This document discusses ElectricSheep.IO, an open source backup tool. It begins with an overview of ServeBox, a development company that adopted DevOps practices including centralized backups. The document then covers issues with existing backup solutions and how ElectricSheep.IO addresses these through a simple domain-specific language. It includes a live demo of ElectricSheep.IO, showing how to backup databases and files from multiple servers while encrypting passwords and backups.

1. by
ElectricSheep.IO
ServeBox
OU COMMENT NOUS AVONS TROUVÉ DES
MOUTONS ÉLECTRIQUES SUR LA ROUTE
par Fabrice Nourisson / (un développeur hédoniste)@duckmole

2. DÉROULEMENT DE L'ATELIER
15 min la route vers le devops et ElectricSheep.IO
30 min live démo d'ElectricSheep.IO

3. UNE ÉQUIPE EN ROUTE
POUR LE DEVOPS
ServeBox est une société de développement
passée au devops pour les besoins de ses clients

4. UNE ÉQUIPE EN ROUTE
POUR LE DEVOPS
Production de code

5. UNE ÉQUIPE EN ROUTE
POUR LE DEVOPS
Déploiement

6. UNE ÉQUIPE EN ROUTE
POUR LE DEVOPS
Opérations
Monitoring et Alerte Reprise d'activité ?

7. LES DEVS ET LE BACKUP
Solutions existantes trop lourdes
Mauvaise maîtrise du bash
Une configuration par serveur et par projet
Alerte en cas d'échec
Téléversement (upload) vers des systèmes tiers

8. LES DEVS ET LE BACKUP
Une DSL

9. LES DEVS ET LE BACKUP
La centralisation
One server to rule them all

10. LES DEVS ET LE BACKUP
Notifications claires

11. LES DEVS ET LE BACKUP
Confidentialité

12. QUI L'UTILISE ET POUR QUOI ?
SonarSource backup
ses bases de données
et fichiers
Servebox backup
les bases de données
des applications
e-labo backup ~70
environnements clients
(CMS)

13. POURQUOI PAS VOUS ?
UTILISER
humans [at] electricsheep [dot] io
Getting Started
CONTRIBUER
Code sur github
Doc. sur readme.io

14. ET MAINTENANT LE LIVE CODING

16. INSTALLATION
curl https://github.com/servebox/electric_sheep/releases/download/v0.5.0/electric­sheep­ubuntu_0.5.0­1_amd64.deb
md5 electric­sheep­ubuntu_0.5.0­1_amd64.deb
dpkg ­i electric­sheep­ubuntu_0.5.0­1_amd64.deb
Doc d'installation

17. CRÉATION ET INSTALLATION DES CLÉS SSH
ssh­keygen ­t rsa ­N '' ­f electric_sheep_rsa
ssh­copy­id ­i electric_sheep_rsa.pub servebox@ornithorynque.com
ssh­copy­id ­i electric_sheep_rsa.pub servebox@have­fun­with­tdd.com
Doc. de création des clés ssh

18. SAUVEGARDE DU SITE WORDPRESS HAVE-FUN-
WITH-TDD
SheepFile
Commande
host "have­fun­with­tdd", hostname: "192.168.50.4", private_key: "electric_sheep_rsa"
working_directory "/backups"
job "have­fun­with­tdd­files" do
schedule "daily", at: "00:00"
resource "directory", path: "/var/www", host: "have­fun­with­tdd"
remotely as: "servebox" do
tar_gz delete_source: true
end
move to: "localhost", using: "scp", as: "servebox"
end
job "have­fun­with­tdd­db" do
schedule "daily", at: "00:00"
resource "database", name: "wordpress", host: "have­fun­with­tdd"
remotely as: "servebox" do
mysql_dump user: "wordpress", password: "wordpress"
tar_gz delete_source: true
end
move to: "localhost", using: "scp", as: "servebox"
end
electric_sheep
Cookbook pour wordpress

19. SAUVEGARDE DE LA BASE DE DONNÉES
POSTGRESQL DU SITE ORNITHORYNQUE
host "ornithorynque", hostname: "192.168.50.5", private_key: "electric_sheep_rsa"
working_directory "/backups"
job "ornithorynque­db" do
schedule "daily", at: "00:00"
resource "database", name: "hello_phoenix_dev", host: "ornithorynque"
remotely as: "servebox" do
postgresql_dump user: "electric_sheep", password: "password"
end
remotely as: "servebox" do
tar_gz delete_source: true
end
move to: "localhost", using: "scp", as: "servebox"
end
Cookbook pour PostgreSQL

20. CRÉATION DES CLÉS GPG
gpg ­­gen­key
gpg ­­batch ­­armor ­­output electric_sheep.public.gpg.asc ­­export electricsheep.io@servebox.com
gpg ­­batch ­­armor ­­output electric_sheep.private.gpg.asc ­­export­secret­key electricsheep.io@servebox.com
Doc. pour la création des clés gpg

21. CHIFFREMENT DES MOTS DE PASSE
electric_sheep encrypt ­k electric_sheep.public.gpg.asc "password"
Doc. pour chiffrer les mots de passe

22. SHEEPFILE AVEC MOTS DE PASSE CHIFFRÉS
host "ornithorynque", hostname: "192.168.50.5", private_key: "electric_sheep_rsa"
working_directory "/backups"
decrypt with: "electric_sheep.private.gpg.asc"
job "ornithorynque­db" do
schedule "daily", at: "00:00"
resource "database", name: "hello_phoenix_dev", host: "ornithorynque"
remotely as: "servebox" do
postgresql_dump user: "electric_sheep", password: encrypted("xxxx")
end
remotely as: "servebox" do
tar_gz
end
move to: "localhost", using: "scp", as: "servebox"
locally do
encrypt delete_source: true
end
end
Doc. pour chiffrer les mots de passe

23. RÉCUPÉRATION DE LA CLÉ PUBLIQUE GPG POUR
LE CHIFFREMENT DES SAUVEGARDES
gpg ­­armor ­­output fabrice.public.gpg.asc ­­export fabrice@nourisson­pytel.fr
Doc. pour générer la clé publique

24. CHIFFREMENT DES SAUVEGARDES
host "ornithorynque", hostname: "192.168.50.5", private_key: "electric_sheep_rsa"
working_directory "/backups"
decrypt with: "electric_sheep.private.gpg.asc"
encrypt with: 'fabrice.public.gpg.asc'
job "ornithorynque­db" do
schedule "daily", at: "00:00"
resource "database", name: "hello_phoenix_dev", host: "ornithorynque"
remotely as: "servebox" do
postgresql_dump user: "electric_sheep", password: encrypted("xxxx")
end
remotely as: "servebox" do
tar_gz delete_source: true
end
move to: "localhost", using: "scp", as: "servebox"
locally do
encrypt delete_source: true
end
end
Doc. pour chiffrer les sauvegardes

25. SheepFile
host "ornithorynque", hostname: "192.168.50.5", private_key: "electric_sheep_rsa"
working_directory "/backups"
decrypt with: "electric_sheep.private.gpg.asc"
encrypt with: 'fabrice.public.gpg.asc'
job "ornithorynque­db" do
schedule "daily", at: "00:00"
resource "database", name: "hello_phoenix_dev", host: "ornithorynque"
remotely as: "servebox" do
postgresql_dump user: "electric_sheep", password: encrypted("xxxx")
end
remotely as: "servebox" do
tar_gz delete_source: true
end
move to: "localhost", using: "scp", as: "servebox"
locally do
encrypt delete_source: true
end
end
host "have­fun­with­tdd", hostname: "192.168.50.4", private_key: "electric_sheep_rsa"
working_directory "/backups"
job "have­fun­with­tdd­files" do
schedule "daily", at: "00:00"
resource "directory", path: "/var/www", host: "have­fun­with­tdd"
remotely as: "servebox" do
tar_gz delete_source: true
end
move to: "localhost", using: "scp", as: "servebox"
end
job "have­fun­with­tdd­db" do
schedule "daily", at: "00:00"
resource "database", name: "wordpress", host: "have­fun­with­tdd"
remotely as: "servebox" do
mysql_dump user: "wordpress", password: "wordpress"
tar_gz delete_source: true
end
move to: "localhost", using: "scp", as: "servebox"
end

26. #DEVOPSDDAY #ESIO
MERCI
by
http://electricsheep.io
ServeBox
DEVELOPERS,
GIVE YOUR BACKUPS SOME LOVE