rsync-Server unter CentOS 8.x einrichten
Betreiben wir z.B. ein eigenes Repository, so bietet es sich an anderen den Zugang auch via rsync zur Verfügung zustellen, so dass diese wiederum die Inhalte mit Hilfe des Befehles/client rsync spiegeln können.
Eine genaue Beschreibung dazu findet man auf der rsync web page bzw. auch auf der gut beschriebenen Wikipedia-Seite.
Installation und Konfiguration
manuelle Weg
rsync-Daemon installieren
Als erstes installieren wir uns die für den rsyslog-Daemon-Server notwendigen Pakete via dnf.
# dnf install rsync-daemon rsync -y
Bei Bedarf informieren wir was bei der Installation der einzelnen Pakete im System installiert wurde.
# rpm -qil rsync-daemon # rpm -qil rsync
rsync-Daemon konfigurieren
Der rsync-Daemon wird über seine Konfigurationsdatei /etc/rsyncd.conf konfiguriert. Alle Konfigurationsparameter und einige Beispiele finden sich in der man-page zur Konfigurationsdatei.
Bei Bedarf lohnt sich ein Blick in diese Datei sicherlich!
# man /etc/rsyncd.conf
Wir legen uns also unsere individuelle Konfigurationsdatei an.
# vim /etc/rsyncd.conf
- /etc/rsyncd.conf
################################################################################ # # # Django : 2020-07-04 - Musterkonfiguration rsync-Daemon unter CentOS 8 # # # ################################################################################ # Eine Aufstellung aller möglichen Variablen findet man in der man-page zu # rsyncd.conf : # man rsyncd.conf # Auf der Webseite https://dokuwiki.nausch.org/doku.php/centos:rsynd_c8 # findet man darüber hinaus noch viele Erklärungen zur Konfiguration des # rsyn-Daemon. ################################################################################ ## GLOBAL PARAMETERS # # This parameter allows you to specify a "message of the day" to display to # clients on each connect. This usually contains site information and any # legal notices. The default is no motd file. # motd file # This parameter tells the rsync daemon to write its process ID to that file. # If the file already exists, the rsync daemon will abort rather than overwrite # the file. # pid file = /var/run/rsyncd.pid # Specifies the default port the daemon will listen (defaults to 873). # port 873 # Defines the default IP address where the daemon will listening. The default # is listening on all IPv4 and IPv6-adresses. # address # This parameter specifies the user name or user ID that file transfers # to and from that module should take place as when the daemon was run as # root. In combination with the "gid" parameter this determines what file # permissions are available. The default when run by a super-user is to # switch to the system’s "nobody" user. The default for a non-super-user is # to not try to change the user. See also the "gid" parameter. uid = nobody # This parameter specifies one or more group names/IDs that will be used when # accessing the module. The first one will be the default group, and any extra # ones be set as supplemental groups. # You may also specify a "*" as the first gid in the list, which will be # replaced by all the normal groups for the transfer’s user (see "uid"). The # default when run by a super-user is to switch to your OS’s "nobody" (or # perhaps "nogroup") group with no other supplementary groups. The default for # a non-super-user is to not change any group attributes (and indeed, your OS # may not allow a non-super-user to try to change their group settings). gid = nobody # When the "log file" parameter is set to a non-empty string, the rsync daemon # will log messages to the indicated file rather than using syslog. This is # particularly useful on systems (such as AIX) where syslog() doesn’t work for # chrooted programs. The file is opened before chroot() is called, allowing it # to be placed outside the transfer. If this value is set on a per-module basis # instead of globally, the global log will still contain any authorization # failures or config-file error messages. # If the daemon fails to open the specified file, it will fall back to using # syslog and output an error about the failure. # log file = /var/log/rsyncd.log # This parameter allows you to specify the syslog tag to use when logging # messages from the rsync daemon. The default is "rsyncd". # This setting has no effect if the "log file" setting is a non-empty string # (either set in the per-modules settings, or inherited from the global # settings). # syslog tag = rsyncd # This parameter allows you to specify the syslog facility name to use when # logging messages from the rsync daemon. You may use any standard syslog # facility name which is defined on your system. # Common names are auth, authpriv, cron, daemon, ftp, kern, lpr, mail, news, # security, syslog, user, uucp, local0, local1, local2, local3, local4, local5, # local6 and local7. The default is daemon. This setting has no effect if the # "log file" setting is a non-empty string (either set in the per-modules # settings, or inherited from the global settings). # syslog facility = daemon # This parameter enables per-file logging of downloads and uploads in a format # somewhat similar to that used by ftp daemons. The daemon always logs the # transfer at the end, so if a transfer is aborted, no mention will be made in # the log file. # transfer logging = yes # This parameter allows you to specify the maximum number of simultaneous # connections you will allow. Any clients connecting when the maximum has been # reached will receive a message telling them to try later. The default is 0, # which means no limit. A negative value disables the module. # max connections = 0 # This parameter specifies the directory in the daemon’s filesystem to make # available in this module. You must specify this parameter for each module # in rsyncd.conf. # path = /home/ftp # This parameter takes a space-separated list of daemon exclude patterns. As # with the client --exclude option, patterns can be qualified with "- " or # "+ " to explicitly indicate exclude/include. Only one "exclude" parameter # can apply to a given module. # exclude = lost+found/ # If "use chroot" is true, the rsync daemon will chroot to the "path" before # starting the file transfer with the client. This has the advantage of extra # protection against possible implementation security holes, but it has the # disadvantages of requiring super-user privileges, of not being able to # follow symbolic links that are either absolute or outside of the new root # path and of complicating the preservation of users and groups by name # See rsyncd.conf man page for more options. # use chroot = yes # This parameter allows you to override the clients choice for I/O timeout for # this module. Using this parameter you can ensure that rsync won’t wait on a # dead client forever. The timeout is pecified in seconds. A value of zero # means no timeout and is the default. A good choice for anonymous rsync # daemons may be 600 (giving a 10 minute timeout). timeout = 600 # This tells the rsync daemon to completely ignore files that are not readable # by the user. This is useful for public archives that may have some non-read- # able files among the directories, and the sysadmin doesn’t want those files # to be seen at all. # ignore nonreadable = yes # This parameter allows you to select filenames based on wildcard patterns that # should not be compressed when pulling files from the daemon (no analogous # parameter exists to govern the pushing of files to a daemon). Compression is # expensive in terms of CPU usage, so itis usually good to not try to compress # files that won’t compress well, such as already compressed files. # The "dont compress" parameter takes a space-separated list of case-insensi- # tive wildcard patterns. Any source filename matching one of the patterns will # not be compressed during transfer. # dont compress = *.gz *.tgz *.zip *.z *.Z *.rpm *.deb *.bz2 ################################################################################ ## MODULES # # A module begins with the name of the module in square brackets and continues # until the next module begins. Modules contain parameters of the form # "name = value". # This parameter specifies the directory in the daemon’s filesystem to make # available in this module. You must specify this parameter for each module in # rsyncd.conf. # path = /srv/rsync-path # This parameter specifies a description string that is displayed next to the # module name when clients obtain a list of available modules. # The default is no comment. # comment = # This parameter determines whether this module is listed when the client asks # for a listing of available modules. In addition, if this is false, the daemon # will pretend the module does not exist when a client denied by "hosts allow" # or "hosts deny" attempts to access it. Realize that if "reverse lookup" is # disabled globally but enabled for the module, the resulting reverse lookup # to a potentially client-controlled DNS server may still reveal to the client # that it hit an existing module. The default is for modules to be listable. # list = yes # This parameter allows you to specify a list of comma- and/or whitespace- # separated patterns that are matched against a connecting clients hostname # and IP address. If the pattern matches then the connection is rejected. # hosts deny = 192.168.1.0/24 # This parameter allows you to specify a list of comma- and/or whitespace- # separated patterns that are matched against a connecting client’s # hostname and IP address. If none of the patterns match, then the connec- # tion is rejected. # hosts allow = *.nausch.org # Module examples: # [ftp] # path = /var/ftp/./pub # comment = whole ftp area (approx 6.1 GB) # # [object] # max connections = 2 # path = /srv/node/ # read only = false # write only = no # list = yes # incoming chmod = 0644 # outgoing chmod = 0644 # lock file = /var/lock/object.lock # hosts allow = *.nausch.org #[REPO] #path = /srv/public/nausch.org/ #comment = repo.nausch.org #allow = 88.217.171.167 [demo] max connections = 2 path = /var/lib/tftpboot/ comment = Demo für rsync Daemon Artikel in Djangos WIKI list = yes hosts allow = 10.0.0.0/24
rsynd.service starten
Nun ist es an der Zeit unseren rsync-Daemon Server das erste mal mit Hilfe von systemd zu starten.
# systemctl start rsyncd.service
Im Syslog wird uns der Start des Daemon entsprechend protokolliert.
Jul 5 00:03:30 vml000190 rsyncd[5920]: rsyncd version 3.1.3 starting, listening on port 873
Ob auf unserem Server nun der TFTP Server läuft und auf Port 69 horcht können wir bei Bedarf auch noch überprüfen.
# netstat -tulpen | grep 873
tcp 0 0 0.0.0.0:873 0.0.0.0:* LISTEN 0 428589 5920/rsync tcp6 0 0 :::873 :::* LISTEN 0 428590 5920/rsync
Ebenso kann man den Status des Daemons mit Hilfe des Befehls systemctl abfragen.
# systemctl status rsyncd.service
● rsyncd.service - fast remote file copy program daemon
Loaded: loaded (/usr/lib/systemd/system/rsyncd.service; disabled; vendor preset: disabled)
Active:active (running) since Sun 2020-07-05 00:03:30 CEST; 3min 48s ago
Main PID: 5920 (rsync)
Tasks: 1 (limit: 12494)
Memory: 264.0K
CGroup: /system.slice/rsyncd.service
└─5920 /usr/bin/rsync --daemon --no-detach
Jul 05 00:03:30 vml000190.dmz.nausch.org systemd[1]: Started fast remote file copy program daemon.
Jul 05 00:03:30 vml000190.dmz.nausch.org rsyncd[5920]: rsyncd version 3.1.3 starting, listening on port 873
Den automatischen Start unseres TFTP-Serverdienstes aktivieren wir für den Systemstart nun noch mit:
# systemctl enable rsyncd.service
Created symlink /etc/systemd/system/multi-user.target.wants/rsyncd.service → /usr/lib/systemd/system/rsyncd.service.
Ob der rsyncd-Service gestartet wird können wir bei Bedarf wie folgt abfragen:
# systemctl is-enabled rsyncd.service
enabled
Firewall-Daemon anpassen
Damit die Clients später Verbindungsanfragen zu dem geöffneten Port tftp/873unseres rsync-Daemon stellen können, müssen wir für diese noch Änderungen am Paketfilter firewalld vornehmen.
Unter CentOS 8 wird als Standard-Firewall die dynamische firewalld verwendet. Ein großer Vorteil der dynamischen Paketfilterregeln ist unter anderem, dass zur Aktivierung der neuen Firewall-Regel(n) nicht der Daemon durchgestartet werden muss und somit alle aktiven Verbindungen kurz getrennt werden. Sondern unsere Änderungen können on-the-fly aktiviert oder auch wieder deaktiviert werden.
Im ersten Konfigurationsbeispiel werden wir nun den Port 873/tcp für alle öffnen, also unabhängig von der source-IP-Adresse können alle vbeliebeigen clients Daten synchronisieren. Mit Hilfe des Programms firewall-cmd legen wir nun eine permanente Regel in der Zone public für den Port *873/tcp an.
# firewall-cmd --permanent --zone=public --add-port=873/tcp
success
Anschliessend können wir den Firewall-Daemon einmal durchstarten und überprüfen, ob die Regeln auch entsprechend unserer Definition, gezogen haben.
# firewall-cmd --reload
success
Zum Abfragen ob der Port 873/tcp in der Zone public geöffnet ist verwenden wir folgenden Befehl:
# firewall-cmd --zone=public --list-ports
873/tcp
Wollen wir den Zugriff auf einen spezifischen Host beschränken, werden wir das im zweiten Beispile nun wie folgt konfigurieren.
# firewall-cmd --permanent --zone=public --add-rich-rule="rule family="ipv4" source address="88.217.171.167/32" port protocol="tcp" port="873" destination address="10.0.0.190/32" accept"
Hiermit wird also der Zugriff nur für den Host mit der IP-Adresse 88.217.171.167/32 gestattet, alle anderen Hostanfragen werden geblockt.
Nun können wir den Firewall-Daemon einmal durchstarten und überprüfen, ob die Regeln auch entsprechend unserer Definition, gezogen haben.
# firewall-cmd --reload
success
Zum Abfragen ob unsere rich-rule gezogen hat, so dass ausschließlich der Host mit der IP-Adresse 88.217.171.167/32 den Zielhost 10.0.0.190/32 auf dem Port 873/tcp in der Zone public erreichen kann, erfahren wir wie folgt:
# firewall-cmd --zone=public --list-rich-rules
rule family="ipv4" source address="88.217.171.167/32" destination address="10.0.0.190/32" port port="873" protocol="tcp" accept
automatisierter Weg mit Hilfe von Ansible
Da wir aber in unserer Produktiven Umgebung alle Server, Dienste und Services mit Hilfe von Ansible werden wir natürlich auch für unseren rsync-Daemon dies über eine entsprechende Ansible-Rolle ansible-role-rsync.tar.gz1) erledigen lassen.
Wir holen uns also das Verzeichnis mit der role auf unseren Rechner.
$ wget https://dokuwiki.nausch.org/lib/exe/fetch.php/centos:pxe_c8:ansible-role-rsync.tar.gz -O ansible-role-rsync.tar.gz
Da wir bei der Installation und Konfiguration von Ansible bereits das Ansible Directory Layout erzeugt hatten, brauchen wir nur noch das heruntergeladene Archiv an Ort und Stelle entpacken.
$ tar -xvf ansible-role-rsync.tar.gz -C ~/ansible/roles/
Jetzt brauchen wir nur noch die Rolle unserem Server rsync-server zuordnen.
$ vim ~/ansible/rsync.yml
- ~/ansible/rsync.yml
--- # Start des Playbooks für den rsyncd-Server - hosts: rsync-server roles: #- base # Basiskonfiguration (User anlegen) #- chrony # Installation und Konfiguration NTP-Client - rsync # Installation und Konfiguration rsync-Daemon ... # Ende des Playbooks für den rsyncd-Server
Bevor wir nun das Playbook ausführen, passen wir noch ggf. die Firewall-Einstellungen an. Beispiele dazu sind im entsprechenden task bereits vermerkt.
$ vim ~/ansible/roles/rsync/tasks/firewall.yml
- ~/ansible/roles/rsync/tasks/firewall.yml
--- - name: "*{{ daemon_name }}* : Firewall-Daemon für den {{ daemon_name }} anpassen" firewalld: #https://docs.ansible.com/ansible/latest/modules/firewalld_module.html zone: public port: 873/tcp permanent: yes immediate: yes state: enabled # #zone: public #rich_rule: rule family="ipv4" source address="88.217.171.167/32" port protocol="tcp" port="873" destination address="10.0.0.190/32" accept #permanent: yes #immediate: yes #state: enabled
Die Definition der Parameter für den rsyncd erfolgt über die Variablen-Datei ~/ansible/roles/rsync/vars/main.yml
$ vim ~/ansible/roles/rsync/vars/main.yml
- ~/ansible/roles/rsync/vars/main.yml
--- # Definition der rollenspezifische Variablen zum rsync Daemon daemon_name : rsyncd config_file : /etc/rsyncd.conf config_backup_file : /etc/rsyncd.conf.orig template_file : templates/rsyncd.conf.j2 # rsyncd config-options rsyncd_motd : "# motd file" rsyncd_pid : "# pid file = /var/run/rsyncd.pid" rsyncd_port : "# port 873" rsyncd_address : "# address" rsyncd_uid : "uid = nobody" rsyncd_gid : "gid = nobody" rsyncd_log_file : "# log file = /var/log/rsyncd.log" rsyncd_syslog_tag : "# syslog tag = rsyncd" rsyncd_syslog_facility : "# syslog facility = daemon" rsyncd_transfer_logging : "transfer logging = yes" rsyncd_max_connections : "# max connections = 0" rsyncd_path : "# path = /home/ftp" rsyncd_exclude : "# exclude = lost+found/" rsyncd_use_chroot : "# use chroot = yes" rsyncd_timeout : "timeout = 600" rsyncd_ignore_nonreadable: "# ignore nonreadable = yes" rsyncd_dont_compress : "dont compress = *.gz *.tgz *.zip *.z *.Z *.rpm *.deb *.bz2" rsyncd_module : "[demo]\nmax connections = 2\npath = /srv/tftp/test\ncomment = Demo für rsync Daemon Artikel in Djangos WIKI\nlist = yes\nhosts allow = 10.10.10.0/26\n"
Wenn man die hostspezfische Konfiguration des rsync-Daemon lieber in der Host-spezifischen Konfiguration vornehmen möchte, braucht man die # rsyncd config-options nur hier bei der Rolle auskommentieren bzw. löschen und in die Hostvariable im Inverntory aufnehmen.
WICHTIG: Variablen in der Rollen-Konfiguration überschreiben (gleichlautende) Variablen-Definitionen aus dem Inventory!
Nun brauchen wir nur noch das Playbook ausführen und unser TFTP-Server steht bereit.
$ ansible-playbook -v ~/ansible/rsync.yml
Using /home/ansible/.ansible.cfg as config file BECOME password: PLAY [rsync-server] ******************************************************************************************************************** TASK [Gathering Facts] ***************************************************************************************************************** ok: [rsync-server]
TASK [*rsyncd* : Installation der relevanten Pakete (in der aktuellsten Version) für den rsyncd] *************************************** changed: [rsync-server] => {"changed": true, "msg": "", "rc": 0, "results": ["Installed: rsync-daemon-3.1.3-7.el8.noarch", "Installed: rsync-3.1.3-7.el8.x86_64"]}
TASK [*rsyncd* : 1) Überprüfen ob das Backup der Konfigurationsdatei '/etc/rsyncd.conf' bereits existiert] ***************************** ok: [rsync-server] => {"changed": false, "stat": {"exists": false}}
TASK [*rsyncd* : 2) Von der bestehenden originalen Konfigurationsdatei '/etc/rsyncd.conf' ein Backup '/etc/rsyncd.conf.orig' erstellen]* changed: [rsync-server] => {"changed": true, "checksum": "5400f2739a22e6831dbf9a26a8946821c21ce844", "dest": "/etc/rsyncd.conf.orig", "gid": 0, "group": "root", "md5sum": "c63fccb45c0dcbbbe17d0f4bdba920ec", "mode": "0644", "owner": "root", "secontext": "system_u:object_r:etc_t:s0", "size": 458, "src": "/etc/rsyncd.conf", "state": "file", "uid": 0}
TASK [*rsyncd* : Template Konfigurationsdatei an Ort und Stelle kopieren und Variablen setzen] ***************************************** changed: [rsync-server] => {"changed": true, "checksum": "0b4dff047064222e2952157d9840b2a93f89b26a", "dest": "/etc/rsyncd.conf", "gid": 0, "group": "root", "md5sum": "5f18235a7e8444010877fe3975641c9d", "mode": "0644", "owner": "root", "secontext": "system_u:object_r:rsync_etc_t:s0", "size": 9459, "src": "/home/ansible/.ansible/tmp/ansible-tmp-1593968476.9547315-8021-252894376954121/source", "state": "file", "uid": 0}
TASK [*rsyncd* : Firewall-Daemon für den rsyncd anpassen] ****************************************************************************** changed: [rsync-server] => {"changed": true, "msg": "Permanent and Non-Permanent(immediate) operation, Changed port 873/tcp to enabled"}
TASK [*rsyncd* : Sicherstellen dass der rsyncd gestartet wird und läuft] *************************************************************** changed: [rsync-server] => {"changed": true, "enabled": true, "name": "rsyncd.service", "state": "started", "status": {"ActiveEnterTimestampMonotonic": "0", "ActiveExitTimestampMonotonic": "0", "ActiveState": "inactive", "After": "systemd-journald.socket basic.target sysinit.target system.slice", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "no", "AssertTimestampMonotonic": "0", "Before": "shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "no", "CPUAffinity": "", "CPUQuotaPerSecUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend", "CollectMode": "inactive", "ConditionResult": "no", "ConditionTimestampMonotonic": "0", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlPID": "0", "DefaultDependencies": "yes", "Delegate": "no", "Description": "fast remote file copy program daemon", "DevicePolicy": "auto", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/rsyncd (ignore_errors=no)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "0", "ExecMainStartTimestampMonotonic": "0", "ExecMainStatus": "0", "ExecStart": "{ path=/usr/bin/rsync ; argv[]=/usr/bin/rsync --daemon --no-detach $OPTIONS ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/rsyncd.service", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "rsyncd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestampMonotonic": "0", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "infinity", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "7809", "LimitNPROCSoft": "7809", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "7809", "LimitSIGPENDINGSoft": "7809", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "0", "MemoryAccounting": "yes", "MemoryCurrent": "[not set]", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "rsyncd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestampMonotonic": "0", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "dead", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "[not set]", "TasksMax": "12494", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "simple", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "disabled", "UnitFileState": "disabled", "UtmpMode": "init", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}}
PLAY RECAP ************************************************************************************************************************************* tftp-server : ok=7 changed=5 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
Systemtest
Testordner und -dateien anlegen
Für unseren Test legen wir uns einfach eine kleine Textdatei im Arbeitsverzeichnis /srv/tftp/test/ und ein paar Testdokumente an, die unser rsync-Dameon später ausliefern soll.
# mkdir -p /srv/tftp/test/{ordner1,ordner2,ordner3}
# date > /srv/tftp/test/file_1
# date > /srv/tftp/test/ordner1/datei_2
# date > /srv/tftp/test/ordner2/datei_3
# date > /srv/tftp/test/ordner3/datei_4
Somit haben wir im Speicherpfad, auf den unser rsync-Daemon zugreifen kann folgende Teststruktur.
/srv/tftp/test/
├── file_1
├── ordner1
│ └── datei_2
├── ordner2
│ └── datei_3
└── ordner3
└── datei_4
Testdatei transferieren
Anschließend melden wir uns auf einem Host im zugehörigen Netzwerksegemnt an, auf dem das RPM-Paket rsync (Client) installiert ist, an.
Im ersten schritt fragen wir unseren rsync-server welche Module der Server anbietet.
# /usr/bin/rsync rsync://demo.dmz.nausch.org
demo Demo für rsync Daemon Artikel in Djangos WIKI
Wir sehen also das Modul demo mit der zugehörigen Beschreibung Demo für rsync Daemon Artikel in Djangos WIKI.
Im syslog unseres rsync-Servers wird dies auch entsprechend protokolliert.
Jul 5 20:28:37 vml000190 rsyncd[12198]: connect from vml000057.dmz.nausch.org (10.0.0.57) Jul 5 20:28:37 vml000190 rsyncd[12198]: module-list request from vml000057.dmz.nausch.org (10.0.0.57)
Als nächstes holen wir uns den Inhalt unserer Testumgebung auf den Clientrechner:
# /usr/bin/rsync -vrlptD rsync://demo.dmz.nausch.org:/demo/ /tmp/
receiving incremental file list ./ file_1 ordner1/ ordner1/datei_2 ordner2/ ordner2/datei_3 ordner3/ ordner3/datei_4 sent 123 bytes received 539 bytes 1,324.00 bytes/sec total size is 120 speedup is 0.18
Im syslog wird dies entsprechend protokolliert.
Jul 5 20:32:28 vml000190 rsyncd[12209]: connect from vml000057.dmz.nausch.org (10.0.0.57) Jul 5 20:32:28 vml000190 rsyncd[12209]: rsync on demo/ from vml000057.dmz.nausch.org (10.0.0.57) Jul 5 20:32:28 vml000190 rsyncd[12209]: building file list Jul 5 20:32:28 vml000190 rsyncd[12209]: send vml000057.dmz.nausch.org [10.0.0.57] demo () file_1 30 Jul 5 20:32:28 vml000190 rsyncd[12209]: send vml000057.dmz.nausch.org [10.0.0.57] demo () ordner1/datei_2 30 Jul 5 20:32:28 vml000190 rsyncd[12209]: send vml000057.dmz.nausch.org [10.0.0.57] demo () ordner2/datei_3 30 Jul 5 20:32:28 vml000190 rsyncd[12209]: send vml000057.dmz.nausch.org [10.0.0.57] demo () ordner3/datei_4 30 Jul 5 20:32:28 vml000190 rsyncd[12209]: sent 559 bytes received 128 bytes total size 12
/tmp/ ├── file_1 ├── ordner1 │ └── datei_2 ├── ordner2 │ └── datei_3 └── ordner3 └── datei_4
Links
1)
Version v1 vom 05.07.2020
127.0.0.1