InfoScale™ 9.0 Storage Foundation Administrator's Guide - Linux

To configure SecureFS for PostgreSQL using CLI

1. Run the command to ensure that vxfstaskd is in an active state.

   # systemctl status vxfstaskd

2. Enable Compliance (WORM) or Enterprise (SoftWORM) on data file mount point.

   # /opt/VRTS/bin/fsadm -o <worm/softworm> <mount point>

   Sample command:

   # /opt/VRTS/bin/fsadm -o worm /dbmnt

3. Create a secureFS config file on the data file mount point.

   # /opt/VRTS/bin/vxschadm create <mount point>

   Sample command:

   # /opt/VRTS/bin/vxschadm create /dbmnt

4. Configure SecureFS for PostgreSQL.

   Run the following command if the authentication mode is set to Trust:

   # vxschadm add application postgres --pguser postgres
   --pgauth trust --pgdata /db/pdata --pgarc /arcmnt

   Run the following command if the authentication mode is set to Peer:

   # vxschadm add application postgres --pguser postgres --pgauth peer 
   --pgdata /db/pdata --pgarc /arcmnt --pgsysuser postgres

5. Enable the checkpoint feature on the data file mount point.

   # /opt/VRTS/bin/vxschadm add checkpoint <interval in os cron format> <maximum number of checkpoints> <retention period of checkpoint> <time mode> <removable> <mount_point>

   Time interval

   Format : "mm hh dd MM ww"
   mm : minutes (0-59) or *
   hh : hours (0-23) or *
   dd : days (1-31) or *
   MM: months (1-12) or *
   ww: week (0-6) SUNDAY=0, SATURADAY=6
   

   *: Refers 'per', for example per minute, per hour, and so on.

   Time mode can be:

   m : minutes
   h : hours
   d : days
   M : months
   y : years
   

   Sample command and output:

   # /opt/VRTS/bin/vxschadm add checkpoint "59 15 * * *" 5 1 h 1 /dbmnt

   Following are the sample output of the snapshot format:

   Example 1: "30 15 * * *" Output: Every day at 1530 hours, the task is run.

   Example 2: "30 15 * * 6" :Output: Every Saturday at 1530 hours, the task is run.

   Caution: "* * * * *"

   Every minute and hour options are not supported.

6. If the PostgreSQL instance is under VCS control, you must mark the file system where the PostgreSQL database (DB) resource is online as primary. You can mark the file system as primary by setting the PostgreSQL resource's SetFSPrimary attribute value to 1.

   The SetFSPrimary attribute for PostgreSQL resource in VCS configures the file system as primary on the node where the PostgreSQL DB resource is online. This attribute plays an important role when the PostgreSQL database is set up as a VCS resource in the PostgreSQL service group that includes both CFSmount and CVMVoldg resources.

   • Run the following commands to enable the SetFSPrimary attribute:

     # /opt/VRTSvcs/bin/haconf -makerw
     # /opt/VRTSvcs/bin/hares -modify PostgreSQLresourcename SetFSPrimary 1
     # /opt/VRTSvcs/bin/haconf -dump -makero

   Note the following when you use this attribute in SecureFS configuration:

   • This attribute takes effect only when Cluster Server (VCS) manages the startup of the application.

   • If an application mount point is added after the VCS resource is online, then to mark the mount point as primary on the file system, you must restart the VCS application service group.

   When the PostgreSQL resource is online on a node, the InfoScale cluster file system (CFS) should be primary on that same node to ensure that the SecureFS feature functions correctly. To achieve this, set SetFSPrimary to 1 where the PostgreSQL resource is present. With SetFSPrimary set to 1, the PostgreSQL agent resource ensures that the underlying CFS mount is primary on that node.