[ubuntu] lsyncd를 이용한 서버간 실시간 자료 동기화

 

​1. Origin 서버 lsyncd 설치

apt update&&upgrade
apt-get install -y lsyncd

 

2. Origin 서버 ssh key 생성

root@q381-1921:/# ssh-keygen

Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa
Your public key has been saved in /root/.ssh/id_rsa.pub
The key fingerprint is:
SHA256:/a3uBy9NYgx3isDrVnCUEH9pK+oYOM4NygJIBCDz+WY root@q381-1921
The key`s randomart image is:
+---[RSA 3072]----+
|B       oo .     |
|.+ .     .o  .   |
|. o    . .. +    |
| . .    +.oo...  |
|o   E   S=o=.o   |
|o  o .  ..oo*..  |
|.   + .... ..*.  |
|.. + + +o   ..+  |
| .o o o..  o+o   |
+----[SHA256]-----+

root@q381-1921:/# ls ~/.ssh/id_*
/root/.ssh/id_rsa  /root/.ssh/id_rsa.pub

root@q381-1921:/# ssh-copy-id root@접속할 아이피
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
The authenticity of host '1.1.1.1 (1.1.1.1)' can`t be established.
ED25519 key fingerprint is SHA256:3LnG/lLjiytuDCvdn2Eh4qfaadjv69wLiWnnnvYBtQQ.
This key is not known by any other names
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@183.111.64.4`s password:*********

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'root@1.1.1.1'"
and check to make sure that only the key(s) you wanted were added.

 

3. Origin서버 lsyncd 설정

root@q381-1921:/# cd /etc
root@q381-1921:/etc# mkdir lsyncd 
root@q381-1921:/# cd lsyncd
root@q381-1921:/etc/lsyncd# vi lsyncd.conf.lua

settings {
        logfile = "/var/log/lsyncd/lsyncd.log",
        statusFile = "/var/log/lsyncd/lsyncd-status.log",
        statusInterval = 20
        nodaemon = false
}

sync {
        default.rsyncssh,
        source="/data/images",
        host="1.1.1.1",
        targetdir="/data/images_backup",
        delay = 1,
        delete = false,
        ssh = {
                port = 22
        },
        rsync = {
                archive = true,
                compress = true,
                verbose = true,
                _extra = {"--bwlimit=730"}

        }
}
:wq

root@q381-1921:/etc/lsyncd# cd /var/log
root@q381-1921:/var/log# mkdir lsyncd 
root@q381-1921:/var/log# cd lsyncd
root@q381-1921:/var/log/lsyncd# 
root@q381-1921:/var/log/lsyncd# touch lsyncd.log
root@q381-1921:/var/log/lsyncd# touch lsyncd-status.log
root@q381-1921:/var/log/lsyncd# systemctl restart lsyncd
root@q381-1921:/var/log/lsyncd#  systemctl enable lsyncd

 

4. Sync서버 rsync 설치

root@Daniel:/# apt-get install -y rsync
root@Daniel:/# systemctl start rsync

 

5. Sync서버 rsync설정

root@Daniel# vi /etc/rsyncd.conf
# /etc/rsyncd: configuration file for rsync daemon mode
# See rsyncd.conf man page for more options.
# configuration example:
# uid = nobody
# gid = nobody
# use chroot = yes
# max connections = 4
# pid file = /var/run/rsyncd.pid
# exclude = lost+found/
# transfer logging = yes
# timeout = 900
# ignore nonreadable = yes
# dont compress   = *.gz *.tgz *.zip *.z *.Z *.rpm *.deb *.bz2

# [ftp]
#        path = /home/ftp
#        comment = ftp export area
[web]
path = /data/images
comment = image_backup
hosts allow=2.2.2.2
uid = root
gid = root
use chroot = yes
read_noly = no
:wq​

6. Sync 서버의 Rsync 포트를 방화벽에서 열어준다.

#iptables 포트 허용
-A INPUT -p tcp -m state --state NEW -m tcp --dport 873 -j ACCEPT

#ufw 포트 허용
ufw allow 22