Kuna iya yin kwafin ajiya na kwano da aka ɓoye a matsayin abu ɗaya, ko ku haɗa shi kuma ku yi kwafin fayilolin da ke ciki. Dukansu suna wucewa ta VPN cikin sauƙi, kuma nan ne kamancin ya ƙare. Suna dawo da abubuwa daban-daban, sun dogara da makullai daban-daban, suna cin adadin sarari daban-daban, kuma suna gazawa ta hanyoyi daban-daban lokacin da wani ke buƙatar bayanan a dawo. Zaɓi abin da za a dawo da shi da farko, sannan jigilar, sannan ɓoyewar kwafin da aka ajiye. Jerin da ke ƙasa yana bin wannan tsari, domin kusan kowane rikici kan kwafin ajiya da gaske sabani ne kan wanne daga waɗannan uku aka yanke shawara da farko.

Abubuwa biyu, siffofin dawowa biyu

Kwafin ajiya na hoto yana dawo da kwano: kuna samun ƙarar da aka ɓoye a baya, kuma har yanzu kuna buƙatar kayan dawowarta don buɗe shi. Kwafin ajiya na fayiloli yana dawo da fayiloli da bishiyoyin manyan fayiloli, kuma duk wani ɓoye da ke kare su mallakin ma'ajiyar kwafin ajiya ne ba na asalin kwanon ba. Kwafi na yau da kullum zuwa babban fayil na nesa shi ne yanayi na uku, kuma yana gadon duk wata kariya da wannan babban fayil ɗin ke da ita bisa ga kuskure.

ObjectWhat a restore gives youWhere the encryption question lands
Encrypted container imageThe volume, still lockedThe container format and its recovery key material
Mounted files into a backup toolSelected files and metadataThe backup repositorys own keys and design
Plain copy to a remote folderWhatever the copy process keptWhatever protects that storage afterwards

Layin tsakiya shi ne wanda mutane suke karantawa ba daidai ba. Zai iya zama kyakkyawan tsari: shirin kwafin ajiya yana karanta rubutu a bayyane a cikin gida kuma yana rubuta ma'ajiya mai ɓoye kuma mai tabbatarwa. Sa'an nan tsaron sa ya dogara kan wannan shirin da shaidar shigarsa, ba kan kalmar sirrin asalin kwanon ba, kuma bai kamata a kwatanta su biyun kamar suɗa ɗaya ne ba.

Dubawa 1: me dawo da bayanai ya sake ginawa?

Yi tambayar a siffar dawowa, ba kwafin ajiya ba. Idan buƙatar ita ce “dawo da wannan sabis ɗin a wata na'ura”, hoto tare da kayan dawowarsa amsa ce mai daidaituwa. Idan buƙatar ita ce “dawo da takardar lissafin kuɗi ta Maris”, dawo da hoton gigabyte da yawa don fitar da fayil ɗaya hanya ce mai tsada ta amsawa. Dukansu halaltattun hanyoyin dawowa ne, kuma ba kasafin kuɗi ne da za a iya musanya ba. Shirin da ya ambaci ɗaya kawai zai ga an gwada shi da ɗayan a ƙarshe.

Rubuta makasudin dawowa a cikin shirin: dukan ƙarar, bishiyar manyan fayiloli, ko fayiloli ɗaya-ɗaya. Sannan lura da irin bayanan da dole su yi tafiya tare da su, domin mallaka, izini, sifofi da aka faɗaɗa da tambarin lokaci wani ɓangare ne na dawowa a matakin fayiloli kuma galibi suna ɓacewa a hanyoyin aiki na kwafi waɗanda suka yi kama da sun isa yayin gwaji.

Kuma yanke shawara wanene zai yi dawowar. Ma'ajiyar fayiloli da kowane mai aiki zai iya haɗawa wata sigar shiga ce daban da hoton da ke buƙatar kasancewar mai riƙe da maɓalli, kuma babu wanda ya fi ɗaya ta atomatik. Abin da ke da muhimmanci shi ne zaɓin ya kasance da gangan kuma a rubuce.

Dubawa 2: me ke kare kwafin da aka ajiye?

VPN yana kare wani ɓangaren jigila. Bai ce komai ba game da kwafin da aka ajiye bayan jigilar ta ƙare, kuma “ya wuce ta cikin rami” ba magana ba ce kan iyawar mai aikin kwafin ajiya na karanta bayananka. Idan wani ne ke tafiyar da gefen nesa, tambaya ita ce abin da za su iya karantawa, ba wai an ɓoye hanyar ba.

Ga hoto, wannan yana nufin kare kayan maɓallin kwanon daban da hoton kansa. Idan aka rasa kai, an rasa ƙarar, don haka yi kwafin ajiyar kai a wurin da hoton ba ya nan:

cryptsetup luksHeaderBackup /dev/vg0/data --header-backup-file data-header.img
cryptsetup luksDump /dev/vg0/data | head -20

Ga ma'ajiyar fayiloli, tabbatar da cewa kayan aikin yana ɓoye kuma yana tabbatar da abun ciki da bayanan kafin su bar na'ura, kuma gano wanda ke riƙe da makullai. takardun ƙira na Restic a bayyane yake cewa yana ɗaukan na'urar tushe amintacciya kuma ɓoyewa ba ya hana wanda ke da damar ajiya share kwafin ajiya. Duk waɗannan gargaɗin biyu suna da muhimmanci: ma'ajiya na iya zama a asirce kuma har yanzu a lalata ta.

Dubawa 3: shin kwafin yana daidaitacce?

Kwafin ajiya da ke ɗaukar tsarin fayiloli mai canzawa kwafi ne, ba matsayin dawowa ba. Ga hoto, yi amfani da hanyar da kayan aikin ƙara ya goyi bayan don hoton tsayayye, wanda yawanci yana nufin aikin hoto ko cire haɗi maimakon karanta babban fayil yayin da yake canzawa:

lvcreate -L 5G -s -n data-snap /dev/vg0/data
cryptsetup open /dev/vg0/data-snap data-snap --readonly

Ga fayilolin da aka haɗa, yi amfani da hanyar daidaito da aikace-aikacen ya goyi bayan ga rumbunan bayanai masu rai da sauran bayanan da aka daidaita. Kwafi a matakin tsarin fayiloli da matsayin dawowa mai daidaito da aikace-aikacen kwatanci ne daban, kuma bambancin yana bayyana ne kawai lokacin da ka yi ƙoƙarin fara aikace-aikacen daga kwafin da aka dawo da shi.

Riƙe kayan dawowa a wata hanya mai kariya mai zaman kanta. Rasa asalin na'ura bai kamata ya kuma rasa shaidar shiga guda ɗaya da ke buɗe kwafin ajiyarta ba, kuma wannan shi ne ainihin abin da ke faruwa lokacin da fayil ɗin maɓalli ke zaune a kan ƙarar da ake kwafa. Gwada wannan rabuwa da gangan: dawo a kan na'urar da ba ta taɓa ganin asalin ba, ta amfani da abin da shirin ya ce akwai.

Dubawa 4: shin gano canje-canje yana aiki ga wannan abu?

Kwano da aka ɓoye yana kama da babban fayil ɗaya mara bayyana ga yawancin kayan aikin jigila, don haka ƙaramin gyare-gyaren rubutu a bayyane na iya haifar da babban sake karantawa ko cikakken sake lodawa dangane da kayan aiki da tsari. Rarraba guntu mai canza girma da cire kwafi, kamar yadda restic ke rubutawa, na iya rage hakan, amma siffa ce ta wannan kayan aikin ba na kwanonin da aka ɓoye gaba ɗaya ba.

Auna maimakon ɗauka. Kwatanta gudu na farko da gudu na biyu bayan ƙaramin canji marar lahani, kuma rubuta bayt ɗin da aka watsa da kuma lokacin da ya wuce. Ajiye sanannen kwafin ajiya mai kyau yayin da kake gwaji, domin gwaji kada ya cinye matsayin dawowarka guda ɗaya.

Sannan kammala jerin da gwajin guda ɗaya da ke da muhimmanci: dawowa ba tare da asalin na'urar ba. Buɗe kwanon da aka dawo da shi, ko dawo da zaɓaɓɓun fayiloli tare da bayanansu, kuma tabbatar cewa aikace-aikacen ko mai amfani zai iya amfani da sakamakon. Jigila mai sauri, mai kyau ɓoye da ba zai iya amsa wannan gwajin ba kwafi ne na bayananka, ba kwafin ajiya ba.

Labarai masu alaƙa