Proxmox Backup Server Configure¶

1. APT config (Optional)¶

If there is a local APT repository, recommended to use local APT repository.

If there is none, this step can be ignored

• 1.1 Import wistron CA certificate to PBS server

Upload wistron CA certificate to /tmp

Import to system

cp /tmp/cacerts.crt /usr/local/share/ca-certificates/wistron-ca.crt
update-ca-certificates

• 1.2 Change pbs repository

Change repository file name

cd /etc/apt/sources.list.d/
mv pbs-enterprise.sources pbs-no-subscription.sources

Replace URIs to local APT repository

sed -i 's|https://enterprise.proxmox.com|https://wzs-yum.wistron.com/proxmox|g' pbs-no-subscription.sources
sed -i 's|pbs-enterprise|pbs-no-subscription|g' pbs-no-subscription.sources

• 1.3 Change debian repository

Replace URIs to local APT repository

sed -i 's|http://deb.debian.org|https://wzs-yum.wistron.com|g' debian.sources
sed -i 's|http://security.debian.org|https://wzs-yum.wistron.com|g' debian.sources

• 1.4 Cache APT repository and upgrade packages

cd && apt update && apt upgrade -y

2. LDAPS config¶

• 2.1 Login PBS

https://pbs-serverIP:8007

• 2.2 Click Access Control -> Realms -> Add -> LDAP Server

• 2.3 Input LDAPs General info

Realm: wzs.wistron  (Define your site domain name)
Base Domain Name: OU=User_Object,OU=WZS,DC=wzs,DC=wistron
User Attribute: sAMAccountName
Bind Domain Name: Domain ID (Domain accounts with traversal domain account permissions)
Bind Password: Domain ID PWD
Server: xx.xx.xx.xx (Your site dns IP)
Fallback Server: xx.xx.xx.xx (Second site dns IP, if have)
Mode: LDAPS
Comment: WZSCN  (Define your login PVE display domain name)

• 2.4 Sync AD account

select Realms WZSCN, and click Sync to sync AD account

• 2.5 Add admin account to access PBS

Click Permissions -> Add -> User Permission, and select permission Path, assgin Role, then input User employee id to search user.

3. Network config¶

• 3.1 Add backup NIC

Click Configuration -> Create -> Linux Bridge

Input bridge Name, IPv4/CIDR, Bridge ports, Comment

• 3.2 Apply config and check network status

After bridge added, click Apply Configuration to apply config

4. Backup pool config¶

• 4.1 Storage creation (optional)

If the server has an external disk cabinet (or SAN storage), please mount the disk cabinet to the server first

Check storage, and format it

lsblk
mkfs.xfs /dev/sda

Mount storage

mkdir /storage
echo "/dev/sda      /storage        xfs     defaults        0 0" |  tee -a /etc/fstab
systemctl daemon-reload
cat /etc/fstab
mount -a
df -h

• 4.2 Create backup pool folder

Login PBS with ssh, and create IT/OT backup pool folder, then modify folder owner to backup

*PBS service use account backup to write backup file into backpool

mkdir -p /storage/{TB5-IT,TB5-OT}
chown -R backup:backup /storage/{TB5-IT,TB5-OT}

• 4.3 Create backup datastore

Click Add Datastore, and input datastore Name, Backing Path(with step 4.1 create folder location)

5. Mount PBS¶

• 5.1 Login PBS, and copy fingerprint

Click datastore TB5-IT -> Show Connection Information, and click Copy to copy fingerprint

• 5.2 Login PVE cluster, and add pbs storage

Click Datacenter -> Storage -> Add -> Proxmox Backup Server

Input PBS info ID -> Server -> Username -> Password -> Nodes -> Datastore -> Fingerprint

ID: PBS mount point name

Server: PBS server IP

Username: root@pam

Password: PBS root password

Nodes: keep default (All nodes)

Datastore: PBS server datastore name

Fingerprint: paste fingerprint copy from PBS datastore

• 5.3 Check PBS. and test backup

Test backup

Select VM, click Backup -> Backup now, then select backup Storage

Backuping