Restoring Product Data from Backup
Here is how to restore Paragon Active Assurance data from backup files. In this chapter, the backup files are assumed to be named in the same way as in the chapter Backing Up Product Data.
The procedure that follows requires that Control Center has been installed (so that the
netrounds database exists) and that the backup files are from the same
version of Control Center as the installed version.
-
Stop all Paragon Active Assurance services that are accessing the database:
sudo systemctl stop "netrounds-*" apache2 kafka openvpn@netrounds
-
Drop the main PostgreSQL database and plugin database:
sudo -u postgres psql -c "DROP DATABASE netrounds;" sudo -u postgres psql -c 'DROP DATABASE "paa-plugins";'
-
Recreate the main PostgreSQL database and plugin database:
sudo -u postgres psql -c "CREATE DATABASE netrounds OWNER netrounds ENCODING 'UTF8' TEMPLATE 'template0';" sudo -u postgres psql -c 'CREATE DATABASE "paa-plugins" OWNER netrounds ENCODING "UTF8" TEMPLATE "template0";'
-
Restore the main PostgreSQL database and plugin database:
sudo -u postgres psql --set ON_ERROR_STOP=on netrounds < cc_postgres.sql sudo -u postgres psql --set ON_ERROR_STOP=on paa-plugins < paa_plugins.sql
Setting
ON_ERROR_STOPto on will cause psql to exit if an error occurs. For further details, see the PostgreSQL documentation: https://www.postgresql.org/docs/9.4/backup-dump.html#BACKUP-DUMP-RESTORE.There are several options for the backup format. Please refer to the psql documentation (https://www.postgresql.org/docs/) if you are using anything other than plain .sql.
If you backed up the databases in binary format, use these commands to restore them (you will be prompted for a password which is by default "netrounds"):
pg_restore -Fc -h localhost -d netrounds -c --verbose --disable-triggers cc_postgres.binary -U netrounds --password pg_restore -Fc -h localhost -d paa-plugins -c --verbose --disable-triggers paa_plugins.binary -U netrounds --password
-
Restore the plugin tarballs and signing keys:
sudo tar -xzf paa_plugins.tar.gz -C / sudo tar -xzf paa_plugin_keys.tar.gz -C /
-
Restore the OpenVPN keys:
# Remove any existing OpenVPN keys sudo rm -rf /var/lib/netrounds/openvpn # Unpack the backed-up keys sudo tar -xzf cc_openvpn.tar.gz -C /
-
Restore RRD files, either from a tarball or from a snapshot. Compare the chapter Backing Up Product Data. In the tarball case, the procedure is as follows:
# Remove any existing RRDs sudo rm -rf /var/lib/netrounds/rrd # Unpack the backed-up RRDs sudo tar -xzf cc_rrd.tar.gz -C /
-
Restore the TimescaleDB database:
The backup directory needs to be stored under
/var/lib/netrounds/rrd/timescaledb/pgbackrest/repo/.Before doing the restore, copy the
.conffiles in the data directory/var/lib/netrounds/rrd/timescaledb/data/to a different location. This allows you to restore any configuration changes performed after the last full backup.-
To perform an in-place database restore, proceed as follows:
- Create a directory
/tmp/timescaledb_conf. - Copy the
*.conffiles in/var/lib/netrounds/rrd/timescaledb/datato/tmp/timescaledb_conf. -
Run the command
sudo /etc/netrounds/backup-restore-timescaledb.sh --restore <backup dir>
- Copy the
*.conffiles from/tmp/timescaledb_confto/var/lib/netrounds/rrd/timescaledb/data.
- Create a directory
-
To restore a database from host A on a different host B, proceed as follows:
- On host B, install and configure Control Center according to the Paragon Active Assurance Installation Guide, and enable the metrics service.
- From host A, copy the contents of
/var/lib/netrounds/rrd/timescaledb/pgbackrestto the same directory on host B. -
On host B, run the command
sudo /etc/netrounds/backup-restore-timescaledb.sh --restore <backup dir>
- From host A, copy the
*.conffiles from/var/lib/netrounds/rrd/timescaledb/datato the same directory on host B.
-
-
Copy the license files into their original location. (Alternatively, you may download the license files once more from the Juniper EMS Portal and apply them using the
ncc license activatecommand, as explained in the Installation Guide.) -
Start Paragon Active Assurance services:
sudo systemctl start --all "netrounds-*" apache2 kafka openvpn@netrounds