Home

Gmail

• dfbradnerlab@gmail.com
  • email address for sending email from TOD (e.g. for Jenkins)
  • ask jdimatteo@gmail.com if you would like the password
• bradnerlab-systemadmin@googlegroups.com
  • email group for receiving email (e.g. if a backup fails, it will email this group, which will result in emails being sent to one or more individuals responsible for system admin)
  • email jdimatteo@gmail.com if you would like to be added to the group

Jenkins

• http://tod.dfci.harvard.edu/jenkins
  • install documented at misc-2
• tip: use for remote system admin, e.g.
  • ssh -L 9001:tod.dfci.harvard.edu:80 harvard
  • you can now access jenkins in a local web browser at http://localhost:9001/jenkins/
• only the bradneradmin user currently has permission to create/configure jobs
• the jenkins user has sudo permission to run some backup scripts in /root/backup-scripts/
  • the jenkins user should still be safe to use for other jobs, and it would be fine to allow any authenticated user access to configure/create jenkins jobs
    • configuration is carefully setup to NOT allow the jenkins user to run arbitrary backup commands (which would allow a user to backup files they don't have access to to arbitrary locations, or restore files they wouldn't normally have access to)
• dfbradnerlab@gmail.com email used for sending messages

Backups

• weekly rdiff-backup incremental backups to /crusader
  • starts 3 AM every Saturday, run by Jenkins: http://127.0.0.1:9001/jenkins/job/Backup_TOD/
  • error emails sent to bradnerlab-systemadmin@googlegroups.com
• TODO:
  • mysql backup
    • probably will use automysqlbackup to backup to crusader directly (e.g. table foo backed up to /crusader/backup/automysqlbackup/foo.tar.gz) with last 5 backups stored as well
• backed up file paths:

TOD Path	Backup Path
/ark	/crusader/backup/rdiff-backup/ark/
/raider	/crusader/backup/rdiff-backup/raider
/mnt/d0-0/share/bradnerlab/	/crusader/backup/rdiff-backup/mnt/d0-0/share/bradnerlab/
/ifs/labs/bradner/	/crusader/backup/rdiff-backup/ifs/labs/bradner/
/ --exclude /proc --exclude /sys --exclude /tmp --exclude /media --exclude /ark --exclude /raider --exclude /mnt --exclude /ifs --exclude /crusader	/crusader/backup/rdiff-backup/root_directory/

• background on rdiff-backup: http://www.backupcentral.com/wiki/index.php/Rdiff-backup
• the actual commands to do the backups are in scripts in /root/backup-scripts, which the Jenkins user has sudo access to
• note that Charles suggested that /crusader has good physical security, so this should be secure enough without encryption
• TODO: there should also be a job run monthly to transfer a backup to Amazon glacier, probably using duplicity