Detections
Analytics

8.3 Ensure the backup and restore tool, 'pgBackRest', is installed and configured

Information

pgBackRest aims to be a simple, reliable backup and restore system that can seamlessly scale up to the largest databases and workloads. Instead of relying on traditional backup tools like tar and rsync, pgBackRest implements all backup features internally and uses a custom protocol for communicating with remote systems. Removing reliance on tar and rsync allows for better solutions to database-specific backup challenges. The custom remote protocol allows for more flexibility and limits the types of connections that are required to perform a backup which increases security.
Rationale:
The native PostgreSQL backup facility pg_dump provides adequate logical backup operations but does not provide for Point In Time Recovery (PITR). The PostgreSQL facility pg_basebackup performs physical backup of the database files and does provide for PITR, but it is constrained by single threading. Both of these methodologies are standard in the PostgreSQL ecosystem and appropriate for particular backup/recovery needs. pgBackRest offers another option with much more robust features and flexibility.
pgBackRest is open source software developed to perform efficient backups on PostgreSQL databases that measure in tens of terabytes and greater. It supports per file checksums, compression, partial/failed backup resume, high-performance parallel transfer, asynchronous archiving, tablespaces, expiration, full/differential/incremental, local/remote operation via SSH, hard-linking, restore, backup encryption, and more. pgBackRest is written in C and Perl and does not depend on rsync or tar but instead performs its own deltas which gives it maximum flexibility. Finally, pgBackRest provides an easy to use internal repository listing backup details accessible via the pgbackrest info command, as illustrated below.
$ pgbackrest info
stanza: proddb01
status: ok

db (current)
 wal archive min/max (11.3-1): 000000010000000000000012 / 000000010000000000000017

 full backup: 20190603-153106F
 timestamp start/stop: 2019-06-03 15:31:06 / 2019-06-03 15:31:49
 wal start/stop: 000000010000000000000012 / 000000010000000000000012
 database size: 29.4MB, backup size: 29.4MB
 repository size: 3.4MB, repository backup size: 3.4MB

 diff backup: 20190603-153106F_20181002-173109D
 timestamp start/stop: 2019-06-03 17:31:09 / 2019-06-03 17:31:19
 wal start/stop: 000000010000000000000015 / 000000010000000000000015
 database size: 29.4MB, backup size: 2.6MB
 repository size: 3.4MB, repository backup size: 346.8KB
 backup reference list: 20190603-153106F

 incr backup: 20190603-153106F_20181002-183114I
 timestamp start/stop: 2019-06-03 18:31:14 / 2019-06-03 18:31:22
 wal start/stop: 000000010000000000000017 / 000000010000000000000017
 database size: 29.4MB, backup size: 8.2KB
 repository size: 3.4MB, repository backup size: 519B
 backup reference list: 20190603-153106F, 20190603-153106F_20190603-173109D

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

pgBackRest is not installed nor configured for PostgreSQL by default, but instead is maintained as a GitHub project. Fortunately, it is a part of the PGDG repository and can be easily installed:
$ whoami
root
$ yum -y install pgbackrest
Loaded plugins: fastestmirror, priorities
Loading mirror speeds from cached hostfile
epel/x86_64/metalink | 18 kB 00:00:00
 * base: mirror.cisp.com
 * centos-sclo-rh: mirror.cc.columbia.edu
 * centos-sclo-sclo: mirror.cisp.com
 * epel: mirror.umd.edu
 * extras: mirror.cisp.com
 * updates: mirror.cisp.com
base | 3.6 kB 00:00:00
centos-sclo-rh | 3.0 kB 00:00:00
centos-sclo-sclo | 2.9 kB 00:00:00
epel | 5.3 kB 00:00:00
extras | 3.4 kB 00:00:00
pgdg10 | 3.6 kB 00:00:00
pgdg11 | 3.6 kB 00:00:00
pgdg94 | 3.6 kB 00:00:00
pgdg95 | 3.6 kB 00:00:00
pgdg96 | 3.6 kB 00:00:00
updates | 3.4 kB 00:00:00
(1/7): epel/x86_64/updateinfo | 977 kB 00:00:00
(2/7): pgdg11/7/x86_64/primary_db | 185 kB 00:00:00
(3/7): pgdg96/7/x86_64/primary_db | 248 kB 00:00:00
(4/7): pgdg94/7/x86_64/primary_db | 258 kB 00:00:00
(5/7): pgdg10/7/x86_64/primary_db | 230 kB 00:00:01
(6/7): pgdg95/7/x86_64/primary_db | 247 kB 00:00:01
(7/7): epel/x86_64/primary_db | 6.7 MB 00:00:02
1467 packages excluded due to repository priority protections
Resolving Dependencies
--> Running transaction check
---> Package pgbackrest.x86_64 0:2.14-1.rhel7 will be installed
--> Processing Dependency: perl-XML-LibXML for package: pgbackrest-2.14-1.rhel7.x86_64
--> Processing Dependency: perl-JSON-PP for package: pgbackrest-2.14-1.rhel7.x86_64
--> Processing Dependency: perl-IO-Socket-SSL for package: pgbackrest-2.14-1.rhel7.x86_64
--> Processing Dependency: perl-Digest-SHA for package: pgbackrest-2.14-1.rhel7.x86_64
--> Processing Dependency: perl-DBD-Pg for package: pgbackrest-2.14-1.rhel7.x86_64
--> Running transaction check
---> Package perl-DBD-Pg.x86_64 0:2.19.3-4.el7 will be installed
--> Processing Dependency: perl(DBI) >= 1.52 for package: perl-DBD-Pg-2.19.3-4.el7.x86_64
--> Processing Dependency: perl(version) for package: perl-DBD-Pg-2.19.3-4.el7.x86_64
---> Package perl-Digest-SHA.x86_64 1:5.85-4.el7 will be installed
--> Processing Dependency: perl(Digest::base) for package: 1:perl-Digest-SHA-5.85-4.el7.x86_64
---> Package perl-IO-Socket-SSL.noarch 0:1.94-7.el7 will be installed
--> Processing Dependency: perl-Net-SSLeay >= 1.55-5 for package: perl-IO-Socket-SSL-1.94-7.el7.noarch
--> Processing Dependency: perl(Net::SSLeay) >= 1.21 for package: perl-IO-Socket-SSL-1.94-7.el7.noarch
--> Processing Dependency: perl(IO::Socket::IP) >= 0.20 for package: perl-IO-Socket-SSL-1.94-7.el7.noarch
--> Processing Dependency: perl(Net::SSLeay) for package: perl-IO-Socket-SSL-1.94-7.el7.noarch
--> Processing Dependency: perl(Net::LibIDN) for package: perl-IO-Socket-SSL-1.94-7.el7.noarch
--> Processing Dependency: perl(Mozilla::CA) for package: perl-IO-Socket-SSL-1.94-7.el7.noarch
---> Package perl-JSON-PP.noarch 0:2.27202-2.el7 will be installed
--> Processing Dependency: perl(Data::Dumper) for package: perl-JSON-PP-2.27202-2.el7.noarch
---> Package perl-XML-LibXML.x86_64 1:2.0018-5.el7 will be installed
--> Processing Dependency: perl(XML::SAX::Exception) for package: 1:perl-XML-LibXML-2.0018-5.el7.x86_64
--> Processing Dependency: perl(XML::SAX::DocumentLocator) for package: 1:perl-XML-LibXML-2.0018-5.el7.x86_64
--> Processing Dependency: perl(XML::SAX::Base) for package: 1:perl-XML-LibXML-2.0018-5.el7.x86_64
--> Processing Dependency: perl(XML::NamespaceSupport) for package: 1:perl-XML-LibXML-2.0018-5.el7.x86_64
--> Running transaction check
---> Package perl-DBI.x86_64 0:1.627-4.el7 will be installed
--> Processing Dependency: perl(RPC::PlServer) >= 0.2001 for package: perl-DBI-1.627-4.el7.x86_64
--> Processing Dependency: perl(RPC::PlClient) >= 0.2000 for package: perl-DBI-1.627-4.el7.x86_64
---> Package perl-Data-Dumper.x86_64 0:2.145-3.el7 will be installed
---> Package perl-Digest.noarch 0:1.17-245.el7 will be installed
---> Package perl-IO-Socket-IP.noarch 0:0.21-5.el7 will be installed
---> Package perl-Mozilla-CA.noarch 0:20130114-5.el7 will be installed
---> Package perl-Net-LibIDN.x86_64 0:0.12-15.el7 will be installed
---> Package perl-Net-SSLeay.x86_64 0:1.55-6.el7 will be installed
---> Package perl-XML-NamespaceSupport.noarch 0:1.11-10.el7 will be installed
---> Package perl-XML-SAX.noarch 0:0.99-9.el7 will be installed
--> Processing Dependency: perl(LWP::UserAgent) for package: perl-XML-SAX-0.99-9.el7.noarch
---> Package perl-XML-SAX-Base.noarch 0:1.08-7.el7 will be installed
---> Package perl-version.x86_64 3:0.99.07-3.el7 will be installed
--> Running transaction check
---> Package perl-PlRPC.noarch 0:0.2020-14.el7 will be installed
--> Processing Dependency: perl(Net::Daemon) >= 0.13 for package: perl-PlRPC-0.2020-14.el7.noarch
--> Processing Dependency: perl(Net::Daemon::Test) for package: perl-PlRPC-0.2020-14.el7.noarch
--> Processing Dependency: perl(Net::Daemon::Log) for package: perl-PlRPC-0.2020-14.el7.noarch
--> Processing Dependency: perl(Compress::Zlib) for package: perl-PlRPC-0.2020-14.el7.noarch
---> Package perl-libwww-perl.noarch 0:6.05-2.el7 will be installed
--> Processing Dependency: perl(WWW::RobotRules) >= 6 for package: perl-libwww-perl-6.05-2.el7.noarch
--> Processing Dependency: perl(URI) >= 1.10 for package: perl-libwww-perl-6.05-2.el7.noarch
--> Processing Dependency: perl(Net::HTTP) >= 6.04 for package: perl-libwww-perl-6.05-2.el7.noarch
--> Processing Dependency: perl(LWP::MediaTypes) >= 6 for package: perl-libwww-perl-6.05-2.el7.noarch
--> Processing Dependency: perl(HTTP::Status) >= 6 for package: perl-libwww-perl-6.05-2.el7.noarch
--> Processing Dependency: perl(HTTP::Response) >= 6 for package: perl-libwww-perl-6.05-2.el7.noarch
--> Processing Dependency: perl(HTTP::Request::Common) >= 6 for package: perl-libwww-perl-6.05-2.el7.noarch
--> Processing Dependency: perl(HTTP::Request) >= 6 for package: perl-libwww-perl-6.05-2.el7.noarch
--> Processing Dependency: perl(HTTP::Negotiate) >= 6 for package: perl-libwww-perl-6.05-2.el7.noarch
--> Processing Dependency: perl(HTTP::Date) >= 6 for package: perl-libwww-perl-6.05-2.el7.noarch
--> Processing Dependency: perl(HTTP::Daemon) >= 6 for package: perl-libwww-perl-6.05-2.el7.noarch
--> Processing Dependency: perl(HTTP::Cookies) >= 6 for package: perl-libwww-perl-6.05-2.el7.noarch
--> Processing Dependency: perl(File::Listing) >= 6 for package: perl-libwww-perl-6.05-2.el7.noarch
--> Processing Dependency: perl(URI::Heuristic) for package: perl-libwww-perl-6.05-2.el7.noarch
--> Processing Dependency: perl(URI::Escape) for package: perl-libwww-perl-6.05-2.el7.noarch
--> Processing Dependency: perl(HTML::HeadParser) for package: perl-libwww-perl-6.05-2.el7.noarch
--> Processing Dependency: perl(HTML::Entities) for package: perl-libwww-perl-6.05-2.el7.noarch
--> Processing Dependency: perl(Encode::Locale) for package: perl-libwww-perl-6.05-2.el7.noarch
--> Processing Dependency: perl(Digest::MD5) for package: perl-libwww-perl-6.05-2.el7.noarch
--> Running transaction check
---> Package perl-Digest-MD5.x86_64 0:2.52-3.el7 will be installed
---> Package perl-Encode-Locale.noarch 0:1.03-5.el7 will be installed
---> Package perl-File-Listing.noarch 0:6.04-7.el7 will be installed
---> Package perl-HTML-Parser.x86_64 0:3.71-4.el7 will be installed
--> Processing Dependency: perl(HTML::Tagset) >= 3 for package: perl-HTML-Parser-3.71-4.el7.x86_64
---> Package perl-HTTP-Cookies.noarch 0:6.01-5.el7 will be installed
---> Package perl-HTTP-Daemon.noarch 0:6.01-8.el7 will be installed
---> Package perl-HTTP-Date.noarch 0:6.02-8.el7 will be installed
--> Processing Dependency: perl(Time::Zone) for package: perl-HTTP-Date-6.02-8.el7.noarch
---> Package perl-HTTP-Message.noarch 0:6.06-6.el7 will be installed
--> Processing Dependency: perl(IO::HTML) for package: perl-HTTP-Message-6.06-6.el7.noarch
--> Processing Dependency: perl(Compress::Raw::Zlib) for package: perl-HTTP-Message-6.06-6.el7.noarch
---> Package perl-HTTP-Negotiate.noarch 0:6.01-5.el7 will be installed
---> Package perl-IO-Compress.noarch 0:2.061-2.el7 will be installed
--> Processing Dependency: perl(Compress::Raw::Bzip2) >= 2.061 for package: perl-IO-Compress-2.061-2.el7.noarch
---> Package perl-LWP-MediaTypes.noarch 0:6.02-2.el7 will be installed
--> Processing Dependency: mailcap for package: perl-LWP-MediaTypes-6.02-2.el7.noarch
---> Package perl-Net-Daemon.noarch 0:0.48-5.el7 will be installed
---> Package perl-Net-HTTP.noarch 0:6.06-2.el7 will be installed
---> Package perl-URI.noarch 0:1.60-9.el7 will be installed
--> Processing Dependency: perl(Business::ISBN) for package: perl-URI-1.60-9.el7.noarch
---> Package perl-WWW-RobotRules.noarch 0:6.02-5.el7 will be installed
--> Running transaction check
---> Package mailcap.noarch 0:2.1.41-2.el7 will be installed
---> Package perl-Business-ISBN.noarch 0:2.06-2.el7 will be installed
--> Processing Dependency: perl(Business::ISBN::Data) >= 20120719.001 for package: perl-Business-ISBN-2.06-2.el7.noarch
---> Package perl-Compress-Raw-Bzip2.x86_64 0:2.061-3.el7 will be installed
---> Package perl-Compress-Raw-Zlib.x86_64 1:2.061-4.el7 will be installed
---> Package perl-HTML-Tagset.noarch 0:3.20-15.el7 will be installed
---> Package perl-IO-HTML.noarch 0:1.00-2.el7 will be installed
---> Package perl-TimeDate.noarch 1:2.30-2.el7 will be installed
--> Running transaction check
---> Package perl-Business-ISBN-Data.noarch 0:20120719.001-2.el7 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

=============================================================================
 Package Arch Version Repository Size
=============================================================================
Installing:
 pgbackrest x86_64 2.14-1.rhel7 pgdg11 275 k
Installing for dependencies:
 mailcap noarch 2.1.41-2.el7 base 31 k
 perl-Business-ISBN noarch 2.06-2.el7 base 25 k
 perl-Business-ISBN-Data noarch 20120719.001-2.el7 base 24 k
 perl-Compress-Raw-Bzip2 x86_64 2.061-3.el7 base 32 k
 perl-Compress-Raw-Zlib x86_64 1:2.061-4.el7 base 57 k
 perl-DBD-Pg x86_64 2.19.3-4.el7 base 195 k
 perl-DBI x86_64 1.627-4.el7 base 802 k
 perl-Data-Dumper x86_64 2.145-3.el7 base 47 k
 perl-Digest noarch 1.17-245.el7 base 23 k
 perl-Digest-MD5 x86_64 2.52-3.el7 base 30 k
 perl-Digest-SHA x86_64 1:5.85-4.el7 base 58 k
 perl-Encode-Locale noarch 1.03-5.el7 base 16 k
 perl-File-Listing noarch 6.04-7.el7 base 13 k
 perl-HTML-Parser x86_64 3.71-4.el7 base 115 k
 perl-HTML-Tagset noarch 3.20-15.el7 base 18 k
 perl-HTTP-Cookies noarch 6.01-5.el7 base 26 k
 perl-HTTP-Daemon noarch 6.01-8.el7 base 21 k
 perl-HTTP-Date noarch 6.02-8.el7 base 14 k
 perl-HTTP-Message noarch 6.06-6.el7 base 82 k
 perl-HTTP-Negotiate noarch 6.01-5.el7 base 17 k
 perl-IO-Compress noarch 2.061-2.el7 base 260 k
 perl-IO-HTML noarch 1.00-2.el7 base 23 k
 perl-IO-Socket-IP noarch 0.21-5.el7 base 36 k
 perl-IO-Socket-SSL noarch 1.94-7.el7 base 115 k
 perl-JSON-PP noarch 2.27202-2.el7 base 55 k
 perl-LWP-MediaTypes noarch 6.02-2.el7 base 24 k
 perl-Mozilla-CA noarch 20130114-5.el7 base 11 k
 perl-Net-Daemon noarch 0.48-5.el7 base 51 k
 perl-Net-HTTP noarch 6.06-2.el7 base 29 k
 perl-Net-LibIDN x86_64 0.12-15.el7 base 28 k
 perl-Net-SSLeay x86_64 1.55-6.el7 base 285 k
 perl-PlRPC noarch 0.2020-14.el7 base 36 k
 perl-TimeDate noarch 1:2.30-2.el7 base 52 k
 perl-URI noarch 1.60-9.el7 base 106 k
 perl-WWW-RobotRules noarch 6.02-5.el7 base 18 k
 perl-XML-LibXML x86_64 1:2.0018-5.el7 base 373 k
 perl-XML-NamespaceSupport noarch 1.11-10.el7 base 18 k
 perl-XML-SAX noarch 0.99-9.el7 base 63 k
 perl-XML-SAX-Base noarch 1.08-7.el7 base 32 k
 perl-libwww-perl noarch 6.05-2.el7 base 205 k
 perl-version x86_64 3:0.99.07-3.el7 base 84 k

Transaction Summary
=============================================================================
Install 1 Package (+41 Dependent packages)

Total download size: 3.7 M
Installed size: 9.5 M
Downloading packages:
(1/42): perl-Compress-Raw-Zlib-2.061-4.el7.x86_64.rpm | 57 kB 00:00:00
(2/42): perl-Business-ISBN-Data-20120719.001-2.el7.noarch.rpm | 24 kB 00:00:00
(3/42): perl-Compress-Raw-Bzip2-2.061-3.el7.x86_64.rpm | 32 kB 00:00:00
(4/42): perl-Data-Dumper-2.145-3.el7.x86_64.rpm | 47 kB 00:00:00
(5/42): perl-Business-ISBN-2.06-2.el7.noarch.rpm | 25 kB 00:00:00
(6/42): perl-Digest-1.17-245.el7.noarch.rpm | 23 kB 00:00:00
(7/42): perl-DBD-Pg-2.19.3-4.el7.x86_64.rpm | 195 kB 00:00:00
(8/42): perl-Encode-Locale-1.03-5.el7.noarch.rpm | 16 kB 00:00:00
(9/42): perl-Digest-SHA-5.85-4.el7.x86_64.rpm | 58 kB 00:00:00
(10/42): perl-Digest-MD5-2.52-3.el7.x86_64.rpm | 30 kB 00:00:00
(11/42): perl-HTML-Tagset-3.20-15.el7.noarch.rpm | 18 kB 00:00:00
(12/42): perl-HTML-Parser-3.71-4.el7.x86_64.rpm | 115 kB 00:00:00
(13/42): perl-HTTP-Daemon-6.01-8.el7.noarch.rpm | 21 kB 00:00:00
(14/42): perl-File-Listing-6.04-7.el7.noarch.rpm | 13 kB 00:00:00
(15/42): perl-HTTP-Date-6.02-8.el7.noarch.rpm | 14 kB 00:00:00
(16/42): perl-HTTP-Cookies-6.01-5.el7.noarch.rpm | 26 kB 00:00:00
(17/42): perl-HTTP-Negotiate-6.01-5.el7.noarch.rpm | 17 kB 00:00:00
(18/42): perl-IO-HTML-1.00-2.el7.noarch.rpm | 23 kB 00:00:00
(19/42): perl-IO-Socket-IP-0.21-5.el7.noarch.rpm | 36 kB 00:00:00
(20/42): perl-IO-Socket-SSL-1.94-7.el7.noarch.rpm | 115 kB 00:00:00
(21/42): perl-JSON-PP-2.27202-2.el7.noarch.rpm | 55 kB 00:00:00
(22/42): perl-HTTP-Message-6.06-6.el7.noarch.rpm | 82 kB 00:00:00
(23/42): perl-LWP-MediaTypes-6.02-2.el7.noarch.rpm | 24 kB 00:00:00
(24/42): perl-Net-Daemon-0.48-5.el7.noarch.rpm | 51 kB 00:00:00
(25/42): perl-Mozilla-CA-20130114-5.el7.noarch.rpm | 11 kB 00:00:00
(26/42): perl-Net-HTTP-6.06-2.el7.noarch.rpm | 29 kB 00:00:00
(27/42): perl-DBI-1.627-4.el7.x86_64.rpm | 802 kB 00:00:00
(28/42): perl-Net-SSLeay-1.55-6.el7.x86_64.rpm | 285 kB 00:00:00
(29/42): perl-Net-LibIDN-0.12-15.el7.x86_64.rpm | 28 kB 00:00:00
(30/42): perl-PlRPC-0.2020-14.el7.noarch.rpm | 36 kB 00:00:00
(31/42): perl-IO-Compress-2.061-2.el7.noarch.rpm | 260 kB 00:00:00
(32/42): perl-URI-1.60-9.el7.noarch.rpm | 106 kB 00:00:00
(33/42): perl-XML-NamespaceSupport-1.11-10.el7.noarch.rpm | 18 kB 00:00:00
(34/42): perl-WWW-RobotRules-6.02-5.el7.noarch.rpm | 18 kB 00:00:00
(35/42): perl-XML-SAX-0.99-9.el7.noarch.rpm | 63 kB 00:00:00
(36/42): perl-TimeDate-2.30-2.el7.noarch.rpm | 52 kB 00:00:00
(37/42): mailcap-2.1.41-2.el7.noarch.rpm | 31 kB 00:00:01
(38/42): perl-XML-SAX-Base-1.08-7.el7.noarch.rpm | 32 kB 00:00:00
(39/42): perl-version-0.99.07-3.el7.x86_64.rpm | 84 kB 00:00:00
(40/42): perl-libwww-perl-6.05-2.el7.noarch.rpm | 205 kB 00:00:00
(41/42): perl-XML-LibXML-2.0018-5.el7.x86_64.rpm | 373 kB 00:00:00
(42/42): pgbackrest-2.14-1.rhel7.x86_64.rpm | 275 kB 00:00:01
-----------------------------------------------------------------------------
Total 1.3 MB/s | 3.7 MB 00:00:02
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
 Installing : perl-Data-Dumper-2.145-3.el7.x86_64 1/42
 Installing : 1:perl-Compress-Raw-Zlib-2.061-4.el7.x86_64 2/42
 Installing : perl-Digest-1.17-245.el7.noarch 3/42
 Installing : perl-XML-SAX-Base-1.08-7.el7.noarch 4/42
 Installing : perl-IO-Socket-IP-0.21-5.el7.noarch 5/42
 Installing : perl-Encode-Locale-1.03-5.el7.noarch 6/42
 Installing : perl-XML-NamespaceSupport-1.11-10.el7.noarch 7/42
 Installing : perl-Digest-MD5-2.52-3.el7.x86_64 8/42
 Installing : 1:perl-Digest-SHA-5.85-4.el7.x86_64 9/42
 Installing : perl-JSON-PP-2.27202-2.el7.noarch 10/42
 Installing : perl-HTML-Tagset-3.20-15.el7.noarch 11/42
 Installing : perl-IO-HTML-1.00-2.el7.noarch 12/42
 Installing : 1:perl-TimeDate-2.30-2.el7.noarch 13/42
 Installing : perl-HTTP-Date-6.02-8.el7.noarch 14/42
 Installing : perl-File-Listing-6.04-7.el7.noarch 15/42
 Installing : perl-Business-ISBN-Data-20120719.001-2.el7.noarch 16/42
 Installing : perl-Business-ISBN-2.06-2.el7.noarch 17/42
 Installing : perl-URI-1.60-9.el7.noarch 18/42
 Installing : perl-WWW-RobotRules-6.02-5.el7.noarch 19/42
 Installing : perl-Net-SSLeay-1.55-6.el7.x86_64 20/42
 Installing : 3:perl-version-0.99.07-3.el7.x86_64 21/42
 Installing : perl-Mozilla-CA-20130114-5.el7.noarch 22/42
 Installing : perl-Net-Daemon-0.48-5.el7.noarch 23/42
 Installing : perl-Compress-Raw-Bzip2-2.061-3.el7.x86_64 24/42
 Installing : perl-IO-Compress-2.061-2.el7.noarch 25/42
 Installing : perl-PlRPC-0.2020-14.el7.noarch 26/42
 Installing : perl-DBI-1.627-4.el7.x86_64 27/42
 Installing : perl-DBD-Pg-2.19.3-4.el7.x86_64 28/42
 Installing : perl-Net-LibIDN-0.12-15.el7.x86_64 29/42
 Installing : perl-IO-Socket-SSL-1.94-7.el7.noarch 30/42
 Installing : perl-Net-HTTP-6.06-2.el7.noarch 31/42
 Installing : mailcap-2.1.41-2.el7.noarch 32/42
 Installing : perl-LWP-MediaTypes-6.02-2.el7.noarch 33/42
 Installing : perl-HTTP-Message-6.06-6.el7.noarch 34/42
 Installing : perl-HTTP-Cookies-6.01-5.el7.noarch 35/42
 Installing : perl-HTML-Parser-3.71-4.el7.x86_64 36/42
 Installing : perl-HTTP-Negotiate-6.01-5.el7.noarch 37/42
 Installing : perl-HTTP-Daemon-6.01-8.el7.noarch 38/42
 Installing : perl-libwww-perl-6.05-2.el7.noarch 39/42
 Installing : perl-XML-SAX-0.99-9.el7.noarch 40/42
 Installing : 1:perl-XML-LibXML-2.0018-5.el7.x86_64 41/42
 Installing : pgbackrest-2.14-1.rhel7.x86_64 42/42
 Verifying : perl-IO-Compress-2.061-2.el7.noarch 1/42
 Verifying : perl-Business-ISBN-2.06-2.el7.noarch 2/42
 Verifying : mailcap-2.1.41-2.el7.noarch 3/42
 Verifying : perl-HTTP-Cookies-6.01-5.el7.noarch 4/42
 Verifying : perl-JSON-PP-2.27202-2.el7.noarch 5/42
 Verifying : perl-Net-LibIDN-0.12-15.el7.x86_64 6/42
 Verifying : perl-Compress-Raw-Bzip2-2.061-3.el7.x86_64 7/42
 Verifying : perl-HTML-Parser-3.71-4.el7.x86_64 8/42
 Verifying : perl-Net-Daemon-0.48-5.el7.noarch 9/42
 Verifying : perl-HTTP-Message-6.06-6.el7.noarch 10/42
 Verifying : perl-Digest-MD5-2.52-3.el7.x86_64 11/42
 Verifying : perl-HTTP-Date-6.02-8.el7.noarch 12/42
 Verifying : perl-WWW-RobotRules-6.02-5.el7.noarch 13/42
 Verifying : perl-XML-NamespaceSupport-1.11-10.el7.noarch 14/42
 Verifying : perl-IO-Socket-SSL-1.94-7.el7.noarch 15/42
 Verifying : perl-Mozilla-CA-20130114-5.el7.noarch 16/42
 Verifying : 3:perl-version-0.99.07-3.el7.x86_64 17/42
 Verifying : perl-DBD-Pg-2.19.3-4.el7.x86_64 18/42
 Verifying : perl-Encode-Locale-1.03-5.el7.noarch 19/42
 Verifying : perl-Data-Dumper-2.145-3.el7.x86_64 20/42
 Verifying : 1:perl-XML-LibXML-2.0018-5.el7.x86_64 21/42
 Verifying : perl-IO-Socket-IP-0.21-5.el7.noarch 22/42
 Verifying : perl-Net-SSLeay-1.55-6.el7.x86_64 23/42
 Verifying : perl-HTTP-Negotiate-6.01-5.el7.noarch 24/42
 Verifying : perl-Business-ISBN-Data-20120719.001-2.el7.noarch 25/42
 Verifying : 1:perl-Compress-Raw-Zlib-2.061-4.el7.x86_64 26/42
 Verifying : perl-libwww-perl-6.05-2.el7.noarch 27/42
 Verifying : perl-HTTP-Daemon-6.01-8.el7.noarch 28/42
 Verifying : perl-LWP-MediaTypes-6.02-2.el7.noarch 29/42
 Verifying : perl-XML-SAX-0.99-9.el7.noarch 30/42
 Verifying : perl-PlRPC-0.2020-14.el7.noarch 31/42
 Verifying : perl-DBI-1.627-4.el7.x86_64 32/42
 Verifying : perl-Net-HTTP-6.06-2.el7.noarch 33/42
 Verifying : 1:perl-TimeDate-2.30-2.el7.noarch 34/42
 Verifying : 1:perl-Digest-SHA-5.85-4.el7.x86_64 35/42
 Verifying : perl-IO-HTML-1.00-2.el7.noarch 36/42
 Verifying : perl-XML-SAX-Base-1.08-7.el7.noarch 37/42
 Verifying : perl-Digest-1.17-245.el7.noarch 38/42
 Verifying : perl-HTML-Tagset-3.20-15.el7.noarch 39/42
 Verifying : pgbackrest-2.14-1.rhel7.x86_64 40/42
 Verifying : perl-URI-1.60-9.el7.noarch 41/42
 Verifying : perl-File-Listing-6.04-7.el7.noarch 42/42

Installed:
 pgbackrest.x86_64 0:2.14-1.rhel7

Dependency Installed:
 mailcap.noarch 0:2.1.41-2.el7 perl-Business-ISBN.noarch 0:2.06-2.el7
 perl-Business-ISBN-Data.noarch 0:20120719.001-2.el7 perl-Compress-Raw-Bzip2.x86_64 0:2.061-3.el7
 perl-Compress-Raw-Zlib.x86_64 1:2.061-4.el7 perl-DBD-Pg.x86_64 0:2.19.3-4.el7
 perl-DBI.x86_64 0:1.627-4.el7 perl-Data-Dumper.x86_64 0:2.145-3.el7
 perl-Digest.noarch 0:1.17-245.el7 perl-Digest-MD5.x86_64 0:2.52-3.el7
 perl-Digest-SHA.x86_64 1:5.85-4.el7 perl-Encode-Locale.noarch 0:1.03-5.el7
 perl-File-Listing.noarch 0:6.04-7.el7 perl-HTML-Parser.x86_64 0:3.71-4.el7
 perl-HTML-Tagset.noarch 0:3.20-15.el7 perl-HTTP-Cookies.noarch 0:6.01-5.el7
 perl-HTTP-Daemon.noarch 0:6.01-8.el7 perl-HTTP-Date.noarch 0:6.02-8.el7
 perl-HTTP-Message.noarch 0:6.06-6.el7 perl-HTTP-Negotiate.noarch 0:6.01-5.el7
 perl-IO-Compress.noarch 0:2.061-2.el7 perl-IO-HTML.noarch 0:1.00-2.el7
 perl-IO-Socket-IP.noarch 0:0.21-5.el7 perl-IO-Socket-SSL.noarch 0:1.94-7.el7
 perl-JSON-PP.noarch 0:2.27202-2.el7 perl-LWP-MediaTypes.noarch 0:6.02-2.el7
 perl-Mozilla-CA.noarch 0:20130114-5.el7 perl-Net-Daemon.noarch 0:0.48-5.el7
 perl-Net-HTTP.noarch 0:6.06-2.el7 perl-Net-LibIDN.x86_64 0:0.12-15.el7
 perl-Net-SSLeay.x86_64 0:1.55-6.el7 perl-PlRPC.noarch 0:0.2020-14.el7
 perl-TimeDate.noarch 1:2.30-2.el7 perl-URI.noarch 0:1.60-9.el7
 perl-WWW-RobotRules.noarch 0:6.02-5.el7 perl-XML-LibXML.x86_64 1:2.0018-5.el7
 perl-XML-NamespaceSupport.noarch 0:1.11-10.el7 perl-XML-SAX.noarch 0:0.99-9.el7
 perl-XML-SAX-Base.noarch 0:1.08-7.el7 perl-libwww-perl.noarch 0:6.05-2.el7
 perl-version.x86_64 3:0.99.07-3.el7

Complete!
Once installed, pgBackRest must be configured for things like stanza name, backup location, retention policy, logging, etc. Please consult the configuration guide.
If employing pgBackRest for your backup/recovery solution, ensure the repository, base backups, and WAL archives are stored on a reliable file system separate from the database server. Further, the external storage system where backups resided should have limited access to only those system administrators as necessary. Finally, as with any backup/recovery solution, stringent testing must be conducted. A backup is only good if it can be restored successfully.

See Also

https://workbench.cisecurity.org/files/2407

Item Details

Category: CONTINGENCY PLANNING

References: 800-53|CP-9, CSCv6|10, CSCv7|10.1, CSCv7|10.2

Plugin: Unix

Control ID: 47c1cbd4a382e9b8b9ba4d6f36e551ad00eb610467c5cdd3ef6632a632eb7628