For all restore options, it is assumed that a new server install has been performed with the same number of primary and minion systems, each with the same number of Solr data shards in place on each system, and configured to use the same hostname and IP addresses.

Prerequisites

To restore a system, the following prerequisites must be met:

  • A fresh Carbon Black EDR server (or an old snapshot) installation must be available on which to restore the backup files. All restoration activities require that Carbon Black EDR be placed in a stopped state.

  • All installation steps involve running cbinit (and cbcluster add-node for clustered systems) must be completed before performing a system restore.

  • In a clustered environment, the server must have the same configuration for the primary node and minions as the system that was backed up.

  • The new server(s) must be installed on the same version of the server(s) from which the backups were taken (for example, 7.7.0).

Procedure

  1. Restore entries to /etc/hosts.
  2. Put tar files on the server(s).
  3. Remove data from the fresh install: 
    rm -rf /etc/cb
rm -rf /var/cb
  4. Restore items from the tar files: 
    for f in *.tar; do tar -P -xvf "$f"; done
  5. Set SE Linux permissions by issuing the following commands. Depending on which package is installed, some commands might fail, but it is safe to proceed. 
    chcon -R system_u:object_r:rabbitmq_var_lib_t:s0 /var/cb/data/rabbitmq/
chcon -R system_u:object_r:var_log_t:s0 /var/log/cb/redis
chcon -R system_u:object_r:redis_log_t:s0 /var/log/cb/redis/*.log && chcon -R system_u:object_r:redis_log_t:s0
         /var/log/cb/redis/*.log-*
chcon -R system_u:object_r:var_log_t:s0 /var/log/cb/redis/*
  6. If the Carbon Black EDR version is 7.3.0 or later, set CbJavaHome=/usr/lib/jvm/jre-11/ in /etc/cb/cb.conf for all nodes. For more informaton about cb.conf, see the Carbon Black EDR Server Configuration Guide.
  7. Repeat the preceding steps for all cluster minions.
  8. Start Carbon Black EDR.