1
1.backup服务器上创建用户,并给个密码
2
[root@backup ~]#useradd oldboy
3
[root@backup ~]#echo "oldboy123.com" | passwd --stdin oldboy
4
Changing password for user oldboy.
5
passwd: Authentication token manipulation error
6
# 这条命令格式没有问题,为什么会报错呢？？？
7
# 因为在kylin中,用户的密码不能包含用户名oldboy
8
[root@backup ~]#echo "heima123.com" | passwd --stdin oldboy
9
Changing password for user oldboy.
10
passwd: all authentication tokens updated successfully.
11
# 这次就成功了,successfully
12

13
2.nfs服务器中
14
[root@nfs ~]#rm -rf /home/*
15
[root@nfs ~]#touch /home/{1..5}.txt
16
[root@nfs ~]#rsync -avz /home/* oldboy@172.16.1.41:/home/
17
Authorized users only. All activities may be monitored and reported.
18
oldboy@172.16.1.41's password: '
19
# 这里输入的是oldboy用户的密码
20
sending incremental file list
21
1.txt
22
2.txt
23
3.txt
24
4.txt
25
5.txt
26
rsync: mkstemp "/home/.1.txt.ybev06" failed: Permission denied (13)
27
rsync: mkstemp "/home/.2.txt.rGQyz1" failed: Permission denied (13)
28
rsync: mkstemp "/home/.3.txt.A0EC8V" failed: Permission denied (13)
29
rsync: mkstemp "/home/.4.txt.3szGHQ" failed: Permission denied (13)
30
rsync: mkstemp "/home/.5.txt.5syKgL" failed: Permission denied (13)
31
sent 292 bytes  received 471 bytes  89.76 bytes/sec
32
total size is 0  speedup is 0.00
33
rsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1189) [sender=3.1.3]
34
# 很明显在报错,权限不足？？？

1
1.backup服务器
2
[root@backup ~]#rm -rf /home/*
3
[root@backup ~]#touch /home/{1..3}.txt
4

5
2.nfs服务器
6
[root@nfs ~]#rm -rf /home*
7
[root@nfs ~]#rsync -avz oldboy@172.16.1.41:/home/* /home/
8
Authorized users only. All activities may be monitored and reported.
9
oldboy@172.16.1.41's password: '
10
Could not chdir to home directory /home/oldboy: No such file or directory
11
receiving incremental file list
12
created directory /home
13
1.txt
14
2.txt
15
3.txt
16
sent 81 bytes  received 188 bytes  31.65 bytes/sec
17
total size is 0  speedup is 0.00
18
[root@nfs ~]#ll /home/
19
total 0
20
-rw-r--r-- 1 root root 0 Jan 15 23:38 1.txt
21
-rw-r--r-- 1 root root 0 Jan 15 23:38 2.txt
22
-rw-r--r-- 1 root root 0 Jan 15 23:38 3.txt
23
# 非常成功的拉取下来了

1
'服务端'
2
[root@R39 ~]# groupadd -g888 www
3
[root@R39 ~]# useradd -M -s /sbin/nologin -g888 -u888 www
4
useradd warning: www's uid 888 outside of the UID_MIN 1000 and UID_MAX 60000 range.'
5
[root@R39 ~]# id www
6
uid=888(www) gid=888(www) groups=888(www)
7
# 先创建用户！
8
[root@R39 ~]# egrep -v '^$|^#' /etc/rsyncd.conf
9
uid = www
10
gid = www
11
fake super = yes
12
use chroot = yes
13
max connections = 4
14
pid file = /var/run/rsyncd.pid
15
log file = /var/log/rsyncd.log
16
read only = false
17
list = false
18
timeout = 900
19
ignore nonreadable = yes
20
hosts allow = 10.0.0.0/24
21
auth users = rsync_backup
22
secrets file = /etc/rsync.password
23

24
[backup]
25
comment = jiuzhao!!!
26
path = /backup
27

28

29
# 根据配置文件创建必要的信息！！！！
30
[root@R39 ~]# touch /var/log/rsyncd.log
31
[root@R39 ~]# mkdir /backup
32
[root@R39 ~]# echo rsync_backup:123 > /etc/rsync.password
33
[root@R39 ~]# chown www:www /var/log/rsyncd.log
34
[root@R39 ~]# chown www:www /backup/
35
[root@R39 ~]# chown www:www /etc/rsync.password
36
[root@R39 ~]# chmod 600 /etc/rsync.password
37
[root@R39 ~]# ll /etc/rsync.password
38
-rw------- 1 www www 17 Mar 14 10:47 /etc/rsync.password
39

40
# 服务的启动
41
[root@R39 ~]# rsync --daemon
42
# 以守护进程的方式启动！
43
[root@R39 ~]# ps aux | grep rsync | grep -v grep
44
root 3549  0.0  0.0 233936  2524 ?Ss 11:01 0:00 rsync --daemon
45
# 查看进程
46
[root@R39 ~]# ss -lntup | grep rsync
47
tcp LISTEN 0  5 0.0.0.0:873 0.0.0.0:* users:(("rsync",pid=3549,fd=5))
48
tcp LISTEN 0  5 [::]:873  [::]:* users:(("rsync",pid=3549,fd=6))
49
# 查看服务
50
[root@R39 ~]# cat /var/run/rsyncd.pid
51
3549
52
# 这里是它的进程id
53
问题：如何重启服务？？？
54
[root@R39 ~]# kill -1 $(cat /var/run/rsyncd.pid)
55
[root@R39 ~]# cat /var/run/rsyncd.pid
56
cat: /var/run/rsyncd.pid: No such file or directory
57
[root@R39 ~]# rsync --daemon
58
[root@R39 ~]# cat /var/run/rsyncd.pid
59
3606
60
# 进程号发生改变,服务重启！
61
[root@R39 ~]# tail -1 /var/log/rsyncd.log
62
2026/03/14 11:15:29 [3719] rsyncd version 3.4.1 starting, listening on port 873
63
# 通过日志我们也可以看出来,成功启动了！
64

65

66
# 本地测试
67
[root@R39 ~]# rsync -avz /etc/passwd rsync_backup@10.0.0.139::backup
68
Password:
69
@ERROR: auth failed on module backup
70
rsync error: error starting client-server protocol (code 5) at main.c(1850) [sender=3.4.1]
71
# 报错！
72
====================================
73
报错正常,我们来看一下日志！
74
[root@R39 ~]# tail /var/log/rsyncd.log
75
2026/03/14 11:28:23 [3834] rsyncd version 3.4.1 starting, listening on port 873
76
# 成功启动！
77
2026/03/14 11:28:48 [3838] connect from R39 (10.0.0.139)
78
# 来自 (10.0.0.139)的连接
79
2026/03/14 11:28:48 [3838] rsync allowed access on module backup from R39 (10.0.0.139)
80
# 允许 (10.0.0.139)进入[backup]模块
81
2026/03/14 11:28:50 [3838] secrets file must be owned by root when running as root (see strict modes)
82
# 到这开始报错了！密码文件应该属于root
83
🚫 rsync 的安全策略（strict modes）规定：当 daemon 以 root 启动时,secrets file 必须由 root 拥有,且权限为 600。否则会拒绝读取,导致认证失败！
84
2026/03/14 11:28:50 [3838] auth failed on module backup from R39 (10.0.0.139) for rsync_backup: ignoring secrets file
85
====================================
86
[root@R39 ~]# ll /etc/rsync.password
87
-rw------- 1 www www 17 Mar 14 10:47 /etc/rsync.password
88
# 我的启动用户是www
89
[root@R39 ~]# chown root:root /etc/rsync.password
90
[root@R39 ~]# ll /etc/rsync.password
91
-rw------- 1 root root 17 Mar 14 10:47 /etc/rsync.password
92
# 属主改为root
93
[root@R39 ~]# kill -1 $(cat /var/run/rsyncd.pid)
94
[root@R39 ~]# rsync --daemon
95
# 重启
96
[root@R39 ~]# tail -1 /var/log/rsyncd.log
97
2026/03/14 11:32:54 [3857] rsyncd version 3.4.1 starting, listening on port 873
98
# 成功启动起来！
99
[root@R39 ~]# rsync -avz /etc/passwd rsync_backup@10.0.0.139::backup
100
Password:
101
sending incremental file list
102
passwd
103

104
sent 1,073 bytes  received 43 bytes  318.86 bytes/sec
105
total size is 2,240  speedup is 2.01
106
# ✅成功传输！

1
'客户端'
2
[root@R11 ~]# mkdir -p /server/sh/
3
[root@R11 sh]# mkdir /data
4
# 用于存放压缩包,利于rsync传输
5
[root@R11 ~]# cd /server/sh/
6
[root@R11 sh]# vim log_back.sh
7
#!bin/bash
8
# author:鲲鹏云
9
# goal:打包备份
10

11
#1.打包压缩
12
tar -zcpf /data/all.tar.gz --exclude='*.tmp' /var/log &>/dev/null
13
echo '打包成功'
14

15
#2.创建指纹文件
16
cd /data/
17
md5sum ./all.tar.gz > ./fingerprint.md5
18
echo '创建指纹成功'
19
cd /server/sh/
20

21
#3.推送至服务端
22
echo 123 >/root/rsync.passwd
23
# 先生成本地密码文件
24
chmod 600 /root/rsync.passwd
25
# 更改权限
26
rsync -avz /data/ rsync_backup@10.0.0.139::backup --password-file=/root/rsync.passwd >/dev/null
27
# 用这个密码文件可以实现免密登录
28
echo '成功推送至服务端'
29

30
#4.清理备份文件
31
find /data -name "*.tar.gz" -type f -mtime +7 | xargs rm -rf
32
echo 'over...successful！！！'
33

34
[root@R11 sh]# ll -lh /server/sh/
35
total 4.0K
36
-rw-r--r-- 1 root root 671 Mar 14 12:18 log_back.sh
37
[root@R11 sh]# sh log_back.sh
38
打包成功
39
创建指纹成功
40
成功推送至服务端
41
over...successful！！！
42
# 客户端运行脚本！
43

44
'服务端验证'
45
[root@R39 backup]# rm -rf ./*
46
[root@R39 backup]# ll
47
total 0
48
[root@R39 backup]# ls -lh
49
total 1.4M
50
-rw-r--r-- 1 www www 1.4M Mar 14 12:56 all.tar.gz
51
-rw-r--r-- 1 www www   47 Mar 14 12:56 fingerprint.md5

1
[root@R39 backup]# md5sum -c fingerprint.md5
2
./all.tar.gz: OK
3
[root@R39 backup]# tar -tf all.tar.gz
4
var/log/
5
var/log/private/
6
var/log/wtmp
7
......
8
var/log/vmware-network.log
9
# 查看压缩包内容
10
[root@R39 backup]# tar -tf all.tar.gz | grep '.*tmp$'
11
var/log/wtmp
12
var/log/btmp
13
# 以tmp结尾
14
'这里是因为.点没有被\转义'
15
[root@R39 backup]# tar -tf all.tar.gz | grep '.*\.tmp$'
16
# 再次过滤,它是没有以.tmp结尾了文件的
17
[root@R39 backup]# ll /tmp/var/
18
total 4
19
drwxr-xr-x 13 root root 4096 Mar 14 09:35 log
20
[root@R39 backup]# ll /tmp/var/log/
21
total 4156
22
drwxr-xr-x 2 root   root      4096 Mar  2 19:31 anaconda
23
......
24
-rw------- 1 root   root       379 Mar 10 14:00 vmware-network.6.log
25
-rw------- 1 root   root       193 Mar  5 10:54 vmware-network.7.log
26
[root@R39 backup]# find /tmp/var/log/ -name "*.tmp"
27
# 也没有以.tmp结尾的文件！

1
-r     #递归传输目录及子目录
2
-P    #这个就是显示完成了进度,百分号100%
3
    #大写的P
4
--password-file    #指定密码文件
5
--bwlimit=500kb   #限速,默认单位为kb
6
--exclude      #（相对路径）排除文件,不备份这些文件
7
--delete      #以当前主机为准（推）: 目标和我一致
8
          #以目标主机为准（拉）: 目标有啥我有啥
9
          #总结来说就是谁在前面以谁为准
10

11
1.显示进度,限速并传输
12
[root@nfs ~]#dd if=/dev/zero of=/tmp/1g bs=10M count=100
13
# 创建指定大小的文件
14
100+0 records in
15
100+0 records out
16
1048576000 bytes (1.0 GB, 1000 MiB) copied, 3.01887 s, 347 MB/s
17
[root@nfs ~]#rsync -avzP --bwlimit=500 /tmp/1g root@172.16.1.41:/tmp
18
# 默认是限速kb
19
Authorized users only. All activities may be monitored and reported.
20
root@172.16.1.41's password: '
21
sending incremental file list
22
1g
23
    344,040,200  32%   60.67MB/s    0:00:11
24

25

26
2.排除文件
27
[root@nfs ~]#rm -rf /tmp/*
28
[root@nfs ~]#touch /tmp/{1..5}.txt
29
[root@nfs ~]#rsync -avz /tmp/*  rsync_backup@172.16.1.41::backup --password-file=/etc/rsync_passwd.txt --exclude=2.txt
30
sending incremental file list
31
1.txt
32
3.txt
33
4.txt
34
5.txt
35
# 并没有传输2.txt
36
==============
37
# 改为--exclude=/tmp/2.txt后,不起作用,以/tmp/路径为起点（相对路径）
38
==============
39

40

41
3.--delete
42
[root@backup ~]#rm -f /backup/*
43
# 删除服务端backup目录下的所有文件
44

45
# nfs客户端
46
[root@nfs ~]#rm -rf ./*
47
[root@nfs ~]#mkdir oldboy
48
[root@nfs ~]#touch ./oldboy/{1..5}.txt
49
[root@nfs ~]#rsync -avz ./oldboy  rsync_backup@172.16.1.41::backup --password-file=/etc/rsync_passwd.txt
50
sending incremental file list
51
oldboy/
52
oldboy/1.txt
53
oldboy/2.txt
54
oldboy/3.txt
55
oldboy/4.txt
56
oldboy/5.txt
57
# 传输的是目录及目录下的文件
58
sent 334 bytes  received 123 bytes  914.00 bytes/sec
59
total size is 0  speedup is 0.00
60
[root@nfs ~]#\rm ./oldboy/3.txt
61
# 客户端删除oldboy目录的3.txt
62
[root@nfs ~]#ll ./oldboy/
63
total 0
64
-rw-r--r-- 1 root root 0 Jan 16 21:40 1.txt
65
-rw-r--r-- 1 root root 0 Jan 16 21:40 2.txt
66
-rw-r--r-- 1 root root 0 Jan 16 21:40 4.txt
67
-rw-r--r-- 1 root root 0 Jan 16 21:40 5.txt
68

69
# backup服务端
70
[root@backup ~]#ll /backup/
71
total 0
72
drwxr-xr-x 2 rsync rsync 71 Jan 16 21:40 oldboy
73
[root@backup ~]#ll /backup/oldboy/
74
total 0
75
-rw-r--r-- 1 rsync rsync 0 Jan 16 21:40 1.txt
76
-rw-r--r-- 1 rsync rsync 0 Jan 16 21:40 2.txt
77
-rw-r--r-- 1 rsync rsync 0 Jan 16 21:40 3.txt
78
-rw-r--r-- 1 rsync rsync 0 Jan 16 21:40 4.txt
79
-rw-r--r-- 1 rsync rsync 0 Jan 16 21:40 5.txt
80
[root@backup ~]#\rm /backup/oldboy/1.txt
81
# 删除服务端的1.txt
82
[root@backup ~]#ll /backup/oldboy/
83
total 0
84
-rw-r--r-- 1 rsync rsync 0 Jan 16 21:40 2.txt
85
-rw-r--r-- 1 rsync rsync 0 Jan 16 21:40 3.txt
86
-rw-r--r-- 1 rsync rsync 0 Jan 16 21:40 4.txt
87
-rw-r--r-- 1 rsync rsync 0 Jan 16 21:40 5.txt
88

89
分析：现在客户端有1,2,4,5.txt  服务端有2,3,4,5.txt
90
# 客户端--delete,（推）和本地保持一致
91
[root@nfs ~]#rsync -avz ./oldboy  rsync_backup@172.16.1.41::backup --password-file=/etc/rsync_passwd.txt --delete
92
sending incremental file list
93
deleting oldboy/3.txt
94
oldboy/
95
oldboy/1.txt
96
# 删除远程服务器的3.txt,同步自己的1.txt
97
sent 181 bytes  received 63 bytes  488.00 bytes/sec
98
total size is 0  speedup is 0.00
99

100
# 远程服务器验证
101
[root@backup ~]#ll /backup/oldboy/
102
total 0
103
-rw-r--r-- 1 rsync rsync 0 Jan 16 21:40 1.txt
104
-rw-r--r-- 1 rsync rsync 0 Jan 16 21:40 2.txt
105
-rw-r--r-- 1 rsync rsync 0 Jan 16 21:40 4.txt
106
-rw-r--r-- 1 rsync rsync 0 Jan 16 21:40 5.txt
107
# backup目录下的文件和客户端的./oldboy目录下的文件保持一致

1
1.先清理backup服务端的文件
2
[root@backup ~]#rm -rf /backup/*
3

4
2.测试脚本（客户端进行测试）
5
[root@nfs ~]#sh /server/scripts/back_conf.sh
6
tar: Removing leading `/' from member names'
7
# 第一条不用管他,它的意思就是去除/根目录
8
/etc/hosts
9
# 变为etc/hosts
10
sending incremental file list
11
10.0.0.31/
12
10.0.0.31/conf-2026-01-17.tar.gz
13
sent 388 bytes  received 47 bytes  870.00 bytes/sec
14
total size is 243  speedup is 0.56
15
# 在测试的过程中,会有一些报错什么的,自己去适当的修改自己的脚本文件
16

17
3.服务端验证
18
[root@backup ~]#tree /backup/
19
/backup/
20
└── 10.0.0.31
21
    └── conf-2026-01-17.tar.gz
22
# 按照我们想要的格式传输过来了

1
1.写入定时任务
2
# 这里是客户端的脚本加入自己的定时任务中
3
# 我们选用root用户的定时任务
4
[root@nfs ~]#crontab -l
5
*/1 * * * * sh /server/scripts/back_conf.sh &>/dev/null
6
# 执行脚本的时候有输出,在定时任务中,可以选择 &>/dev/null
7
# 也可以追加到一个自己创建的文件中,比如给这个脚本来个日志文件,&>/var/log/back_rsync.log
8

9
2.定时任务验证
10
# 服务端
11
[root@backup ~]#rm -rf /backup/*
12
[root@backup ~]#tree /backup/
13
/backup/
14
└── 10.0.0.31
15
    └── conf-2026-01-17.tar.gz
16
# 删除之后,隔一分钟就又会备份过来了
17

18
3.修改定时任务时间
19
[root@nfs ~]#crontab -l
20
00 03 * * * sh /server/scripts/back_conf.sh &>/dev/null
21
# 每天凌晨3点执行一次

1
[root@backup ~]#tree /backup/
2
/backup/
3
└── 10.0.0.31
4
    └── conf-2026-01-17.tar.gz
5
[root@backup ~]#find /backup -type f -name '*.tar.gz'
6
/backup/10.0.0.31/conf-2026-01-17.tar.gz
7
[root@backup ~]#find /backup -type f -name '*.tar.gz' | xargs ls -lh
8
-rw-r--r-- 1 rsync rsync 243 Jan 17 11:17 /backup/10.0.0.31/conf-2026-01-17.tar.gz
9
[root@backup ~]#find /backup -type f -name '*.tar.gz' | xargs ls -lh | awk -F'[ /]+' '{print $(NF-1),$NF,$5}'
10
10.0.0.31 conf-2026-01-17.tar.gz 243
11

12
# 续航符；（撬棍）\
13
# 强制换行
14
[root@backup ~]#find /backup -type f -name '*.tar.gz' |\
15
> xargs ls -lh |\
16
> awk -F'[ /]+' '{print "IP地址："$(NF-1)" 文件名："$NF" 文件大小："$5}'
17
IP地址：10.0.0.31 文件名：conf-2026-01-17.tar.gz 文件大小：243
18
# 有这个“双引号”可以替代,(逗号)
19
# 但不建议这样写,下面这种方式更简明,而并方便扩展
20
[root@backup ~]#find /backup -type f -name '*.tar.gz' |\
21
> xargs ls -lh |\
22
> awk -F'[ /]+' 'BEGIN{print "IP地址","文件名","文件大小"}{print $(NF-1),$NF,$5}'|\
23
> column -t
24
IP地址     文件名                  文件大小
25
10.0.0.31  conf-2026-01-17.tar.gz  243
26
# 为了后面方便我们发邮件,将统计的结果写入到一个文件中

1
1.客户端配置
2
# 当我们tar压缩完之后,给.tar.gz压缩文件做指纹
3
[root@nfs ~]#tree /backup/
4
/backup/
5
└── 10.0.0.31
6
    └── conf-2026-01-17.tar.gz
7
[root@nfs ~]#md5sum /backup/10.0.0.31/conf-2026-01-17.tar.gz > /backup/10.0.0.31/fingerprint.md5
8
# 这个压缩包在对应主机目录下
9
# 用的是>覆盖写,也就是一直都是这个指纹文件,只不过每天里面的内容不同罢了
10
# 一定要使用绝对路径
11
# 这个指纹文件也在对应主机目录下
12
[root@nfs ~]#tree /backup/
13
/backup/
14
└── 10.0.0.31
15
    ├── conf-2026-01-17.tar.gz
16
    └── fingerprint.md5
17

18
2.客户端脚本的重新量化