Ukusefa ikhophi yekhontheyna noma amafayela ayo? Nquma ngokuma kokubuyisela
Amaqoqo wokulondoloza aselevini lesithombe naselevini lamafayela abuyisela izinto ezahlukene futhi ancike kukhiye abehlukene. Fanisa into egciniwe nokubuyisela okudinga ngempela.
Ungasefa ikhophi yekhontheyna ebethelwe njengento eyodwa, noma uyixhume futhi usefe ikhophi yamafayela angaphakathi. Kokubili kudlula ku-VPN ngokukhululeka, futhi yilapho ukufana kuphela khona. Kubuyisela izinto ezahlukene, kuncike kukhiye abehlukene, kudla izilinganiso ezahlukene zesikhala, futhi kwehluleka ngezindlela ezahlukene lapho othile edinga idatha ibuyile. Khetha into yokubuyisela kuqala, bese ukuthutha, bese ukubethelwa kwekhophi egciniwe. Uhlu lokuhlola ngezansi lulandela lokho kuhleleka, ngoba cishe yonke ingxabano ngekhophi yokulondoloza ngempela ingukungavumelani ngokuthi ikuphi kwalezi zinqumo ezintathu okwanqunywa kuqala.
Izinto ezimbili, izimo ezimbili zokubuyisela
Ikhophi yokulondoloza yezinga lesithombe ibuyisela ikhontheyna: uthola ivolumu ebethelwe emuva futhi usadinga impahla yayo yokubuyisela ukuze uyivule. Ikhophi yezinga lamafayela ibuyisela amafayela nemithi yemikhombandlela, futhi noma yikuphi ukubethelwa okubavikelayo kuyisici sedepho yekhophi yokulondoloza, hhayi sekhontheyna yokuqala. Ikhophi elula efoldeni ekude iyisimo sesithathu, futhi izuza njengefa isivikelo lelo folda elinaso ngengozi.
| Object | What a restore gives you | Where the encryption question lands |
|---|---|---|
| Encrypted container image | The volume, still locked | The container format and its recovery key material |
| Mounted files into a backup tool | Selected files and metadata | The backup repositorys own keys and design |
| Plain copy to a remote folder | Whatever the copy process kept | Whatever protects that storage afterwards |
Umugqa ophakathi uwona abantu abawufunda kabi. Kungaba ukwakheka okuhle impela: uhlelo lwekhophi lufunda umbhalo osobala endaweni futhi lubhala idepho ebethelwe neqinisekisiwe. Khona-ke ukuphepha kuncike kulolo hlelo nasezinkombeni zalo, hhayi kwiphasiwedi yekhontheyna yokuqala, futhi kokubili akufanele kuchazwe njengokulawula okufanayo.
Ukuhlola 1: yini okumele ukubuyisela kuyakhe kabusha?
Buza umbuzo ngendlela yokubuyisela, hhayi yekhophi. Uma isidingo sithi “buyisa le nsiza kwenye i-host”, isithombe kanye nempahla yaso yokubuyisela iyimpendulo ehambisanayo. Uma isidingo sithi “buyisa ispredishithi yezezimali ka-Mashi”, ukubuyisela isithombe samagigabhayithi ambalwa ukuze kukhishwe ifayela elilodwa iyimpendulo ebizayo. Kokubili ukubuyisela okusemthethweni, futhi akuzona izabelomali ezingashintshana. Uhlelo olusho olulodwa kuphela luzohlolwa ngolunye ekugcineni.
Bhala umgomo wokubuyisela ohlelweni: ivolumu yonke, umthi wemikhombandlela, noma amafayela ngamanye. Bese uphawula ukuthi iyiphi imethadatha okumele ihambe nawo, ngoba ubunikazi, izimvume, izici ezinwetshiwe kanye nezimpawu zesikhathi ziyingxenye yokubuyisela kwezinga lamafayela futhi zivame ukulahleka emikhubeni yomsebenzi esekelwe ekhopyweni eyayibonakala yanele ngesikhathi sokuhlola.
Nquma futhi ukuthi ngubani owenza ukubuyisela. Idepho yezinga lamafayela okungase kuyixhume noma yimuphi umsebenzi iyimodeli yokufinyelela ehlukile kusithombe esidinga ukuba khona komnikazi wokhiye, futhi akukho okungcono ngokuzenzakalela. Okubalulekile ukuthi ukukhetha kube ngamabomu futhi kubhalwe phansi.
Ukuhlola 2: yini evikela ikhophi egciniwe?
I-VPN ivikela ingxenye yokuthutha. Ayisho lutho ngekhophi egciniwe uma ukudluliselwa sekuphelile, futhi “kudlule emhubeni” akusona isitatimende mayelana nekhono lomsebenzi wekhophi lokufunda idatha yakho. Uma uhlangothi olukude luqhutshwa omunye umuntu, umbuzo ngukuthi bangafunda ini, hhayi ukuthi uxhumano lwalubethelwe yini.
Esithombeni lokho kusho ukuvikela impahla yokhiye wekhontheyna ngokwehlukile kusithombe uqobo. Ukulahlekelwa yikhanda ukulahlekelwa ivolumu, ngakho sefa ikhophi yekhanda endaweni lapho isithombe singekho.
cryptsetup luksHeaderBackup /dev/vg0/data --header-backup-file data-header.img
cryptsetup luksDump /dev/vg0/data | head -20Kudepho yezinga lamafayela, qinisekisa ukuthi ithuluzi libethela futhi liqinisekisa okuqukethwe nemethadatha ngaphambi kokuba zishiye i-host, futhi uthole ukuthi ubani ophethe okhiye. Imibhalo yokwakheka ye-Restic isho ngokusobala ukuthi icabanga i-host yomthombo ethembekile nokuthi ukubethelwa akuvimbeli umuntu onokufinyelela esitolo ukuthi asuse amakhophi. Zombili izexwayiso zibalulekile: idepho ingaba yimfihlo futhi isabhidlizwe.
Ukuhlola 3: ingabe ikhophi iyahambisana?
Ikhophi yokulondoloza ethwebula isistimu yamafayela eshintshayo iyikhophi, hhayi iphuzu lokubuyisela. Esithombeni sebenzisa indlela esekelwayo yethuluzi levulumu ukuze uthole isithombe sesikhashana esizinzile, okumvamisa kusho umsebenzi wesithombe sesikhashana noma ukuxhuma, hhayi ukufunda ifayela elikhulu ngenkathi lishintsha:
lvcreate -L 5G -s -n data-snap /dev/vg0/data
cryptsetup open /dev/vg0/data-snap data-snap --readonlyKumafayela axhunyiwe, sebenzisa inqubo yokuhambisana esekelwayo yohlelo lwezinhlelo zedatha ezisebenzayo kanye nedatha enye exhumanisiwe. Ikhophi yezinga lesistimu yamafayela kanye nephuzu lokubuyisela elihambisana nohlelo kuyizincazelo ezahlukene, futhi umehluko ubonakala kuphela lapho uzama ukuqala uhlelo kusukela ekhopyweni ebuyisiwe.
Gcina impahla yokubuyisela emzileni ovikelwe ozimele. Ukulahlekelwa umshini wokuqala akufanele neze kusho nokulahlekelwa isiqinisekiso esisodwa esivula ikhophi yawo, futhi yilokho kanye okwenzeka lapho ifayela lokhiye lihlala kulelo volumu elisefwa ikhophi yalo. Hlola lokho kwehlukanisa ngamabomu: buyisa ku-host engakaze ibone eyokuqala, usebenzisa kuphela lokho uhlelo oluthi kuyatholakala.
Ukuhlola 4: ingabe ukutholwa kwezinguquko kuyasebenza kule nto?
Ikhontheyna ebethelwe ibonakala njengefayela elilodwa elikhulu elingabonakali kumathuluzi amaningi okudlulisa, ngakho ukuhlelwa okuncane kombhalo osobala kungabangela ukufundwa kabusha okukhulu noma ukulayishwa kabusha okuphelele kuye ngethuluzi nefomethi. Ukuhlukanisa izingxenye zosayizi oshintshayo nokukhipha okuphindwe kabili, njengoba i-restic ibhala, kungakunciphisa lokho, kodwa kuyisici salelo thuluzi hhayi samakhontheyna abethelwe ngokujwayelekile.
Linganisa esikhundleni sokucabanga. Qhathanisa ukugijima kokuqala nokwesibili ngemuva koshintsho oluncane olungenangozi, futhi bhala amabhayithi adlulisiwe kanye nesikhathi esidlulile. Gcina ikhophi eyaziwayo kahle ngesikhathi uzama, ukuze ukuhlola kungase kudle iphuzu lakho lokubuyisela elilodwa.
Bese uqeda uhlu ngokuhlola okuwukuphela okubalulekile: ukubuyisela ngaphandle komshini wokuqala. Vula ikhontheyna ebuyisiwe, noma buyisa amafayela akhethiwe kanye nemethadatha yawo, futhi qinisekisa ukuthi uhlelo noma umsebenzisi angawusebenzisa umphumela. Ukudluliswa okusheshayo nokubethelwe kahle okungakwazi ukuphendula lokho kuhlola kuyikhophi yedatha yakho, hhayi ikhophi yayo yokulondoloza.