done
Loading CIL policy for containers        ...  done
Copying flexsnap_configure script        ...  done

使用以下命令选项配置和安装帮助：

配置：# flexsnap_configure -h

Usage: flexsnap_configure [OPTIONS] <COMMAND> [CMD_OPTIONS]
 
NetBackup Snapshot Manager (10.3.x.x.xxxx) configuration script
 
Options:
  -h, --help
        Print this message and exit
Command:
  backup      To create backup of Snapshot Manager metadata.
  install     To install the Snapshot Manager stack on a host.
  recover     To restore from backup copy Snapshot Manager 
              metadata.
  renew       To renew the Snapshot Manager certificates or 
              extension.
  restart     To restart the Snapshot Manager services on a host.
  start       To start the Snapshot Manager services on a host.
  status      To get the health status of Snapshot Manager 
              services.
  stop        To stop the Snapshot Manager services on a host.
  serverinfo  To get the NetBackup primary and Snapshot Manager 
              servers information.
  truststore  To list and update Snapshot Manager truststore.
  uninstall   To uninstall the Snapshot Manager stack on a host.
  updatedb    To update NetBackup details in Snapshot Manager 
              Database.
  verify      To verify the Snapshot Manager certificates.
      
Run flexsnap_configure <COMMAND> --help for more information

安装：# flexsnap_configure install -h

Usage: flexsnap_configure install [OPTIONS]

选项	描述
--add-host <string>	（可选）添加自定义主机到 IP 映射 (host:ip)。可以对每个 host:ip 组合多次使用它。
--ca <ca>	根 CA 文件的绝对路径。
--chain <chain>	包含所有中间 CA 和服务器证书的证书链的绝对路径。
--crlcheck <level>	值可以是 0 (disable)、1 (leaf) 或 2 (chain)。
--crlpath <directory>	为非基于 CDP 的 CRL 验证指定 CRL 目录位置。如果无法从 Snapshot Manager for Data Center 主机访问证书颁发机构，则此选项很有用。
--extension	适用于 Snapshot Manager for Data Center 扩展安装。
--extname <name>	Snapshot Manager for Data Center 扩展名标识符。
--force	强制安装 Snapshot Manager
--host names <IP/FQDN>	Snapshot Manager for Data Center 的逗号分隔 IP/FQDN。
--http-proxy <URI>	（可选）将 HTTP 代理传递到部署。
--https-proxy <URI>	（可选）将 HTTPS 代理传递到部署。
-i	适用于交互式安装。
--key <key>	服务器证书私钥路径。
--no-proxy <URI>	（可选）不将代理传递到部署。
--path <install_path>	Snapshot Manager for Data Center 的安装路径（默认值：`/cloudpoint`）。
--passphrase <file>	指定包含用于访问 keystore 的密码的文件路径。文件中的第一行用作密码。
--port <port_number>	Snapshot Manager for Data Center 的 Nginx 端口（默认值：443）。
--primary <IP/FQDN>	NetBackup 主 IP 或 FQDN。对于 Snapshot Manager for Data Center 扩展，它必须指向 Snapshot Manager for Data Center 主机。
--subnet4 <string>	（可选）CIDR 格式的 IPv4 子网。
--subnet6 <string>	（可选）CIDR 格式的 IPv6 子网。
--token <token>	重新发布或标准令牌。对于 Snapshot Manager for Data Center 扩展，它充当工作流程令牌。（必需）适用于交互式安装。（可选）适用于 Snapshot Manager for Data Center 部署（如果 NetBackup 主服务器安全设置为“中等”或“低”）。

NetBackup Snapshot Manager for Data Center 的交互式和非交互式安装：

NetBackup Snapshot Manager for Data Center 的交互式安装 (NBCA/ECA)

NetBackup Snapshot Manager for Data Center 主机位于代理服务器后面：
# flexsnap_configure install -i --no-proxy <no_proxy_value> --http-proxy <http_proxy_value> --https-proxy <https_proxy_value>
NetBackup Snapshot Manager for Data Center/主服务器配置了专用主机名：
# flexsnap_configure install -i --add-host <nbsm_hostname>:<IP> --add-host <primary_hostname>:<IP>

在自定义路径上安装 NetBackup Snapshot Manager for Data Center：

# flexsnap_configure install -i --path <installation_path>

注意:

flexsnap_configure CLI 隐式使用权限标志 (-u 0)。

对于交互式 CLI (NBCA)，安装程序显示类似以下内容的消息：

# flexsnap_configure install -i
Configuration started at time: Sat Jul 29 14:34:08 UTC 2023
Docker server version: 20.10.7
This is a fresh install of NetBackup Snapshot Manager 10.x.x.x.xxxx

Please provide NetBackup Primary details:
NetBackup primary server IP Address or FQDN: <nbu_primary_fqdn>
Start configuring with NetBackup CA certificate.
Provide NetBackup authentication token: <security_token>
NetBackup Snapshot Manager hostname for TLS certificate (64 char FQDN limit): <snapshot_manager_fqdn>
Port (default:443):
Creating runtime CIL policy ...done
Configuration started at time: Wed Jan  3 05:33:08 UTC 2024
Podman server version: 4.2.0
This is a fresh install of NetBackup Snapshot Manager 10.4.x.x.xxxx
Creating network: flexsnap-network ...done
Starting container: flexsnap-fluentd ...done
Creating container: flexsnap-postgresql ...done
Creating container: flexsnap-rabbitmq ...done
Creating container: flexsnap-certauth ...done
Creating container: flexsnap-api-gateway ...done
Creating container: flexsnap-coordinator ...done
Creating container: flexsnap-listener ...done
Creating container: flexsnap-agent ...done
Creating container: flexsnap-onhostagent ...done
Creating container: flexsnap-scheduler ...done
Creating container: flexsnap-policy ...done
Creating container: flexsnap-notification ...done
Creating container: flexsnap-nginx ...done
Waiting for Snapshot Manager configuration to complete (21/21) ...done
Configuration complete at time Wed Jan  3 05:37:54 UTC 2024!
Please register Snapshot Manager with NetBackup primary server.

对于交互式 CLI (ECA)，安装程序显示类似以下内容的消息：

# flexsnap_configure install -i
Configuration started at time: Sat Jul 29 10:43:06 UTC 2023
Docker server version: 24.0.2
This is a fresh install of NetBackup Snapshot Manager 10.x.x.x.xxxx

Please provide NetBackup Primary details:
NetBackup primary server IP Address or FQDN: <nbu_primary_fqdn>
Start configuring external CA certificate.
Absolute path of the root CA certificate file: <root_ca_file>
Absolute path of server private key file: <server_key_file>
Absolute path of server certificate chain: <server_chain_file>
Absolute path of key passphrase file (Press ENTER if keyfile is non encrypted): <server_passphrase_file>
Absolute path of CRL directory (Press ENTER for CDP based CRL check): <crl_path>
CRL check level, Press ENTER for default 1 i.e. LEAF (0: DISABLE, 1: LEAF and 2:CHAIN): <crl_level>
NetBackup Snapshot Manager hostname for TLS certificate (64 char FQDN limit): <snapshot_manager_fqdn>
Port (default:443): <snapshot_manager_port>
Creating runtime CIL policy ...done
Configuration started at time: Tue Jan  2 10:44:07 UTC 2024
Podman server version: 4.2.0
This is a fresh install of NetBackup Snapshot Manager 10.4.x.x.xxxx
Creating network: flexsnap-network ...done
Starting container: flexsnap-fluentd ...done
Creating container: flexsnap-postgresql ...done
Creating container: flexsnap-rabbitmq ...done
Creating container: flexsnap-certauth ...done
Creating container: flexsnap-api-gateway ...done
Creating container: flexsnap-coordinator ...done
Creating container: flexsnap-listener ...done
Creating container: flexsnap-agent ...done
Creating container: flexsnap-onhostagent ...done
Creating container: flexsnap-scheduler ...done
Creating container: flexsnap-policy ...done
Creating container: flexsnap-notification ...done
Creating container: flexsnap-nginx ...done
Waiting for Snapshot Manager configuration to complete (21/21) ...done
Configuration complete at time Tue Jan  2 10:49:02 UTC 2024!
Please register Snapshot Manager with NetBackup primary server

使用 NetBackup CA (NBCA) 以非交互方式安装 NetBackup Snapshot Manager for Data Center

NetBackup 主服务器安全级别为“中”，或主服务器知道 Snapshot Manager for Data Center 主机名：
# flexsnap_configure install --primary <primary> --hostnames <nbsm_ip_or_fqdn>
NetBackup 主服务器安全级别为“高”或“非常高”：
# flexsnap_configure install --primary <primary> --token <standard_token> --hostnames <nbsm_ip_or_fqdn>
NetBackup Snapshot Manager for Data Center 主机位于代理服务器后面：
# flexsnap_configure install --primary <primary> --token <standard_token> --hostnames <nbsm_ip_or_fqdn> --no-proxy <no_proxy_value> --http-proxy <http_proxy_value> --https-proxy <https_proxy_value>
NetBackup Snapshot Manager for Data Center/主服务器配置了专用主机名：
# flexsnap_configure install --primary <primary> --token <standard_token> --hostnames <nbsm_ip_or_fqdn> --add-host <nbsm_hostname:IP> --add-host <primary_hostname:IP>

在自定义路径或端口上安装 NetBackup Snapshot Manager for Data Center：

# flexsnap_configure install --primary <primary> --token <standard_token> --hostnames <nbsm_ip_or_fqdn> --path <installation_path> --port <port>

对于非交互式 CLI (NBCA)，安装程序显示类似以下内容的消息：

# flexsnap_configure install --primary <nbu_primary_fqdn> --token <security_token>  --hostnames <snapshot_manager_fqdn>

Start configuring with NetBackup CA certificate.
Creating runtime SELinux policy ...done
Configuration started at time: Wed Jan 17 10:39:54 UTC 2024
Podman server version: 4.6.1
This is a fresh install of NetBackup Snapshot Manager 10.4.x.x.xxxx
Creating network: flexsnap-network ...done
Starting container: flexsnap-fluentd ...done
Creating container: flexsnap-postgresql ...done
Creating container: flexsnap-rabbitmq ...done
Creating container: flexsnap-certauth ...done
Creating container: flexsnap-api-gateway ...done
Creating container: flexsnap-coordinator ...done
Creating container: flexsnap-listener ...done
Creating container: flexsnap-agent ...done
Creating container: flexsnap-onhostagent ...done
Creating container: flexsnap-scheduler ...done
Creating container: flexsnap-policy ...done
Creating container: flexsnap-notification ...done
Creating container: flexsnap-nginx ...done
Waiting for Snapshot Manager configuration to complete (21/21) ...done
Configuration complete at time Wed Jan 17 10:45:05 UTC 2024!
Please register Snapshot Manager with NetBackup primary server

使用外部 CA (ECA) 以非交互方式安装 NetBackup Snapshot Manager for Data Center

加密私钥：
# flexsnap_configure install --primary <primary> --hostnames <nbsm_ip_or_fqdn> --ca <path_of_root_CA> --key <path_of_private_key_file> --chain <server_chain_file> --passphrase <file>
非加密私钥：
# flexsnap_configure install --primary <primary> --hostnames <nbsm_ip_or_fqdn> --ca <path_of_root_CA> --key <path_of_private_key_file> --chain <server_chain_file>
使用用户提供的 CRL 路径/CRL 检查：
# flexsnap_configure install --primary <primary> --hostnames <nbsm_ip_or_fqdn> --ca <path_of_root_CA> --key <path_of_private_key_file> --chain <server_chain_file> --crlpath <directory> --crlcheck <level>
NetBackup Snapshot Manager for Data Center 主机位于代理服务器后面：
# flexsnap_configure install --primary <primary> --hostnames <nbsm_ip_or_fqdn> --ca <path_of_root_CA> --key <path_of_private_key_file> --chain <server_chain_file> --no-proxy <no_proxy_value> --http-proxy <http_proxy_value> --https-proxy <https_proxy_value>
NetBackup Snapshot Manager for Data Center/主服务器配置了专用主机名：
# flexsnap_configure install --primary <primary> --hostnames <nbsm_ip_or_fqdn> --ca <path_of_root_CA> --key <path_of_private_key_file> --chain <server_chain_file> --add-host <nbsm_hostname:IP> --add-host <primary_hostname:IP>

在自定义路径/端口上安装 NetBackup Snapshot Manager for Data Center：

# flexsnap_configure install --primary <primary> --hostnames <nbsm_ip_or_fqdn> --ca <path_of_root_CA> --key <path_of_private_key_file> --chain <server_chain_file> --path <installation_path> --port <port>

对于非交互式 CLI (ECA)，安装程序显示类似以下内容的消息：

# flexsnap_configure install --primary <nbu_primary_fqdn> --hostnames <snapshot_manager_fqdn> --ca <root_ca_file> --key <server_key_file> --passphrase <server_passphrase_file> --chain <server_chain_file> --crlpath <crl_path> --crlcheck <level>
Start configuring external CA certificate.
Creating runtime CIL policy ...done
Configuration started at time: Tue Jan  2 11:35:21 UTC 2024
Podman server version: 4.2.0
This is a fresh install of NetBackup Snapshot Manager 10.4.x.x.xxxx
Creating network: flexsnap-network ...done
Starting container: flexsnap-fluentd ...done
Creating container: flexsnap-postgresql ...done
Creating container: flexsnap-rabbitmq ...done
Creating container: flexsnap-certauth ...done
Creating container: flexsnap-api-gateway ...done
Creating container: flexsnap-coordinator ...done
Creating container: flexsnap-listener ...done
Creating container: flexsnap-agent ...done
Creating container: flexsnap-onhostagent ...done
Creating container: flexsnap-scheduler ...done
Creating container: flexsnap-policy ...done
Creating container: flexsnap-notification ...done
Creating container: flexsnap-nginx ...done
Waiting for Snapshot Manager configuration to complete (21/21) ...done
Configuration complete at time Tue Jan  2 11:40:12 UTC 2024!
Please register Snapshot Manager with NetBackup primary server

（对于 Docker）# sudo docker images
（对于 Podman）# sudo podman images

输出如下所示：

REPOSITORY             TAG            IMAGE ID       CREATED       SIZE
veritas/flexsnap-deploy       10.3.x.xxxxx   5260748d9eab   18 minutes ago   586MB
veritas/flexsnap-rabbitmq     10.3.x.xxxxx   cff89dc78a2f   18 minutes ago   546MB
veritas/flexsnap-postgresql   10.3.x.xxxxx   0b87fe88cf94   18 minutes ago   537MB
veritas/flexsnap-nginx        10.3.x.xxxxx   ee1cf2a3159e   18 minutes ago   649MB
veritas/flexsnap-fluentd      10.3.x.xxxxx   a384e3fc4167   19 minutes ago   681MB
veritas/flexsnap-core         10.3.x.xxxxx   2393b221bf19   20 minutes ago   916MB
veritas/flexsnap-datamover    10.3.x.xxxxx   8254c537bdb4   38 hours ago     1.18GB

在命令提示符上出现提示时，请提供以下详细信息：

参数	描述
授权令牌	如果使用 NetBackup 证书颁发机构，则安装程序需要授权令牌才能成功部署安全证书。
TLS 证书的主机名	指定 NetBackup Snapshot Manager for Data Center 主机的 IP 地址或完全限定域名 (FQDN)。指定的名称或 IP 地址将添加到要用于配置 NetBackup Snapshot Manager for Data Center 的主机名列表中。安装程序使用此名称为 NetBackup Snapshot Manager for Data Center 主机生成服务器证书。
端口	指定 NetBackup Snapshot Manager for Data Center 可以进行通信的端口。默认端口为 443。

参数

描述

授权令牌

如果使用 NetBackup 证书颁发机构，则安装程序需要授权令牌才能成功部署安全证书。

TLS 证书的主机名

指定 NetBackup Snapshot Manager for Data Center 主机的 IP 地址或完全限定域名 (FQDN)。

指定的名称或 IP 地址将添加到要用于配置 NetBackup Snapshot Manager for Data Center 的主机名列表中。安装程序使用此名称为 NetBackup Snapshot Manager for Data Center 主机生成服务器证书。

端口

指定 NetBackup Snapshot Manager for Data Center 可以进行通信的端口。默认端口为 443。

然后，安装程序将显示类似以下内容的消息：

Configuring admin credentials ...done
Waiting for Snapshot Manager configuration to complete (22/22) ...done
Configuration complete at time Thu Jun 9 06:15:43 UTC 2022!

注意:

部署 NetBackup Snapshot Manager for Data Center 后，请确保系统上的 IPv6 接口未禁用。

NetBackup Snapshot Manager for Data Center 部署过程完成。下一步是向 Veritas NetBackup 主服务器注册 NetBackup Snapshot Manager for Data Center。

注意:

如果需要重新启动 NetBackup Snapshot Manager for Data Center，请使用 docker run 命令，以便保留环境数据。

请参见重新启动 NetBackup Snapshot Manager for Data Center。