Backups
Create a Golden Image – use make_tape_recovery to create a bootable system recovery tape for an LVM or whole disk system while it is up and running. When a system has a logical volume layout, the recovery tape will only include data from the root volume group, plus data from any Non-root volume group containing /usr. Data not in the root volume group must be backed up and recovered using normal backup utilities. This golden image can be used to restore a non-bootable system with little or not user intervention, restore a system in the event of a hardware failure, clone software from one system to another.
Make_recovery is part of the Ignite-UX product. It can be downloaded from www.software.hp.com/products/IUX/download.html. More detailed installation instructions can be found atwww.software.hp.com/products/IUX/install_instructions.html.
Installing Ignite-UX
- ____ Downloaded software from www.software.hp.com/products/IUX/download.html
- ____ Copy ignite11_11.00.tar to /tmp
- ____ /usr/bin/bdf – Make sure you have at least 50 mb of free space in /opt
- ____ /usr/sbin/swinstall -s /conv/tara/ignite11_11_00.tar \*
Create a golden image
- ____/opt/ignite/bin/make_tape_recovery -AvC -d /dev/rmt/0m
Physical Security
It is extremely important that a unix server be placed in a secure environment. It is a fact that anyone who has physical access to the machine can fairly easily gain root access.
- ____ The server should be installed in a locked environmentally controlled data center with restricted access to the server.
- ____ If possible the data center should have cameras installed to monitor all activity.
- ____ The keyboard should be situated away from any cameras, windows or prying eyes.
- ____ The system should be attached to a UPS with monitoring software that will shutdown the server when power to the UPS has been interrupted.
- ____ Backup tapes should be kept in a secure environment.
No comments