mongo3.2.7环境的搭建和全库备份、恢复

创建管理账户
use admin
db.createUser(  
{  
    user: "admin",  
    pwd: "admin",  
    roles:  
    [ { role: "dbAdminAnyDatabase",db: "admin" },
 { role: "userAdminAnyDatabase",db: "admin" }
]  
  }  
) 




创建业务库和业务用户
use videoau
db.createUser(
  {
    user: "vduser",
    pwd: "vduser",
    roles: [ { role: "dbOwner", db: "videoau" } ]
  }
)






use videoau
for (var i = 0; i < 10; i++) db.hosts.save({host : "host" + i, age : i})
for (var i = 0; i < 10; i++) db.names.save({user : "host" + i, age : i})


> db.hosts.find()
{ "_id" : ObjectId("57d6697446af58a09fd19b8d"), "host" : "host0", "age" : 0 }
{ "_id" : ObjectId("57d6697446af58a09fd19b8e"), "host" : "host1", "age" : 1 }
{ "_id" : ObjectId("57d6697446af58a09fd19b8f"), "host" : "host2", "age" : 2 }
{ "_id" : ObjectId("57d6697446af58a09fd19b90"), "host" : "host3", "age" : 3 }
{ "_id" : ObjectId("57d6697446af58a09fd19b91"), "host" : "host4", "age" : 4 }
{ "_id" : ObjectId("57d6697446af58a09fd19b92"), "host" : "host5", "age" : 5 }
{ "_id" : ObjectId("57d6697446af58a09fd19b93"), "host" : "host6", "age" : 6 }
{ "_id" : ObjectId("57d6697446af58a09fd19b94"), "host" : "host7", "age" : 7 }
{ "_id" : ObjectId("57d6697446af58a09fd19b95"), "host" : "host8", "age" : 8 }
{ "_id" : ObjectId("57d6697446af58a09fd19b96"), "host" : "host9", "age" : 9 }




启动Mongodb
不启用认证
mongod -f /etc/mongod.conf 


启用认证
mongod -f /etc/mongod.conf --auth


关闭mongodb
mongod --shutdown -f /etc/mongod.conf 


登陆mongodb
不启用认证
mongo --host 192.168.80.68


–rest  # 开启简单的rest API


启用认证
mongo --host 192.168.80.68 admin -u admin -p
mongo --host 192.168.80.68 videoau -u vduser -p


全库备份
mkdir -p /mogoback
chown -R mongod:mongod /mogoback
mongodump --host 192.168.80.68 --port 27017 -u admin -p admin --out /mogoback


备份的时候报错
[root@instance ~]# mongodump --host 192.168.80.68 --port 27017 -u admin -p admin --out /mogoback
2016-09-12T16:42:26.319+0800    Failed: error counting videoau.names: not authorized on videoau to execute command { count: "names", query: {} }




如果不使用auth启动
[root@instance ~]# mongod -f /etc/mongod.conf
about to fork child process, waiting until server is ready for connections.
forked process: 3716
child process started successfully, parent exiting
[root@instance ~]# mongodump --host 192.168.80.68 --port 27017 -u admin -p admin --out /mogoback
2016-09-12T16:43:07.133+0800    writing admin.system.users to 
2016-09-12T16:43:07.134+0800    done dumping admin.system.users (2 documents)
2016-09-12T16:43:07.134+0800    writing admin.system.version to 
2016-09-12T16:43:07.135+0800    done dumping admin.system.version (1 document)
2016-09-12T16:43:07.135+0800    writing videoau.names to 
2016-09-12T16:43:07.135+0800    writing videoau.hosts to 
2016-09-12T16:43:07.136+0800    done dumping videoau.hosts (10 documents)
2016-09-12T16:43:07.136+0800    done dumping videoau.names (10 documents)




备份成功


开启认证备份需要增加参数
加参数：
--authenticationDatabase
mongodump --host 192.168.80.68 --port 27017 -u admin -p admin --authenticationDatabase videoau --out /mogoback




mongodump --host 192.168.80.68 -d videoau -o /mogoback/all_bak_20150912.bak -u admin -p=admin --authenticationDatabase admin
2016-09-12T16:55:07.200+0800    Failed: error counting videoau.names: not authorized on videoau to execute command { count: "names", query: {} }


mongodump --host 192.168.80.68 -d videoau -o /mogoback/all_bak_20150912.bak -u vduser -p=vduser --authenticationDatabase admin
2016-09-12T16:55:35.900+0800    Failed: error connecting to db server: server returned error on SASL authentication step: Authentication failed.


原来admin账户没有backup和restore的权限
{role: 'backup',db: 'admin'}


#授予角色：db.grantRolesToUser( "userName" , [ { role: "<role>", db: "<database>" } ])
#取消角色：db.grantRolesToUser( "userName" , [ { role: "<role>", db: "<database>" } ])


db.grantRolesToUser( "admin" , [ { role: "backup", db: "admin" } ])
db.grantRolesToUser( "admin" , [ { role: "restore", db: "admin" } ])


再次备份
[root@instance videoau]# mongodump --host 192.168.80.68 -d videoau -o /mogoback/all_bak_20150912.bak -u admin -p=admin --authenticationDatabase admin  
2016-09-12T17:04:44.029+0800    writing videoau.names to 
2016-09-12T17:04:44.031+0800    writing videoau.hosts to 
2016-09-12T17:04:44.031+0800    done dumping videoau.names (10 documents)
2016-09-12T17:04:44.032+0800    done dumping videoau.hosts (10 documents)
[root@instance videoau]# 
[root@instance videoau]# mongodump --host 192.168.80.68  -o /mogoback/all_bak_20150912.bak -u admin -p=admin --authenticationDatabase admin          
2016-09-12T17:05:01.891+0800    writing admin.system.users to 
2016-09-12T17:05:01.892+0800    done dumping admin.system.users (2 documents)
2016-09-12T17:05:01.892+0800    writing admin.system.version to 
2016-09-12T17:05:01.893+0800    done dumping admin.system.version (1 document)
2016-09-12T17:05:01.893+0800    writing videoau.names to 
2016-09-12T17:05:01.894+0800    writing videoau.hosts to 
2016-09-12T17:05:01.895+0800    done dumping videoau.hosts (10 documents)
2016-09-12T17:05:01.895+0800    done dumping videoau.names (10 documents)




恢复测试
删除数据库
dropDatabase() 方法


>use videoau
switched to db videoau
>db.dropDatabase()
>{ "dropped" : "videoau", "ok" : 1 }
>


不加authenticationDatabase参数会报错
mongorestore -d videoau --drop /mogoback/all_bak_20150912.bak/
[root@instance all_bak_20150912.bak]# mongorestore -d videoau --drop /mogoback/all_bak_20150912.bak/
2016-09-12T17:12:27.210+0800    building a list of collections to restore from /mogoback/all_bak_20150912.bak dir
2016-09-12T17:12:27.210+0800    don't know what to do with subdirectory "all_bak_20150912.bak/admin", skipping...
2016-09-12T17:12:27.210+0800    don't know what to do with subdirectory "all_bak_20150912.bak/videoau", skipping...
2016-09-12T17:12:27.210+0800    done


增加authenticationDatabase参数
mongorestore -d videoau --drop /mogoback/all_bak_20150912.bak/videoau -u admin -p=admin --authenticationDatabase admin 
[root@instance all_bak_20150912.bak]# mongorestore -d videoau --drop /mogoback/all_bak_20150912.bak/videoau -u admin -p=admin --authenticationDatabase admin 
2016-09-12T17:23:42.786+0800    building a list of collections to restore from /mogoback/all_bak_20150912.bak/videoau dir
2016-09-12T17:23:42.787+0800    reading metadata for videoau.names from /mogoback/all_bak_20150912.bak/videoau/names.metadata.json
2016-09-12T17:23:42.809+0800    restoring videoau.names from /mogoback/all_bak_20150912.bak/videoau/names.bson
2016-09-12T17:23:42.815+0800    reading metadata for videoau.hosts from /mogoback/all_bak_20150912.bak/videoau/hosts.metadata.json
2016-09-12T17:23:42.824+0800    restoring indexes for collection videoau.names from metadata
2016-09-12T17:23:42.826+0800    restoring videoau.hosts from /mogoback/all_bak_20150912.bak/videoau/hosts.bson
2016-09-12T17:23:42.826+0800    finished restoring videoau.names (10 documents)
2016-09-12T17:23:42.828+0800    restoring indexes for collection videoau.hosts from metadata
2016-09-12T17:23:42.829+0800    finished restoring videoau.hosts (10 documents)

2016-09-12T17:23:42.829+0800    done

mongostat --host 192.168.80.68 --username admin --password admin --authenticationDatabase admin