How to Backup Your System in linux

本文介绍如何利用tar命令创建系统备份,并提供详细的步骤指导用户完成本地及网络备份操作。此外,还涵盖如何恢复备份文件,包括特殊情况下如重新分区后的恢复方法。

 

 

Introduction to tar

 

 

This page is part of the BackupYourSystem article, as such, ensure you've read that prior to continuing. This subpage will acquaint a user with the tar archival program, a CLI solution to the creation of compressed archival backups. It will detail the creation and restoration of archives, including operation over a network.

Before continuing users are encouraged to read the TerminalHowto page which explains many basic concepts related to working with a terminal.

IconsPage/stop.png Improper usage of any archival program can cause unintended data loss. Read the entire tutorial before proceeding and understand what you are doing.

 

Preparing for Backup

 

In preparation for a complete backup of the system, it is a good idea to empty the trash and remove any unwanted files and programs from your current installation. This includes the home folder which can be filled with many files not needed. Doing so will reduce the size of the archive created in relation to how much space is liberated.

A quick list of examples is below, decide for yourself what applies:

  • Delete all your emails.
  • Wipe your saved browser personal details and search history.
    • If you are not worried about the security concerns, this step is not necessary. Many users explicitly want backups of their email and browser settings.

  • Unmount any external drives and remove any optical media such as CDs or DVDs that you do not want to include in the backup.
    • This will reduce the amount of exclusions you need to type later in the process.
  • Go through the contents of your user folder in /home and delete all unwanted files in the subdirectories, often people download files and forget about them for instance.

 

Backing Up

 

To get started, please open up a terminal, in Ubuntu this can be done by Applications Menu -> Accessories -> Terminal . Some directories require root or superuser permissions to read and write (needed for backup), for an explanation on why see FilePermissions . To gain temporary root permission, simply preface any command you want to issue with sudo, as explained in RootSudo .

For this example, we will change directories to root. This is where the backup will be made. This is an arbitrary decision, you should create the backup elsewhere. For instance to a mounted external hard drive, another partition or disk connected internally, even a folder in your home directory could be used. In all cases, ensure the location your saving the archive to has enough space. Simply use the cd command to navigate there.

cd / 

 

The following is an exemplary command of how to archive your system.

tar -cvpzf backup.tar.gz -–exclude=/backup.tar.gz --exclude=/proc --exclude=/lost+found --exclude=/sys --exclude=/mnt --exclude=/media / 

 

To understand what is going on, we will dissect each part of the command.

  • tar - is the command that creates the archive. It is modified by each letter immediately following, each is explained bellow.

    • c - create a new backup archive.

    • v - verbose mode, tar will print what it's doing to the screen.

    • p - preserves the permissions of the files put in the archive for restoration later.

    • z - compress the backup file with 'gzip' to make it smaller.

    • f <filename> - specifies where to store the backup, backup.tar.gz is the filename used in this example. It will be stored in the current working directory, the one you set when you used the cd command.

  • --exclude=/example/path - The options following this model instruct tar what directories NOT to backup. We don't want to backup everything since some directories aren't very useful to include. The first exclusion rule directs tar not to back itself up, this is important to avoid errors during the operation. After, we proceed to exclude the /proc , /lost+found , /sys , /mnt and /media directories in root.

    • It is important to note that these exclusions are recursive. This means that all folders located within the one excluded will be ignored as well. In the example, excluding the /media folder excludes all mounted drives and media there.

    • If there are certain partitions you wish to backup located in /media , simply remove the exclusion and write a new one excluding the partitions you don't want backed up stored within it. For example:

      • --exclude=/media/unwanted_partition 
  • / - After all options is the directory to backup. Since we want to backup everything on the system we use / for the root directory. Like exclusions, this recursively includes every folder below root not listed in the exclusions or other options.

See tips before operation for additional information.

Once satisfied with the command, execute it and wait until it has completed. The duration of the operation depends on the amount of files and compression choses. Once completed, check the directory you set to find the archive. In our example, backup.tar.gz would be located in the / directory once completed. This archive can then be moved to any other directory for long term storage.

Note: At the end of the process you might get a message along the lines of 'tar: Error exit delayed from previous errors' or something, but in most cases you can just ignore that.

 

Additional Tips

 

  • To keep good records, you should include the date and a description of backup in the filename.
  • Another option would be to use bzip2 to compress your backup instead of gzip. Bzip2 provides a higher compression ratio at the expense of speed. If compression is important to you, just substitute the z in the command with j , and change the file name to .tar.bz2 . The rest of this guides examples use gzip, make the subsequent changes to the examples before using them.

  • If you want to exclude all other mounts other than the current - by this I mean partitions mounted to directories - then use the --one-file-system option appended before the exclusion rules. This has the effect of stopping tar from crossing into any other mounts in any directory including /mnt or /media. For instance, many users create a separate mount for /home to keep user folders separate from root, adding this option to our original example would exclude home's contents entirely.

 

Archive Splitting

 

If you want to burn the archive to discs, or transfer them to a filesystem with a limited max filesize (say FAT32 with a limit of 4GB per file) then you will have to split the file either during or after archive creation. A simple means is to use the split command. Below are examples of both scenarios. More information than conveyed here can be found in the man pages of split, use man split in a terminal to read. Ensure you keep these archives all together in a directory you label for extraction at a later date. Once the archives are split to a desirable size, they can be burned one at a time to disc.

To Split During Creation

tar -cvpz <put options here> / | split -d -b 3900m - /name/of/backup.tar.gz. 

 

  • The first half until the pipe (|) is identical to our earlier example, except for the omission of the f option. Without this, tar will output the archive to standard output, this is then piped to the split command.
  • -d - This option means that the archive suffix will be numerical instead of alphabetical, each split will be sequential starting with 01 and increasing with each new split file.

  • -b - This option designates the size to split at, in this example I've made it 3900mB to fit into a FAT32 partition.

  • - - The hyphen is a placeholder for the input file (normally an actual file already created) and directs split to use standard input.

  • /name/of/backup.tar.gz. Is the prefix that will be applied to all generated split files. It should direct to the folder you want the archives to end up. In our example, the first split archive will be in the directory /name/of/ and be named backup.tar.gz.01 .

To Split After Creation

split -d -b 3900m /path/to/backup.tar.gz /name/of/backup.tar.gz. 

 

  • Here instead of using standard input, we are simply splitting an existing file designated by /path/to/backup.tar.gz .

To Reconstitute the Archive
Reconstructing the complete archive is easy, first cd into the directory holding the split archives. Then simply use cat to write all the archives into one and send over standard output to tar to extract to the specified directory.

 

cat *tar.gz* | tar -xvpzf - -C /  

 

  • The use of * as a wild card before and after tar.gz tells cat to start with first matching file and add every other that matches, a process known as catenation, how the command got its name.
  • Afterwards, it simply passes all that through standard output to tar to be extracted into root in this example.
  • For a more complete explanation of restoration, see Restoring .

 

Backup Over a Network

 

The command tar does not include network support within itself, but when used in conjunction with other programs this can be achieved. Two common options are netcat (nc) and ssh.

 

Netcat

 

The command nc is designed to be a general purpose networking tool. It sets up a simple connection between two networked machines. This connection survives until the user manually disconnects it, unlike normal connections such as tcp which terminate upon completion of a file.

Receiving Computer
On the receiving end you'll setup netcat to write the backup file as in the following example. This command will setup a machine to receive standard input from network to port 1024 then write it to the file backup.tar.gz. The choice of port is entirely up to the user, as long as it is 1024 or larger. A simple example:

nc -l -p 1024 > backup.tar.gz 

 

Sending Computer
On the machine to be backed up, the tar command will be piped to nc which will then send the backup over the network to the port in question to be written in the file. Take note, where it says <receiving host> replace with the name of the computer on the network. The f option was omitted since we are not writing to a local file, but moving the archive through standard output. The following is an example:

tar -cvpz <all those other options like above> / | nc -q 0 <receiving host> 1024 

 

If all goes well the backup will be piped through the network without touching the file system being read.

 

SSH

 

You can also use SSH. For a complete explanation of its proper use see SSH . The command below is an example of what is possible.

tar -cvpz <all those other options like above> / | ssh <backuphost> "( cat > ssh_backup.tar.gz )"

 

In the example:

  • The tar half of the command is the same as above, with the omission of the f option to pipe the archive via standard output to ssh and onto the networked computer.
  • ssh_backup.tar.gz Is the name of the file that will be created on the machine indicated.

  • <backuphost> - Should be replaced with the name of the computer in question on the network.

 

Restoring

 

IconsPage/warning.png Be careful! If you don't understand what you are doing here you might end up overwriting stuff that is important to you. If you are restoring the root directory while booted and using root, you will encounter trouble. Operate such a restoration from a Live CD, simply mount the drive in question and correct the path as needed.

For the purpose of this tutorial we will assume your backup file is stored in the directory /home/test and named backup.tar.gz. If you are restoring files to directories owned by root, gain superuser access as above by prefacing commands with sudo. Ensure your archive is NOT stored in the directories to be restored, or it will be overwritten during the operation.

Restore Your Backup

tar -xvpzf /home/test/backup.tar.gz -C / 

 

A brief explanation:

  • x - Tells tar to extract the file designated by the f option immediately after. In this case, the archive is /home/test/backup.tar.gz

  • -C <directory> - This option tells tar to change to a specific directory before extracting. In this example, we are restoring to the root (/) directory.

IconsPage/warning.png This will overwrite every single file and directory on the designated mount with the one in the archive. Any file created after the archive, will have no equivalent stored in the archive and thus will remain untouched

Allow the restoration the time it needs to complete. Once extraction is completed, recreate directories that were not included in the original archive. In our example, these would include /proc , /lost+found , /sys , /mnt and /media . This can be done with the following command in our example:

mkdir /proc /lost+found /sys /mnt /media 

 

Once finished, reboot and everything should be restored to the state of your system when you made the backup.

 

Restoring Over a Network

 

This short guide, assumes you employed nc to make the original backup as described above.

Receiving Computer
Ensure the disk has been mounted and use the following command to accept input over the network that will then be extracted to the path indicated. In this example, the directory /mnt/disk will be extracted to.

nc -l -p 1024 | tar -xvpjf - -C /mnt/disk 

 

Sending Computer
On the computer with the archive to send, use the following command:

cat backup.tar.gz | nc -q 0 <receiving host> 1024 

 

A few comments:

  • The - character in the first command will tell tar to accept input from standard input rather than a file. In this case, input comes from the pipe.

  • The backup file will be expanded without being saved on the disk of receiving computer, the same as when the backup was made.

 

Reformatted Partitions

 

If you had to format partitions or are restoring to different discs, update the /etc/fstab and /boot/grub/menu.lst files after restoring the backup.

  1. Mount the reformatted partitions on a LiveCD.
  2. Open a terminal and type

    blkid
  3. Making note of the UUIDs listed, edit the /etc/fstab and /boot/grub/menu.lst files in the restored root partition to match. Use the following commands to edit the files respectively.

 

sudo nano /mnt/disk/etc/fstab 

 

 

sudo nano /mnt/disk/boot/grub/menu.lst 

Change the UUIDs to match the results of your blkid command.

 

Restoring RAID1 to EXT3 for import into VM

 

Use this up procedure for logical transfert to disk into VM system bootup with live-cd and create first your file system with one Ext2/3 partition and Swap partition. The procedure for restore RAID1 or RAID5 to VM engine request this additional step for regenerate image for upload with Grub

cd /media/disk/etc/
mv mdadm.conf mdadm.conf.old
mkinitrd /media/disk/boot/initrd-noraid-'uname -r'.img 'uname -r'
cd /media/disk/grub

 

If not available mkinitrd command use $sudo apt-get install initrd-tools. Now edit grub.conf and change kernel boot parameter root= to reflectpartion without raid e.g. change from /dev/md0 to /dev/sda1, also change the initrd= line to /boot/initrd=noraid-x.x.x.img

Now system is ready to next setup GRUB (step below) and re-boot of virtual machine without Raid.

 

Restoring GRUB

 

In most cases restoring GRUB should not be necessary since we are only restoring files.

If you find yourself unable to boot GRUB properly, follow the instructions on GrubHowto

 

Additional Resources

 

<think>好的,我现在需要处理用户关于TEEC警告“could not find security partition”的问题。首先,我应该了解TEEC是什么,可能涉及TrustZone执行环境中的组件。用户遇到的这个警告通常和安全分区无法被正确识别或加载有关。可能的原因包括分区表配置错误、分区未正确烧录、密钥或签名问题,以及硬件兼容性问题。 接下来,我需要回忆或查找相关的技术文档,比如OP-TEE的官方资料,确认安全分区的配置要求。例如,安全分区在分区表中需要有特定的标识,或者需要特定的存储位置。如果配置错误,TEEC就无法找到对应的分区。 另外,分区是否被正确烧录到设备中也是一个关键点。用户可能在更新固件后没有正确烧录安全分区,或者烧录工具出现了问题。这时候需要检查烧录流程和工具日志。 签名和密钥的问题也可能导致TEEC无法验证分区,从而拒绝加载。需要确认使用的密钥是否正确,签名流程是否有误。 硬件兼容性方面,某些存储设备可能有不同的访问方式,导致TEEC无法正确读取分区。需要检查硬件配置是否符合要求,比如分区的大小、偏移量等。 解决方案方面,首先应该验证分区表配置,确保安全分区的名称、类型和位置正确。然后检查烧录过程,确认分区已正确写入。接着验证签名和密钥,确保安全分区的镜像经过正确签名。如果问题依旧,可能需要检查硬件兼容性或联系芯片厂商获取支持。 在引用方面,需要查找是否有相关的文档或社区讨论提到类似问题,比如OP-TEE的官方文档或者开发者论坛中的案例。这些资料可以作为解决方案的参考依据。 最后,生成相关问题,帮助用户进一步排查可能的相关问题,如分区表配置方法、安全分区的签名流程、硬件兼容性检查步骤等。</think>### TEEC警告"无法找到安全分区"解决方案 TEEC(Trusted Execution Environment Client)出现"could not find security partition"警告的根本原因在于系统无法正确识别或加载安全存储分区。该问题通常由以下四个层面的配置错误引发: 1. **分区表配置错误** 安全分区需要在分区表中明确定义,要求: - 使用特定的分区名称(如`secure_storage`) - 设置正确的分区类型标识 - 分配独立的存储空间 $$ part = { name = "secure_storage", type = 0xA5A5A5A5, size = 0x100000, offset = 0x800000 } $$ 建议使用`parted`工具验证分区布局[^2] 2. **分区烧录异常** 即使分区表配置正确,仍需确保: - 烧录工具支持安全分区写入(如使用`fastboot flash secure`) - 分区镜像已集成到固件包 - 烧录后校验分区CRC值 3. **密钥验证失败** 安全分区需要经过TA(Trusted Application)签名验证: ```bash # 使用optee_os签名工具示例 sign_tool.py --key rsa_priv.pem --in secure.bin --out secure_signed.bin ``` 签名密钥需与TEE引导程序使用的密钥匹配[^3] 4. **硬件兼容性问题** 某些eMMC/UFS存储芯片需要特殊配置: - 检查芯片数据手册的RPMB(Replay Protected Memory Block)章节 - 确认主控驱动支持安全命令(如CMD43) - 验证物理分区地址是否超出存储容量 **诊断流程图:** ``` 启动检测 │ ▼ 分区表解析 → 失败 → 修正分区表 │ ▼ 安全分区读取 → 失败 → 检查烧录完整性 │ ▼ 签名验证 → 失败 → 更新签名密钥 │ ▼ RPMB初始化 → 失败 → 调试存储驱动 ```
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值