Veritas NetBackup10.1 AWS上手动部署手册

Veritas NetBackup10.1 AWS上手动部署手册

1. 测试场景产品: Veritas NBU 和MSDP-C
   概要说明:
   NBU支持对公有云上数据进行备份
   MSDP-C可支持将重删后的数据复制到S3存储，降低整体成本.
2. 环境准备

1. Master安装自定义Master主机名
   

输入registration key路径

不添加License

不添加Media Server

后续选择默认后，安装完毕

1. Media安装是否是Master输入N
   

输入Media对应主机名和Master主机名

Media从Master获取证书

选择Exclude Java GUI and JRE

1. SnapManager安装容器部署SnapManager
   cd /home/ec2-user/
   docker load -i netbackup-flexsnap-10.1.0.0.1051.tar.gz
   docker images
   docker run -u 0 --rm -it -v /cloudpoint:/cloudpoint -v /var/run/docker.sock:/var/run/docker.sock veritas/flexsnap-deploy:10.1.0.0.1051 install
   docker ps -a
   安装过程中需要输入用户名?密码 和 和创建的Router53 对应的A记录
   

安装完成

1. 安装注意事项

• 所有添加的数据卷在EC2上需要格式化后挂载，否则无法使用。fdisk /dev/nvme1n1
  mkfs.xfs /dev/nvme1n1p1
  mkdir /cloudpoint
  mount /dev/nvme1n1p1 /cloudpoint/
  
• EC2主机名需要和安装三个节点时定义的主机名一致，所以需要在安装前修改EC2的默认主机名，之后再安装，否则后续获取证书会有问题。

2. 添加SnapManager找到SnapshotManager，选择添加，输入主机名，端口，验证后输入用户名密码，添加即可
   

1. 添加Provider进入WebUI，左侧选择Workloads-Cloud，选择Provider，添加AWS提供商
   

选择Snapmanager，输入区域ID，Snapmanager需要提前关联具有对应权限的角色，之后保存添加Provider成功，即可扫描到现有EC2和EBS资源。

1. 添加MSDP存储配置添加MSDP去重池
   

输入Media服务器新挂载的数据盘路径

其他均选择默认

成功添加MSDP

1. 添加磁盘池找到磁盘池，选择添加
   

输入磁盘池名称，其他默认

1. 添加存储单元选择添加存储单元
   

输入名称和最大并行作业数

选择刚创建的磁盘池

选择Media服务器

创建完成

1. 创建保护计划定义计划名字，提供商AWS
   

定义保护属性

定义备份时间

选择MSDP池

选择默认

创建完成

1. 备份EC2测试选择被保护主机
   

选择保护计划

创建备份任务成功

1. 添加Snapmanager报错

1. 环境配置
2. 功能测试
3. 常见问题

由于SnapManager需要找Master取证书，但是Master无法生成证书导致出错

[root@snap1 ~]# less /cloudpoint/logs/flexsnap.log

flexsnap-coordinator: "flexsnap.OperationFailed: Generation of NetBackup certificates failed: nbcertcmdtool: The -getCertificate operation f

ailed for server master.nbudemo.com. EXIT STATUS 5987: Could not fetch the host ID of the NetBackup master server. The master server may not

have the certificate."

flexsnap-api-gateway: "2023-05-19T08:41:01.305Z flexsnap-api-gateway INFO Exception: /opt/VRTScloudpoint/lib/flexsnap/coordinator.py:10538,

Type: flexsnap.OperationFailed"

解决方法

由于Master的主机名和定义的主机名不一致所以无法生成证书，所以需要修改主机名。

正常安装需要注意在安装Master之前修改主机名！！

################登陆Operation#####################

[root@master support]# bpnbat -login -logintype web

Authentication Broker: master.nbudemo.com

Authentication port [0 is default]:

Authentication type (NIS, NISPLUS, WINDOWS, vx, unixpwd, ldap): unixpwd

Domain: master.nbudemo.com

Login Name: root

Password:

Operation completed successfully.

[root@master support]#

################List主机#####################

[root@master support]# nbhostmgmt -list

Host ID : b4f343ad-dcc7-412c-9297-7352671ce339

Host : ip-192-168-0-4.cn-northwest-1.compute.internal

Master Server : master.nbudemo.com

OS Type : UNIX

Operating System : RedHat Linux (3.10.0-1160.76.1.el7.x86_64)

NetBackup EEBs :

NetBackup Packages : VRTSnbpck_10.1.0.0,VRTSnbjre_10.1.0.0,VRTSpddei_3.0,VRTSpbx_1.17.43.0,VRTSnbclibs_10.1.0.0,VRTSnbjava_10.1.0.0,VRTSpddes_17.0.0.0,VRTSnbcfg_10.1.0.0,VRTSnbslibs_10.1.0.0,VRTSnbclt_10.1.0.0,VRTSpddea_17.0.0.0,VRTSnetbp_10.1.0.0

VxUpdate Platform : redhat_x64

Hardware Description : GenuineIntel Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz, 8 CPUs

CPU Architecture : x86_64

Version : NetBackup_10.1

Secure : Yes

Comment :

Allow Auto Reissue Certificate : No

Trust Version : i0zIxzoqa522CTG

Allow Auto Reissue Certificate Validity :

Subject Name of External Certificate :

ECA SHA-1 Fingerprint :

ECA SHA-256 Fingerprint :

NetBackup CA Issued Certificate : Yes

Mapped Host Name Approved Conflict Auto-discovered Shared Created On Last Updated On

master.nbudemo.~ Yes No Yes No Apr 26, 2023 07:48:17 AM Apr 26, 2023 07:48:17 AM

ip-192-168-0-4.~ Yes No Yes No Apr 26, 2023 04:39:41 AM May 11, 2023 06:08:38 AM

Host ID : 5f5937bc-6528-4afc-85b9-c4e008fc5a89

Host : media.nbudemo.com

Master Server : master.nbudemo.com

OS Type : UNIX

Operating System : RedHat Linux (3.10.0-1160.76.1.el7.x86_64)

NetBackup EEBs :

NetBackup Packages : VRTSpbx_1.17.43.0,VRTSpddes_17.0.0.0,VRTSnbslibs_10.1.0.0,VRTSnbpck_10.1.0.0,VRTSnbclt_10.1.0.0,VRTSpddea_17.0.0.0,VRTSpddei_3.0,VRTSnetbp_10.1.0.0,VRTSnbclibs_10.1.0.0,VRTSnbcfg_10.1.0.0

VxUpdate Platform : redhat_x64

Hardware Description : GenuineIntel Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz, 8 CPUs

CPU Architecture : x86_64

Version : NetBackup_10.1

Secure : Yes

Comment :

Allow Auto Reissue Certificate : No

Trust Version : i0zIxzoqa522CTG

Allow Auto Reissue Certificate Validity :

Subject Name of External Certificate :

ECA SHA-1 Fingerprint :

ECA SHA-256 Fingerprint :

NetBackup CA Issued Certificate : Yes

Mapped Host Name Approved Conflict Auto-discovered Shared Created On Last Updated On

ip-192-168-0-5.~ Yes No No No Apr 27, 2023 02:24:17 AM Apr 27, 2023 02:24:17 AM

media.nbudemo.c~ Yes No Yes No Apr 26, 2023 07:27:39 AM Apr 26, 2023 07:27:39 AM

Host ID : ba0657ba-cad6-4615-9bf3-18ea49e46b64

Host : client.nbudemo.com

Master Server :

OS Type :

Operating System :

NetBackup EEBs :

NetBackup Packages :

VxUpdate Platform :

Hardware Description :

CPU Architecture :

Version :

Secure : No

Comment :

Allow Auto Reissue Certificate : No

Trust Version : i0zIxzoqa522CTG

Allow Auto Reissue Certificate Validity :

Subject Name of External Certificate :

ECA SHA-1 Fingerprint :

ECA SHA-256 Fingerprint :

NetBackup CA Issued Certificate : Yes

Mapped Host Name Approved Conflict Auto-discovered Shared Created On Last Updated On

client.nbudemo.~ Yes No Yes No Apr 26, 2023 08:10:32 AM Apr 26, 2023 08:10:32 AM

[root@master support]#

[root@master support]#

[root@master support]#

[root@master support]# nbhostmgmt -list -hostid b4f343ad-dcc7-412c-9297-7352671ce339

Host ID : b4f343ad-dcc7-412c-9297-7352671ce339

Host : ip-192-168-0-4.cn-northwest-1.compute.internal

Master Server : master.nbudemo.com

OS Type : UNIX

Operating System : RedHat Linux (3.10.0-1160.76.1.el7.x86_64)

NetBackup EEBs :

NetBackup Packages : VRTSnbpck_10.1.0.0,VRTSnbjre_10.1.0.0,VRTSpddei_3.0,VRTSpbx_1.17.43.0,VRTSnbclibs_10.1.0.0,VRTSnbjava_10.1.0.0,VRTSpddes_17.0.0.0,VRTSnbcfg_10.1.0.0,VRTSnbslibs_10.1.0.0,VRTSnbclt_10.1.0.0,VRTSpddea_17.0.0.0,VRTSnetbp_10.1.0.0

VxUpdate Platform : redhat_x64

Hardware Description : GenuineIntel Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz, 8 CPUs

CPU Architecture : x86_64

Version : NetBackup_10.1

Secure : Yes

Comment :

Allow Auto Reissue Certificate : No

Trust Version : i0zIxzoqa522CTG

Allow Auto Reissue Certificate Validity :

Subject Name of External Certificate :

ECA SHA-1 Fingerprint :

ECA SHA-256 Fingerprint :

NetBackup CA Issued Certificate : Yes

Mapped Host Name Approved Conflict Auto-discovered Shared Created On Last Updated On

ip-192-168-0-4.~ Yes No Yes No Apr 26, 2023 04:39:41 AM May 11, 2023 06:08:38 AM

master.nbudemo.~ Yes No Yes No Apr 26, 2023 07:48:17 AM Apr 26, 2023 07:48:17 AM

[root@master support]#

[root@master support]#

################更新主机名#####################

[root@master support]# nbhostmgmt -updatehost -hostid b4f343ad-dcc7-412c-9297-7352671ce339 -newhostname master.nbudemo.com

The primary host name is updated for b4f343ad-dcc7-412c-9297-7352671ce339

[root@master support]#

[root@master support]#

[root@master support]# nbhostmgmt -list -hostid b4f343ad-dcc7-412c-9297-7352671ce339

Host ID : b4f343ad-dcc7-412c-9297-7352671ce339

Host : master.nbudemo.com

Master Server : master.nbudemo.com

OS Type : UNIX

Operating System : RedHat Linux (3.10.0-1160.76.1.el7.x86_64)

NetBackup EEBs :

NetBackup Packages : VRTSnbpck_10.1.0.0,VRTSnbjre_10.1.0.0,VRTSpddei_3.0,VRTSpbx_1.17.43.0,VRTSnbclibs_10.1.0.0,VRTSnbjava_10.1.0.0,VRTSpddes_17.0.0.0,VRTSnbcfg_10.1.0.0,VRTSnbslibs_10.1.0.0,VRTSnbclt_10.1.0.0,VRTSpddea_17.0.0.0,VRTSnetbp_10.1.0.0

VxUpdate Platform : redhat_x64

Hardware Description : GenuineIntel Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz, 8 CPUs

CPU Architecture : x86_64

Version : NetBackup_10.1

Secure : Yes

Comment :

Allow Auto Reissue Certificate : No

Trust Version : i0zIxzoqa522CTG

Allow Auto Reissue Certificate Validity :

Subject Name of External Certificate :

ECA SHA-1 Fingerprint :

ECA SHA-256 Fingerprint :

NetBackup CA Issued Certificate : Yes

Mapped Host Name Approved Conflict Auto-discovered Shared Created On Last Updated On

ip-192-168-0-4.~ Yes No Yes No Apr 26, 2023 04:39:41 AM May 11, 2023 06:08:38 AM

master.nbudemo.~ Yes No Yes No Apr 26, 2023 07:48:17 AM Apr 26, 2023 07:48:17 AM

[root@master support]#

[root@master support]#

[root@master support]#

################更新master主机证书#####################

[root@master support]# nbcertcmd -getCertificate -force

Host certificate and certificate revocation list received successfully from server master.nbudemo.com.