https://www.turnkeylinux.org/faq/Clear answers about TurnKey GNU/Linux, backups, storage, and reliability.en-UShttps://www.turnkeylinux.org/faq/why-debian/https://www.turnkeylinux.org/faq/why-debian/Thu, 14 Aug 2014 16:51:18 +0000 Selection: the largest free software repository. Over 37,500 packages. Security: all packages are supported with carefully backported security updates that can be safely installed automatically. Stability: Debian has a well deserved reputation for rock solid stability. Other distributions are often not even comparable to the Debian testing branch. Free: Debian is 100% free software. Free from hidden backdoors, free to use, learn from, modify and redistribute. Community: Debian is powered by the …https://www.turnkeylinux.org/faq/what-are-software-licensing-terms-turnkey/https://www.turnkeylinux.org/faq/what-are-software-licensing-terms-turnkey/Thu, 14 Aug 2014 15:48:02 +0000 TurnKey is 100% free software and by free we mean in the important sense of freedom not price. Free as in free speech, not free beer. That means TurnKey is free from restrictive proprietary licensing, free from hidden backdoors and free to use, learn from, modify and distribute. See the licensing page for full details.https://www.turnkeylinux.org/faq/why-should-i-care-about-free-software/https://www.turnkeylinux.org/faq/why-should-i-care-about-free-software/Wed, 09 Jul 2014 13:43:43 +0000 Without the values and fruits of free software, the Internet wouldn't exist and neither would this project. If you care about living in a free society, enjoying free speech and the freedom of the Internet - you should care about free software too. Read more: Licensing information Who started TurnKey and why? Standing up for free software, a free Internet and a free societyhttps://www.turnkeylinux.org/faq/how-do-i-install-turnkey-usb-device/https://www.turnkeylinux.org/faq/how-do-i-install-turnkey-usb-device/Wed, 22 Jan 2014 13:04:04 +0000 See the iso2usb blog post for details.https://www.turnkeylinux.org/node/5481/https://www.turnkeylinux.org/node/5481/Wed, 20 Nov 2013 19:02:48 +0000 Here's one way to do it: apt-get install trickle trickle -u 100 -d 100 tklbam-backuphttps://www.turnkeylinux.org/faq/how-do-i-monitor-how-much-traffic-being-uploaded-or-downloaded/https://www.turnkeylinux.org/faq/how-do-i-monitor-how-much-traffic-being-uploaded-or-downloaded/Wed, 20 Nov 2013 19:01:36 +0000 We recommend the following package: apt-get install iftop iftophttps://www.turnkeylinux.org/faq/can-i-use-tklbam-only-backup-single-directory/https://www.turnkeylinux.org/faq/can-i-use-tklbam-only-backup-single-directory/Wed, 20 Nov 2013 18:48:06 +0000 Yes. Here are a couple of recommended ways to do this: Create a separate backup with an empty backup profile: export TKLBAM_REGISTRY=/var/lib/tklbam.srv export TKLBAM_CONF=/etc/tklbam.srv tklbam-init --force-profile=empty tklbam-backup --skip-packages --skip-database -- /srv Use the --raw-upload option This lobotomizes TKLBAM so instead of creating a system level backup it just backs up the directory you specify. In other words, --raw-upload turns TKLBAM into a directory-level backup tool …https://www.turnkeylinux.org/faq/can-i-have-multiple-tklbam-backups-single-system/https://www.turnkeylinux.org/faq/can-i-have-multiple-tklbam-backups-single-system/Wed, 20 Nov 2013 18:46:45 +0000 Yes. For example, let's say your default TKLBAM backup is several gigabytes in size and you'd like to create a lighter 100 MB backup that will be updated more frequently and take less time to update/restore: cp -a /etc/tklbam /etc/tklbam.light echo -/var/www/\*/logs >> /etc/tklbam.light/overrides echo -/home/liraz/bigfiles >> /etc/tklbam.light/overrides echo -mysql:mydatabase/bigtable >> /etc/tklbam.light/overrides export TKLBAM_CONF=/etc/tklbam.light mkdir …https://www.turnkeylinux.org/faq/how-do-i-tune-and-optimize-tklbam-backup/https://www.turnkeylinux.org/faq/how-do-i-tune-and-optimize-tklbam-backup/Wed, 20 Nov 2013 18:40:31 +0000 One of my favorite ways to do this: # step 1: generate a backup dump tklbam-backup --dump=/tmp/mybackup # step 2: interactively review the dump's file contents & disk usage cd /tmp/mybackup apt-get install ncdu ncdu # step 3: add includes or excludes, go back to step 1, rinse, repeat vim /etc/tklbam/overrides # Everything perfect? tklbam-backup --upload-raw=/tmp/mybackup By default, TKLBAM will automatically determine what paths and databases need to be backed up on a given TurnKey system …https://www.turnkeylinux.org/faq/which-databases-are-supported-0/https://www.turnkeylinux.org/faq/which-databases-are-supported-0/Wed, 20 Nov 2013 18:39:02 +0000 Currently, only MySQL and PostgreSQL have built-in support but TKLBAM can work with other databases so long as you configure custom serialization/unserialization procedures in a hook script.https://www.turnkeylinux.org/faq/which-turnkey-appliances-are-supported/https://www.turnkeylinux.org/faq/which-turnkey-appliances-are-supported/Sat, 18 Jun 2011 21:37:52 +0000 If you're using any TurnKey derived system, you don't need to install it as TKLBAM is a bundled into the TurnKey Core. If you're using a generic Debian or Ubuntu derived system you can install it with the following shell command: wget -O - -q \ https://raw.github.com/turnkeylinux/tklbam/master/contrib/ez-apt-install.sh \ | PACKAGE=tklbam /bin/bash This adds the TurnKey package repository to your APT sources and uses APT to install the tklbam package and its dependencies. Using TKLBAM on TurnKey …https://www.turnkeylinux.org/faq/what-can-i-use-for-backup-storage/https://www.turnkeylinux.org/faq/what-can-i-use-for-backup-storage/Sat, 18 Jun 2011 21:37:52 +0000 Pretty much anything, though storing backups to Amazon S3 is easiest because authentication and key management are automatic. You just need to run: tklbam-backup But you can also backup to any storage target supported by TKLBAM's back-end Duplicity including the local filesystem, NFS, Rsync, SSH, FTP, WebDAV, Rackspace CloudFiles and even IMAP. The local filesystem is one of the easier storage targets to use because you don't need to mess around with authentication credentials. So assuming you …https://www.turnkeylinux.org/faq/tklbam-open-source/https://www.turnkeylinux.org/faq/tklbam-open-source/Sat, 18 Jun 2011 21:37:52 +0000 Yes, TKLBAM is licensed under the GPL3. You don't have to care about free software ideology to appreciate the advantages. Any code running on your server doing something as critical as encrypted backups should be available for peer review and modification.https://www.turnkeylinux.org/faq/hub-says-my-backup-costs-000-what-am-i-really-paying/https://www.turnkeylinux.org/faq/hub-says-my-backup-costs-000-what-am-i-really-paying/Sat, 18 Jun 2011 21:37:51 +0000 If you notice $0.00 in the backups console, there's no need to open a support request. It's not a bug. At 15 cents per gigabyte, if you have just a few megabytes of data Amazon doesn't charge you anything. Backups start from around 100KB for a freshly installed TurnKey appliance. Remember, TKLBAM only saves changes you've made since the appliance was installed.https://www.turnkeylinux.org/faq/how-much-does-cost/https://www.turnkeylinux.org/faq/how-much-does-cost/Sat, 18 Jun 2011 21:37:51 +0000 Amazon S3 cloud storage fees are around $0.15/GB per month. You can use simulation mode to calculate how much uncompressed data TKLBAM is going to store in a full backup: $ tklbam-backup --simulate CREATING /TKLBAM FULL UNCOMPRESSED FOOTPRINT: 148.30 MB in 6186 files In practice, the actual footprint of a full backup will usually be smaller due to compression, but this depends on the type of data being compressed (e.g., text compresses very well, video very poorly). By default, a full backup is …https://www.turnkeylinux.org/faq/how-does-tklbam-know-what-backup-my-system/https://www.turnkeylinux.org/faq/how-does-tklbam-know-what-backup-my-system/Sat, 18 Jun 2011 21:37:51 +0000 Every TurnKey appliance that TKLBAM supports has a corresponding backup profile, which is downloaded from the Hub when you initialize TKLBAM. The profile is used to calculate the list of system changes we need to backup. It usually describes the installation state of a TurnKey appliance and contains a list of packages, filesystem paths to scan for changes and an index of the contents of those paths which records timestamps, ownership and permissions. You can also generate your own custom …https://www.turnkeylinux.org/faq/how-do-i-remove-file-or-directory-being-included-my-backup/https://www.turnkeylinux.org/faq/how-do-i-remove-file-or-directory-being-included-my-backup/Sat, 18 Jun 2011 21:37:51 +0000 By adding a negative override to /etc/tklbam/overrides: echo -/var/www/*/logs >> /etc/tklbam/overrideshttps://www.turnkeylinux.org/faq/how-do-i-backup-local-storage-instead-s3/https://www.turnkeylinux.org/faq/how-do-i-backup-local-storage-instead-s3/Sat, 18 Jun 2011 21:37:51 +0000 By default TKLBAM is designed to work with S3 automatically, and this is the easiest and safest option. In manual mode, TKLBAM can also work with non-S3 storage addresses, but this complicates usage and carries additional risks which you should make sure you understand first to avoid data loss. Of all non-S3 manual storage targets, the local filesystem is the simplest options because you don't need to mess around with authentication credentials. So assuming you want to store your backup at …https://www.turnkeylinux.org/faq/how-do-i-add-directory-my-backup/https://www.turnkeylinux.org/faq/how-do-i-add-directory-my-backup/Sat, 18 Jun 2011 21:37:51 +0000 By adding an override to /etc/tklbam/overrides: echo /mnt/images >> /etc/tklbam/overrides Or on the command line: tklbam-backup /var/www/*/logs Make sure you understand the implications of doing this. For example, if you add a directory handled by package management this may break package management on the system you restore to.https://www.turnkeylinux.org/faq/whats-difference-between-full-backup-and-incremental-backup/https://www.turnkeylinux.org/faq/whats-difference-between-full-backup-and-incremental-backup/Sat, 18 Jun 2011 21:37:50 +0000 A full backup is a backup that can be restored independently of any other backup. An incremental backup links with the last backup before it and only includes changes made since the previous backup. Backup chains are links of backup sessions which start with a full backup, and then a series of incremental backups, each recording only the changes made since the backup before it. Incremental backups are useful because they are fast and efficient. Restoring an incremental backup requires …https://www.turnkeylinux.org/faq/there-limit-how-frequently-i-can-backup/https://www.turnkeylinux.org/faq/there-limit-how-frequently-i-can-backup/Sat, 18 Jun 2011 21:37:50 +0000 No, but if you backup more frequently (e.g., hourly instead of daily), we strongly recommend creating full backups more frequently - daily or weekly instead of monthly (I.e., the default). The reason is that long backup chains are inefficient and more vulnerable if something goes wrong as links in the chain depend on one another. If you backup daily, and do a full backup monthly, your backup chains will consist of a full backup with at most 31 incremental backups linked to it. But if you backup …https://www.turnkeylinux.org/faq/i-forgot-my-passphrase-and-i-lost-my-escrow-key-can-you-help-me/https://www.turnkeylinux.org/faq/i-forgot-my-passphrase-and-i-lost-my-escrow-key-can-you-help-me/Sat, 18 Jun 2011 21:37:50 +0000 Sorry, if your server is gone (e.g., terminated EC2 instance) nobody can help you. Next time either save an escrow key somewhere[s] safe or don't set a passphrase. Don't misunderstand, we'd love to help if we could, but we can't. The encryption key for your backup was generated locally on your server not ours. We designed passphrase protection to use special cryptographic countermeasures to make typical cracking techniques (e.g., dictionary attacks) very difficult even for someone with access …https://www.turnkeylinux.org/faq/how-often-does-full-backup-happen-how-can-i-configure/https://www.turnkeylinux.org/faq/how-often-does-full-backup-happen-how-can-i-configure/Sat, 18 Jun 2011 21:37:50 +0000 By default, a full backup will happen if the last full backup is older than 30 days. Between full backups, all backup sessions are incremental. We recommend enabling the daily backup cron job so that daily incremental backups happen automatically: chmod +x /etc/cron.daily/tklbam-backup You can override the default by setting the full-backup parameter in the tklbam configuration: # create a full backup every 14 days echo full-backup 14D >> /etc/tklbam/confhttps://www.turnkeylinux.org/faq/how-do-i-exclude-database-or-table-my-backup/https://www.turnkeylinux.org/faq/how-do-i-exclude-database-or-table-my-backup/Sat, 18 Jun 2011 21:37:50 +0000 By adding a negative database override to /etc/tklbam/overrides: # exclude drupal7 database echo -mysql:drupal7 >> /etc/tklbam/overrides # exclude sessions table in drupal8 database echo -mysql:drupal8/sessions >> /etc/tklbam/overrides Or on the command line: tklbam-backup -- -mysql:drupal6/page_cache By default ALL databases are backed up so adding a negative database override excludes only that database or table from the backup. Excluding a table only excludes its data. The schema …https://www.turnkeylinux.org/faq/why-cant-i-access-tklbam-storage-buckets-other-amazon-s3-tools/https://www.turnkeylinux.org/faq/why-cant-i-access-tklbam-storage-buckets-other-amazon-s3-tools/Sat, 18 Jun 2011 21:37:49 +0000 TKLBAM doesn't store it's data in generic S3 buckets, but in an isolated TKLBAM-specific area on S3. This means generic S3 tools such as the AWS management console, or S3Fox will not be able to access the storage buckets in which TKLBAM backup volumes reside. Please note that new(er) Hub accounts DO use generic S3 buckets for backup storage. We will be transitioning existing users to the new system in the future. We will contact users individually when the time comes.https://www.turnkeylinux.org/faq/what-happens-if-my-payment-method-amazon-invalidated/https://www.turnkeylinux.org/faq/what-happens-if-my-payment-method-amazon-invalidated/Sat, 18 Jun 2011 21:37:49 +0000 Amazon supports payment by credit card and bank account. We recommend heavy users add a bank account as their payment method, as it's usually more permanent than a credit card. In any case, if your payment method is invalidated (e.g., cancelled or expired credit card), billing will fail and Amazon will attempt to contact you (e.g., by e-mail) to provide a new, valid payment method.https://www.turnkeylinux.org/faq/what-are-advantages-isolating-tklbam-amazon-s3-storage/https://www.turnkeylinux.org/faq/what-are-advantages-isolating-tklbam-amazon-s3-storage/Sat, 18 Jun 2011 21:37:49 +0000 Easier sign up process. Users don't need to know anything about S3 API keys or understand the implications of giving them to us. Security: you don't need to give us access to your generic S3 account. If someone compromises your regular AWS API Key they still can't get to your encrypted backup volumes and say... delete them. Cost transparency: TKLBAM related storage charges show up separately from your generic S3 storage.https://www.turnkeylinux.org/faq/if-hub-goes-down-can-i-still-create-new-backup/https://www.turnkeylinux.org/faq/if-hub-goes-down-can-i-still-create-new-backup/Sat, 18 Jun 2011 21:37:49 +0000 Yes - but only manually. Just remember the Hub won't know anything about these backups so you'll have manage keys and authentication credentials by hand.https://www.turnkeylinux.org/faq/if-my-connection-hub-goes-down-can-i-still-restore/https://www.turnkeylinux.org/faq/if-my-connection-hub-goes-down-can-i-still-restore/Sat, 18 Jun 2011 21:37:49 +0000 Yes - manually. It just won't be as easy. You'll need to do a couple of steps by hand: transfer the escrow key to the restore target. This means you'll need to have stored the escrow key somewhere safe or be able to create it on the backed up machine. specify the S3 address and the key manually when you restore. For more details see the tklbam-restore documentation.https://www.turnkeylinux.org/faq/do-i-have-use-amazon-s3-storage/https://www.turnkeylinux.org/faq/do-i-have-use-amazon-s3-storage/Sat, 18 Jun 2011 21:37:49 +0000 No! TKLBAM stores backups in the cloud for convenience, but it also supports local / custom backup storage targets. There are two main alternatives to letting TKLBAM store a backup in the cloud: Low-level tklbam-backup --dump option: lets you dump the raw TKLBAM backup extract to a directory, which you can then store anyway you like. For example here's how we'd a system backup into a simple unencrypted tarball: cd /tmp mkdir mybackup tklbam-backup --dump=mybackup/ tar jcvf mybackup.tar.bz2 …