Oracle 12c 验证RMAN加密备份

134次阅读

共计 3777 个字符，预计需要花费 10 分钟才能阅读完成。

日常工作中，经常会遇到需要备份，然后异机恢复数据，提供测试数据。为了保证数据的安全性，建议大家加密备份。

测试环境：Oracle 12c R1 RAC 环境

1. 备份脚本如下：

$cat rk_rman.sh
#!/bin/sh
#backup full database and archivelog
#filename:/home/oracle/rk_rman.sh
#oracle user execute:sh /home/oracle/rk_rman.sh
rman target / <$

2. 删除一个数据文件用来做测试

ASMCMD [+datadg/orcl/datafile] > ls
SYSAUX.257.954539345
SYSTEM.258.954539407
UNDOTBS1.260.954539485
UNDOTBS2.265.954539975
USERS.259.962188425
ASMCMD [+datadg/orcl/datafile] > rm USERS.259.962188425
ASMCMD [+datadg/orcl/datafile] >

3. 恢复

RMAN> startup

connected to target database (not started)
Oracle instance started
database mounted
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
RMAN-03002: failure of startup command at 12/08/2017 10:44:56
ORA-01157: cannot identify/lock data file 6 – see DBWR trace file
ORA-01110: data file 6: ‘+DATADG/ORCL/DATAFILE/users.259.962188425’

RMAN> restore datafile 6;

Starting restore at 08-DEC-2017 10:45:20
allocated channel: ORA_DISK_1
channel ORA_DISK_1: SID=1 instance=orcl1 device type=DISK

channel ORA_DISK_1: starting datafile backup set restore
channel ORA_DISK_1: specifying datafile(s) to restore from backup set
channel ORA_DISK_1: restoring datafile 00006 to +DATADG/ORCL/DATAFILE/users.259.962188425
channel ORA_DISK_1: reading from backup piece /u01/bak/db_fullbk_82_1_962188844.rmn
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
RMAN-03002: failure of restore command at 12/08/2017 10:45:22
ORA-19870: error while restoring backup piece /u01/bak/db_fullbk_82_1_962188844.rmn
ORA-19913: unable to decrypt backup
ORA-28365: wallet is not open

RMAN> set decryption identified by ‘roidba’; – 基于密码的加密备份

executing command: SET decryption

RMAN> restore database;

Starting restore at 08-DEC-2017 10:47:47
using channel ORA_DISK_1

channel ORA_DISK_1: starting datafile backup set restore
channel ORA_DISK_1: specifying datafile(s) to restore from backup set
channel ORA_DISK_1: restoring datafile 00004 to +DATADG/ORCL/DATAFILE/undotbs1.260.954539485
channel ORA_DISK_1: restoring datafile 00005 to +DATADG/ORCL/DATAFILE/undotbs2.265.954539975
channel ORA_DISK_1: reading from backup piece /u01/bak/db_fullbk_83_1_962188844.rmn
channel ORA_DISK_1: piece handle=/u01/bak/db_fullbk_83_1_962188844.rmn tag=BACKUP_FULL
channel ORA_DISK_1: restored backup piece 1
channel ORA_DISK_1: restore complete, elapsed time: 00:00:07
channel ORA_DISK_1: starting datafile backup set restore
channel ORA_DISK_1: specifying datafile(s) to restore from backup set
channel ORA_DISK_1: restoring datafile 00003 to +DATADG/ORCL/DATAFILE/sysaux.257.954539345
channel ORA_DISK_1: restoring datafile 00006 to +DATADG/ORCL/DATAFILE/users.259.962188425
channel ORA_DISK_1: reading from backup piece /u01/bak/db_fullbk_82_1_962188844.rmn
channel ORA_DISK_1: piece handle=/u01/bak/db_fullbk_82_1_962188844.rmn tag=BACKUP_FULL
channel ORA_DISK_1: restored backup piece 1
channel ORA_DISK_1: restore complete, elapsed time: 00:00:45
channel ORA_DISK_1: starting datafile backup set restore
channel ORA_DISK_1: specifying datafile(s) to restore from backup set
channel ORA_DISK_1: restoring datafile 00001 to +DATADG/ORCL/DATAFILE/system.258.954539407
channel ORA_DISK_1: reading from backup piece /u01/bak/db_fullbk_81_1_962188844.rmn
channel ORA_DISK_1: piece handle=/u01/bak/db_fullbk_81_1_962188844.rmn tag=BACKUP_FULL
channel ORA_DISK_1: restored backup piece 1
channel ORA_DISK_1: restore complete, elapsed time: 00:01:55
Finished restore at 08-DEC-2017 10:50:35