To back up and restore PostgreSQL data on an Alibaba application, verify that your environment has the required software and a firewall.
Software Requirements
-
Packages required on access nodes:
-
Virtual Server Agent
-
PostgreSQL Agent
-
-
Access nodes that you run backup and restore operations on must have one of the following operating systems:
-
Red Hat Enterprise Linux 8.x
-
Red Hat Enterprise Linux 7.x
-
Oracle Linux Enterprise
-
CentOS 8.x
-
CentOS 7.x
-
Windows 2012
-
Windows 2016
-
Windows 2019
-
-
Note: If you have network configuration enabled on the access nodes, before you deploy a Windows or a Linux proxy, configure a firewall on the cloud proxy and on-premises. For more information, see Configuring a Firewall to Install the Virtual Server Agent on a Cloud VM or Instance.
User Account Requirements
For DumpBasedBackupSet, verify that the PostgreSQL agent has a user account with sufficient privileges to perform the following:
-
Perform backup and restore operations
-
Access the PostgreSQL database objects as part of the subclient content
The following table illustrates the necessary privileges the user account should have to perform backup and restore operations:
Operations
Privileges PostgreSQL User Should Have
Backup
CREATEDB, CREATEROLE
Restore
CREATEDB, CREATEROLE, INHERIT, LOGIN
CONNECTION LIMIT, if set, should at least have a value of 2.
Initially, the user account credentials are provided during the instance configuration after the installation of the agent. You can change the user account at the instance level.
Alibaba User Permissions
Download the alicloud_min_permission_policy.json file and use it on the Alibaba command line to apply all of the required permissions for backups and restores.
Supported PostgreSQL Version
From PostgreSQL version 10.x to version 15.x
Note
The PostgreSQL version 15.x support is added with Commvault V11 Service Pack 32 and Hot Fix Pack 16 (or a more recent version).
SSL and TLS Support
The supported TLS versions to create Alibaba SSL encrypted PostgreSQL instances are TLS 1.0, 1.1 and 1.2.