1. Prerequisites:
   You must have super user (sudo) access on a Centos 7 server. Also, the server will require adequate disk space for all of the backups that you plan on retaining at any given time. You should enable Private Networking on your Bacula server, and all of your client servers that are in the same datacenter region. This will allow your servers to use private networking when performing backups, reducing network overhead.
   1. Overview:
      Bacula is made up of several components and services used to manage which files to backup and backup locations:
   • Bacula Director: a service that controls all backup, restore, verify, and archive operations.
   • Bacula Console: an application allowing communication with the Director. There are three versions of the Console:
     • Text based command line version.
     • Gnome based GTK+ Graphical User Interface (GUI) interface.
     • wxWidgets GUI interface.
   • Bacula File: also known as the Bacula Client program. This application is installed on machines to be backed up, and is responsible for the data requested by the Director.
   • Bacula Storage: it is programs that performs the storage and recovery of data to the physical media.
   • Bacula Catalog: is responsible for maintaining the file indexes and volume databases for all files backed up, enabling quick location and restoration of archived files. The Catalog supports three different databases MySQL, PostgreSQL, and SQLite.
2. Installation:
   Bacula uses an SQL database, such as MySQL or Mariadb, to manage its backups catalog. We will use Mariadb. First we will login as root user.

   #su

   Then install Bacual and mysql server using command:

   # yum  -y install bacula-director-mysql bacula-console bacula-client bacula-storage-mysql mysql-server mysql-devel

   # yum –y install mariadb-server.86_64 mariadb

   Once the installation is complete, we need to start MySQL service and configure it to automatically start on system reboot with the following command:

   # sudo systemctl start mariadb.service#sudo systemctl enable mariadb.service
   
   

   Now create root password for mysql.

   Note:  i am using password as “centos” wherever i need to setup password. create your own password.

   # mysqladmin -u root password centos

   Next run the following commands one by one to create database and necessary tables for Bacula. Here “-u root” means that login with root account and “-p” means prompt for mysql root password in my case is “centos”.

    

   # /usr/libexec/bacula/grant_mysql_privileges -u root -p
   
   # /usr/libexec/bacula/create_mysql_database -u root -p
   
   # /usr/libexec/bacula/make_mysql_tables -u root -p

    

   Next, we want to run a simple security script that will remove some dangerous defaults and lock down access to our database system a little bit.

   # sudo mysql_secure_installation

    

   The prompt will ask you for your current root password. Enter the password. For the rest of the questions, you should simply hit the Enter key through each prompt to accept the default values. This will remove some sample users and databases, disable remote root logins, and load these new rules so that MySQL immediately respects the changes we have made.

   It will look like this

   

   Now we need to set the password for the Bacula database user.

   Enter the MySQL console, as the root MySQL user:

   # mysql -u root –p

   Enter the MySQL root password.

   Now set the password for the Bacula database user. Use this command, but replace “centos” with strong password:

   # Mariadb [(none)]> UPDATE mysql.user SET password=PASSWORD("centos") WHERE user='bacula';Mariadb [(none)]> FLUSH PRIVILEGES;

    

   Once you’re done here, exit the MySQL prompt:

   # Mariadb [(none)]> exit

   Enable MariaDB to start on boot. Use the following command to do so:

    

   # sudo systemctl enable mariadb

    

   Set Bacula to Use MySQL Library

   By default, Bacula is set to use the PostgreSQL library. Because we are using MySQL, we need to set it to use the MySQL library instead.

   Run this command:

   # sudo alternatives --config libbaccats.s

   You will see the following prompt.

   Enter 1 (MySQL):

   OutputThere are 3 programs which provide 'libbaccats.so'.
   
    Selection    Command
   
   -----------------------------------------------
   
   1           /usr/lib64/libbaccats-mysql.so
   
   2           /usr/lib64/libbaccats-sqlite3.so*+
   
    3           /usr/lib64/libbaccats-postgresql.so 
   
   Enter to keep the current selection[+], or type selection number: 1

   Create Backup and Restore Directories

   Bacula needs a backup directory—for storing backup archives—and restore directory—where restored files will be placed. If your system has multiple partitions, make sure to create the directories on one that has sufficient space.

   Let’s create new directories for both of these purposes:

   # sudo mkdir -p /bacula/backup /bacula/restore

   We need to change the file permissions so that only the bacula process (and a superuser) can access these locations:

   # sudo chown -R bacula:bacula /bacula
   
   # sudo chmod -R 700 /bacula

   Now we’re ready to configure the Bacula Director.

   Configure Bacula Director

   Bacula has several components that must be configured independently in order to function correctly. The configuration files can all be found in the /etc/bacula directory.

   We’ll start with the Bacula Director.
   Open the Bacula Director Configuration file in your favorite text editor. We’ll use vim:

   # sudo vim /etc/bacula/bacula-dir.conf

   Configure Director Resource

   In this file we will Update Bacula server hostname, bacula mysql user password, Bacula console password, Bacula file daemon password etc. Be mindful that you should use a fully qualified domain name for adding clients or simply use the IP address instead. Edit just those words are Bold.

   bacula-dir.conf — Add Director DirAddress

   […]Director {                            # define myself
   Name = bacula-dir
   DIRport = 9101                # where we listen for UA connections
   QueryFile = “/usr/libexec/bacula/query.sql”
   WorkingDirectory = “/var/spool/bacula”
   PidDirectory = “/var/run”
   Maximum Concurrent Jobs = 1
   Password = “centos”      # Console password
   Messages = Daemon

   […]

   # Client (File Services) to backup

   Client {
   Name = bacula-fd
   Address = 192.168.100.146
   FDPort = 9102
   Catalog = MyCatalogPassword = “centos”          # password for FileDaemon
   File Retention = 30 days            # 30 days
   Job Retention = 6 months            # six months
   AutoPrune = yes                     # Prune expired Jobs/Files

   }
   […]

   # Definition of file storage device
   Storage {
   Name = File# Do not use “localhost” here
   Address = 192.168.100.146                # N.B. Use a fully qualified name here
   SDPort = 9103
   Password = “centos”
   Device = FileStorage
   Media Type = File
   }
   […]
   # Generic catalog service
   Catalog {
   Name = MyCatalog
   # Uncomment the following line if you want the dbi driver
   # dbdriver = “dbi:sqlite3”; dbaddress = 127.0.0.1; dbport =
   dbname = “bacula”; dbuser = “bacula“; dbpassword = “centos”

   }
   […]

   Console {
   Name = bacula-mon
   Password = “centos”
   CommandACL = status, .status
   }
   Now move on to the rest of the file. Now we will Update Bacula Console.

   Edit file /etc/bacula/bconsole.conf

   # vi /etc/bacula/bconsole.conf

    

   Director {
   Name = bacula-dir
   DIRport = 9101
   address = localhost
   Password = “centos”
   }

   Update Storage Daemon

   Edit file /etc/bacula/bacula-sd.conf

   # vi /etc/bacula/bacula-sd.conf

    

   Update the password, Find the red lines and delete them, do not uncomment them. Also set your Archive device path.

   Set password here.

   [...]

   Director {

   Name = bacula-dir

   Password = "centos"

   }

    

   Set archive path here .

   Device {

   Name = FileStorage

   Media Type = File

   Archive Device = /mybackup

   LabelMedia = yes;                   # lets Bacula label unlabeled media

   Random Access = Yes;

   AutomaticMount = yes;               # when device opened, read it

   RemovableMedia = no;

   AlwaysOpen = no;

   }

   [...]

    

   Delete these lines in the picture below.

   

   Now we will Update file daemon

   Edit file /etc/bacula/bacula-fd.conf,

   # vi /etc/bacula/bacula-fd.conf

   Update the password.

    

   # List Directors who are permitted to contact this File daemon

   #

   Director {

   Name = bacula-dir

   Password = "centos"

   }

    

   Delete these line in below picture

    

   Now we finished all passwords and address modifications. Next restart all bacula daemons and make them to start automatically on every reboot.

   # systemctl start bacula-dir
   # systemctl start bacula-fd
   # systemctl start bacula-sd
   # systemctl enable bacula-dir
   # systemctl enable bacula-fd
   # systemctl enable bacula-sd

    

   Bacula has been successfully installed and configured. You can now add clients, jobs and volumes by updating the Bacula Config files. Alternatively you can use webmin to make the work simpler. It is quite easier then updating the Config files manually.

   Manage Bacula With Webmin

   Webmin is a web-based interface for system administration for Linux/Unix. Using any modern web browser, you can setup user accounts, Apache, DNS, file sharing and much more.

   Download and install the latest version of webmin.

    

   # wget http://prdownloads.sourceforge.net/webadmin/webmin-1.900-1.noarch.rpm

   Webmin requires some dependencies, so we will install using this command

   #yum -y install perl perl-Net-SSLeay openssl perl-IO-Tty perl-Encode-Detect
   # rpm -Uvh webmin-1.900-1.noarch.rpm
   # systemctl start webmin
   # systemctl enable webmin

   Rule for Firewall.

   Now we will Add rule for Firewall, If we want to access the bacula server from a remote system, allow the webmin port “10000” and bacula ports “9101”, “9102”, “9103” through your firewall. Open terminal and run these commands one by one.

   # sudo firewall-cmd --zone=public --add-port=10000/tcp --permanent
   # sudo firewall-cmd --zone=public --add-port=9101/tcp --permanent
   # sudo firewall-cmd --zone=public --add-port=9102/tcp --permanent
   # sudo firewall-cmd --zone=public --add-port=9103/tcp --permanent

    

   Reload the rules:

   #firewall-cmd --reload

   Access Webmin
   

   Now you can login through webmin by “//http://server-ip-address:10000” or“http://domain-name:10000/”.

   Login to webmin using your root user and its password.

   

   If unable to login. Stop firewall (not recommended just for testing) by this command

   # systemctl stop firewalld

   Then try to login again if logged in then your firewall rules are need to set.

    

   

   Click on the “Bacula Backup System” link. Initially the Bacula server won’t start automatically. To start Bacula server click on “Module Configuration” link on the right of the “Bacula Backup System” page.

   

   

   That’s it. here you can schedule backups according to your desire.

   

   Best of Luck. !!!!

    

    

The post How Install Bacula Backup Server and Client on CentOS appeared first on Linux Windows and android Tutorials.