1443270 - Bacula cert/key generated and configured for MDC2 deploystudio

Status: RESOLVED FIXED

(Infrastructure & Operations :: Infrastructure: Backups, task)

Description

[Jake Watkins [:dividehex]]

The MDC2 deploystudio server will need an ssl cert/key generated and bacula configured.  The paths to be backed up will be identical to the deploystudio server in mdc1.

FQDN: install.test.releng.mdc2.mozilla.com

Comment 1

[Jake Watkins [:dividehex]]

Hey :rtucker, when you have the time could we get this key/cert generated for this deploystudio host?  I'd like knock this off my to-do list soon. Thanks!

Comment 2

[Rob Tucker [:rtucker]]

All of the files you need are available here: bacula1.private.mdc2.mozilla.com:/home/jwatkins

Let me know once you've configured the host and then I'll do some tests

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/build/puppet/rev/d1ab7c09290d
uncomment bacula config for install.test.releng.mdc2; a=nodechange

Comment 4

[Jake Watkins [:dividehex]]

Thanks Rob!  I've added the ca, cert and key to releng hiera and manually executed puppet in the host.  It should be ready for the server side configurations.

Comment 5

[Jake Watkins [:dividehex]]

I forgot to add the symlink after the initial puppet run.  It should be working now.


Error: Unable to find launchd plist for job: com.baculasystems.bacula-fd
Error: /Stage[main]/Bacula_client/Service[com.baculasystems.bacula-fd]/ensure: change from absent to running failed: Unable to find launchd plist for job: com.baculasystems.bacula-fd

[[e-mail] ~]# cd /Library/LaunchDaemons/
[[e-mail] LaunchDaemons]# ln -s /usr/local/bacula-8.8.5/Library/LaunchDaemons/com.baculasystems.bacula-fd.plist com.baculasystems.bacula-fd.plist

Notice: /Stage[main]/Bacula_client/Service[com.baculasystems.bacula-fd]/ensure: ensure changed 'stopped' to 'running'
Info: /Stage[main]/Bacula_client/Service[com.baculasystems.bacula-fd]: Unscheduling refresh on Service[com.baculasystems.bacula-fd]

Comment 6

[Jake Watkins [:dividehex]]

Hey Rob, the bacula agent is running on this host.  Please configure and test when you have a chance.  Thanks!

Comment 7

[Rob Tucker [:rtucker]]

Can you confirm there aren't any firwewall rules?

status client=install.test.releng.mdc2.mozilla.com
Failed to connect to Client install.test.releng.mdc2.mozilla.com

Comment 8

[Jake Watkins [:dividehex]]

Host based firewall looks good on the host itself but the agent is dying on the host.  I'll try to debug this.

# Table allow_infra_bacula_mdc2
table <allow_infra_bacula_mdc2> persist { \
        10.50.75.200/32 \
    }
pass in quick on en0 inet proto tcp from <allow_infra_bacula_mdc2> to any port = 9102 flags S/SA keep state

Comment 9

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/build/puppet/rev/8b9852f23c90
fix broken bacula ca cert for mdc2; a=bustage

Comment 10

[Jake Watkins [:dividehex]]

It was an error on my side.  Puppet was setting the ca cert file empty.  I've restarted daemon and it looks like it is running now.

Comment 11

[Rob Tucker [:rtucker]]

Looks good. Thanks!