[Opendnssec-develop] Backup of OpenDNSSEC

[Rickard Bellgrim]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

The only thing you need to backup for OpenDNSSEC is the Enforcer database, right? Since the other files are static information or could be reproduced by the Enforcer once the database is restored.

Is each operation from the Enforcer to the database atomic? So that you can just simple do a copy of the database with cp-command?

The other thing is that your HSM needs to be backed up. E.g. with SCA6000 do you need to copy these files:
/var/opt/sca/keydata/keystore-name.serial-number.{keystore-id}.conf
/var/opt/sca/keydata/keystore-name.serial-number.{keystore-id}/object.db
/var/opt/sca/keydata/keystore-name.serial-number.{keystore-id}/user.db

But these are Berkeley DB files. Can you just copy these as well? Did try the db4.6_hotbackup command, but it could not find the db files although they are present.

// Rickard

-----BEGIN PGP SIGNATURE-----
Version: 9.8.3 (Build 4028)
Charset: utf-8

wsBVAwUBSwF4peCjgaNTdVjaAQhoXAgAmvjK0aaPZFDP5TcE1sB8uCOjFIzl0Gv6
U3HGzSEn0U9ejl2WeJ1RBcNnKSg01SKdjH8Y/vUNfc1Mff8yn0s0te78X2iq4h7V
ouCcD4/uKEZJ8TG/HLGxLEcT0J63kOVVuZTCR4crZpUf5PLjzHL9Eq3VAUx39OQa
C2oVm0vpsRA3yCcJwInST3phDWW0NQc1jzqsQCuo/hrzJObsHtcduuduXOjcH3xt
L8pfVRzVteZA4Vwnzc2ivISUoIHmpoGZhnNWZkjUl1vRkHvJeD7JNcTyYq2CIvbc
vajAyiCDrtF4jWRu3kL2QxFiu+16jxIbg28r0g9ItMpL/tFApt10Bg==
=Eu1y
-----END PGP SIGNATURE-----


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20091116/161e404d/attachment.htm>