GIS.lab Unit system rollback

[imincik]

GIS.lab Unit system rollback using LVM snapshots. $ lvconvert --merge

LVM installation

• /boot - ex4
• VG: vgmain
• LV: root, swap, storage
• snapshot name format: root_YYYYMMDD_HH_MM_SS+12characters_long_name

  Required tasks

• move PostgreSQL data (/var/lib/postgresql) to /storage/applications/posgresql
• move /var/log/syslog to /storage/log/syslog
• move /opt/gislab/client-* to /storage/gislab
• move Apt cache to /storage
• create new GIS.lab user's home directories in /storage/home (leave 'vagrant' or 'ubuntu' accounts in /home)
• gislab-adduser: do not fail if users's data already exists (home, storage, postgresql)

  gislab-snapshot command

• how to backup /boot ? (see [1])
• first check if system is installed on LVM
• options -l list snaps, -c create, -d delete snap, -r restore from selected snap
• inform user that restore will be done after machine reboot

See:

• 1 - http://blog.carlos-spitzer.com/2014/07/22/managing-rhel-6-lvm-snapshots-for-secure-software-updates/

[mpastor]

The following characters are valid for VG and LV names: a-z A-Z 0-9 + _ . -

[mpastor]

It's not possible to create/move snapshot to another VG.

[imincik]

Storage of user accounts and PostgreSQL cluster was moved to '/storage' in 51a39f9c57488e99b90a1364823da0bd02274413.

[mpastor]

Security issue: if user 'user1' is created after snapshot is taken and system is reverted from such snapshot, newly created user 'user2' can access users1's home directory, because he got the same UID as user1.

Solution is to check the owner of home dirs during booting (e.g. rc.local) and change owner to 'root' if directory owner is UNKNOWN.

[imincik]

I am thinking about moving LDAP database to /storage/applications/ldap to prevent loosing users on revert.

[imincik]

LDAP and Apt moved to /storage

[imincik]

I have moved not merged file (gislab-snapshot) from @mpastor's lvm branch to updated 'lvm-snapshot' branch.