{"id":94417,"date":"2020-09-16T19:42:31","date_gmt":"2020-09-16T17:42:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/u-nas-tam-postgres-no-ya-hz-chto-s-nim-delat-s"},"modified":"2020-09-16T19:42:31","modified_gmt":"2020-09-16T17:42:31","slug":"u-nas-tam-postgres-no-ya-hz-chto-s-nim-delat-s","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/u-nas-tam-postgres-no-ya-hz-chto-s-nim-delat-s","title":{"rendered":"M\u00e1me tam Postgres, ale neviem, \u010do s n\u00edm robi\u0165 (s)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Toto je cit\u00e1t jedn\u00e9ho z mojich zn\u00e1mych, ktor\u00fd sa kedysi d\u00e1vno obr\u00e1til na m\u0148a s ot\u00e1zkou o Postgres. Vtedy sme za p\u00e1r dn\u00ed vyrie\u0161ili jeho probl\u00e9m a po\u010fakoval mi a dodal: \u201eJe fajn ma\u0165 zn\u00e1meho DBA.\u201c<\/p>\n

Ale \u010do robi\u0165, ak nem\u00e1te zn\u00e1meho DBA? Mo\u017enost\u00ed odpovede je pomerne ve\u013ea, od h\u013eadania medzi priate\u013emi priate\u013eov a\u017e po samostatn\u00e9 \u0161t\u00fadium t\u00e9my. Ale ak\u00fako\u013evek odpove\u010f dostanete na pam\u00e4\u0165, m\u00e1m pre v\u00e1s dobr\u00fa spr\u00e1vu. V testovacom re\u017eime sme spustili slu\u017ebu odpor\u00fa\u010dan\u00ed pre Postgres a v\u0161etko, \u010do s n\u00edm s\u00favis\u00ed. \u010co to vlastne je a ako sme sa k tomu dostali?<\/p>\n

\u010co je na tom v\u0161etkom?<\/h2>\n

Postgres nie je minim\u00e1lne jednoduch\u00fd, a ob\u010das aj ve\u013emi zlo\u017eit\u00fd. Z\u00e1vis\u00ed to od \u00farovne zapojenia a zodpovednosti.<\/p>\n

T\u00ed, ktor\u00ed pracuj\u00fa v oper\u00e1ci\u00e1ch, by mali sledova\u0165, aby Postgres ako slu\u017eba fungoval spr\u00e1vne a stabilne \u2014 sledova\u0165 vyu\u017eitie zdrojov, dostupnos\u0165, primeranos\u0165 konfigur\u00e1cie, pravidelne vykon\u00e1va\u0165 aktualiz\u00e1cie a pravideln\u00e9 kontroly zdravia. T\u00ed, ktor\u00ed sa venuj\u00fa v\u00fdvoju a p\u00ed\u0161u aplik\u00e1cie, by mali vo v\u0161eobecnosti sledova\u0165, ako aplik\u00e1cia interaguje s datab\u00e1zou a zabezpe\u010di\u0165, aby nevytv\u00e1rala havarijn\u00e9 situ\u00e1cie, ktor\u00e9 by mohli sp\u00f4sobi\u0165 p\u00e1d datab\u00e1zy. Ak m\u00e1 \u010dlovek ne\u0161\u0165astie a je tech lead\/technical director, je pre neho d\u00f4le\u017eit\u00e9, aby Postgres fungoval spo\u013eahlivo, predv\u00eddate\u013ene a nesp\u00f4soboval probl\u00e9my, pri\u010dom je \u017eiaduce, aby sa s\u00e1m do Postgresu pr\u00edli\u0161 hlboko a dlho nezap\u00fa\u0161\u0165al.<\/p>\n

V ktoromko\u013evek z t\u00fdchto pr\u00edpadov existujete vy a Postgres. Aby ste mohli dobre spravova\u0165 Postgres, mus\u00edte ma\u0165 dostato\u010dn\u00e9 znalosti a predstavu o tom, ako je \u0161trukt\u00farovan\u00fd. Ak nie je Postgres priamo va\u0161ou \u0161pecializ\u00e1ciou, m\u00f4\u017eete str\u00e1vi\u0165 dos\u0165 \u010dasu jeho \u0161t\u00fadiom. Ide\u00e1lne je, ke\u010f m\u00e1te \u010das a chu\u0165, ale nie v\u017edy je jasn\u00e9, odkia\u013e za\u010da\u0165, ako a kam pokra\u010dova\u0165.<\/p>\n

Aj ke\u010f sa obklop\u00edte monitorovan\u00edm, ktor\u00e9 by malo zjednodu\u0161i\u0165 prev\u00e1dzku, ot\u00e1zka odborn\u00fdch znalost\u00ed zost\u00e1va otvoren\u00e1. Aby ste vedeli \u010d\u00edta\u0165 a rozumie\u0165 grafom, mus\u00edte ma\u0165 tie\u017e dobr\u00e9 predstavy o tom, ako je Postgres \u0161trukt\u00farovan\u00fd. Inak ak\u00e9ko\u013evek monitorovanie premen\u00ed na smutn\u00e9 obr\u00e1zky a spam od upozornen\u00ed v n\u00e1hodnom \u010dase d\u0148a.<\/p>\n

Weaponry<\/a><\/noindex> je presne to, \u010do m\u00e1 u\u013eah\u010di\u0165 prev\u00e1dzku Postgresu. Slu\u017eba zbiera a analyzuje d\u00e1ta o Postgrese a poskytuje odpor\u00fa\u010dania, \u010do mo\u017eno zlep\u0161i\u0165. <\/p>\n

Hlavn\u00fdm cie\u013eom slu\u017eby je poskytova\u0165 zrozumite\u013en\u00e9 odpor\u00fa\u010dania, ktor\u00e9 d\u00e1vaj\u00fa preh\u013ead o tom, \u010do sa deje a \u010do je potrebn\u00e9 robi\u0165 \u010falej.<\/em> <\/p>\n

Pre odborn\u00edkov, ktor\u00ed nemaj\u00fa expertne znalosti, odpor\u00fa\u010dania poskytuj\u00fa v\u00fdchodiskov\u00fd bod na zlep\u0161enie kvalifik\u00e1cie. Pokro\u010dil\u00fdm odborn\u00edkom odpor\u00fa\u010dania nazna\u010duj\u00fa aspekty, na ktor\u00e9 by sa mali zamera\u0165. V tomto smere Weaponry funguje ako asistent, ktor\u00fd vykon\u00e1va rutinn\u00e9 \u00falohy pri h\u013eadan\u00ed probl\u00e9mov alebo nedostatkov, ktor\u00e9 vy\u017eaduj\u00fa osobitn\u00fa pozornos\u0165. Weaponry sa d\u00e1 porovna\u0165 s linterom, ktor\u00fd kontroluje Postgres a poukazuje na nedostatky.<\/p>\n

Ako to vyzer\u00e1 teraz<\/h2>\n

Moment\u00e1lne Weaponry<\/a><\/noindex> je v testovacej f\u00e1ze a je k dispoz\u00edcii bez poplatkov, registr\u00e1cia je zatia\u013e do\u010dasne obmedzen\u00e1. Spolu s nieko\u013ek\u00fdmi dobrovo\u013en\u00edkmi sk\u00famame motor odpor\u00fa\u010dan\u00ed na takmer bojov\u00fdch datab\u00e1zach, identifikujeme falo\u0161n\u00e9 poplachy a pracujeme na texte odpor\u00fa\u010dan\u00ed. <\/p>\n

Mimochodom, odpor\u00fa\u010dania s\u00fa zatia\u013e dos\u0165 priamych \u2014 jednoducho hovoria, \u010do a ako robi\u0165, bez \u010fal\u0161\u00edch podrobnost\u00ed \u2014 tak\u017ee prv\u00fd \u010das bude potrebn\u00e9 prech\u00e1dza\u0165 odkazy s\u00favisiacich t\u00e9m alebo si to \u010falej vyh\u013ead\u00e1va\u0165. Kontroly a odpor\u00fa\u010dania pokr\u00fdvaj\u00fa nastavenia syst\u00e9mu a hardv\u00e9ru, nastavenia samotn\u00e9ho Postgresu, sch\u00e9mu vo vn\u00fatri a pou\u017eit\u00e9 zdroje. Pl\u00e1nuje sa e\u0161te ve\u013ea vec\u00ed, ktor\u00e9 je potrebn\u00e9 prida\u0165. <\/p>\n

A samozrejme h\u013ead\u00e1me dobrovo\u013en\u00edkov, ktor\u00ed s\u00fa ochotn\u00ed vysk\u00fa\u0161a\u0165 slu\u017ebu a poskytn\u00fa\u0165 sp\u00e4tn\u00fa v\u00e4zbu. M\u00e1me e\u0161te demo<\/a><\/noindex>, m\u00f4\u017eete sa prihl\u00e1si\u0165 a pozrie\u0165. Ak ste pochopili, \u017ee toto potrebujete a ste pripraven\u00ed vysk\u00fa\u0161a\u0165, nap\u00ed\u0161te n\u00e1m na email<\/a><\/noindex>.<\/p>\n

Aktualizovan\u00e9 2020-09-16. Za\u010d\u00edna sa.<\/h2>\n

Po registr\u00e1cii sa pou\u017e\u00edvate\u013eovi navrhne vytvori\u0165 projekt \u2014 ktor\u00fd umo\u017e\u0148uje sp\u00e1ja\u0165 in\u0161tancie datab\u00e1z do skup\u00edn. Po vytvoren\u00ed projektu je pou\u017e\u00edvate\u013e nasmerovan\u00fd na n\u00e1vod na nastavenie a in\u0161tal\u00e1ciu agenta. V skratke, treba vytvori\u0165 pou\u017e\u00edvate\u013eov pre agenta, potom stiahnu\u0165 in\u0161tala\u010dn\u00fd skript agenta a spusti\u0165 ho. V shell pr\u00edkazoch to vyzer\u00e1 pribli\u017ene takto:<\/p>\n

psql -c \"CREATE ROLE pgscv WITH LOGIN SUPERUSER PASSWORD 'A7H8Wz6XFMh21pwA'\"\nexport PGSCV_PG_PASSWORD=A7H8Wz6XFMh21pwA\ncurl -s https:\/\/dist.weaponry.io\/pgscv\/install.sh |sudo -E sh -s - 1 6ada7a04-a798-4415-9427-da23f72c14a5<\/code><\/pre>\n
Ak na hoste existuje pgbouncer, bude potrebn\u00e9 vytvori\u0165 pou\u017e\u00edvate\u013ea aj na pripojenie agenta. Konkr\u00e9tny sp\u00f4sob nastavenia pou\u017e\u00edvate\u013ea v pgbouncer m\u00f4\u017ee by\u0165 ve\u013emi r\u00f4zny a silne z\u00e1vis\u00ed od pou\u017eitej konfigur\u00e1cie. V\u0161eobecne sa nastavenie zameriava na pridanie pou\u017e\u00edvate\u013ea do stats_users<\/em> konfigura\u010dn\u00e9ho s\u00faboru (zvy\u010dajne je to pgbouncer.ini<\/em>) a zap\u00edsanie hesla (alebo jeho hash) do s\u00faboru uveden\u00e9ho v parametri auth_file.<\/em> Pri zmene stats_users bude potrebn\u00e9 re\u0161tartova\u0165 pgbouncer.<\/p>\n
Skript install.sh prij\u00edma nieko\u013eko povinn\u00fdch argumentov, ktor\u00e9 s\u00fa jedine\u010dn\u00e9 pre ka\u017ed\u00fd projekt, a prostredn\u00edctvom premenn\u00fdch prostredia prij\u00edma \u00fadaje vytvoren\u00fdch pou\u017e\u00edvate\u013eov. N\u00e1sledne skript sp\u00fa\u0161\u0165a agenta v bootstrap re\u017eime \u2014 agent sa skop\u00edruje do PATH, vytvor\u00ed konfigura\u010dn\u00fd s\u00fabor s \u00fadajmi, syst\u00e9mov\u00fa jednotku systemd a spust\u00ed sa ako systemd slu\u017eba. 
T\u00fdmto sa in\u0161tal\u00e1cia kon\u010d\u00ed. O nieko\u013eko min\u00fat sa in\u0161tancia DB objav\u00ed v zozname hostite\u013eov v rozhran\u00ed a m\u00f4\u017eete u\u017e vidie\u0165 prv\u00e9 odpor\u00fa\u010dania. D\u00f4le\u017eit\u00e9 je, \u017ee mnoh\u00e9 odpor\u00fa\u010dania vy\u017eaduj\u00fa ve\u013ek\u00e9 mno\u017estvo nahromaden\u00fdch metrick\u00fdch \u00fadajov (aspo\u0148 za de\u0148).<\/p>\n
Zdroj: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u042d\u0442\u043e \u0446\u0438\u0442\u0430\u0442\u0430 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043c\u043e\u0438\u0445 \u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0445 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043a\u043e\u0433\u0434\u0430-\u0442\u043e \u0434\u0430\u0432\u043d\u043e \u043e\u0431\u0440\u0430\u0449\u0430\u043b\u0441\u044f \u043a\u043e \u043c\u043d\u0435 \u0441 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u043c \u043f\u0440\u043e Postgres. \u0422\u043e\u0433\u0434\u0430 \u043c\u044b \u0437\u0430 \u043f\u0430\u0440\u0443 \u0434\u043d\u0435\u0439 \u043f\u043e\u0440\u0435\u0448\u0430\u043b\u0438 \u0435\u0433\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0438 \u043f\u043e\u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u0438\u0432 \u043c\u0435\u043d\u044f \u043e\u043d \u0434\u043e\u0431\u0430\u0432\u0438\u043b: «\u0425\u043e\u0440\u043e\u0448\u043e, \u043a\u043e\u0433\u0434\u0430 \u0435\u0441\u0442\u044c \u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0439 DBA». \u041d\u043e \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u0435\u0441\u043b\u0438 \u043d\u0435\u0442 \u0437\u043d\u0430\u043a\u043e\u043c\u043e\u0433\u043e DBA? \u0412\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u043e\u0442\u0432\u0435\u0442\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043c\u043d\u043e\u0433\u043e, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u043e\u0442 \u043f\u043e\u0438\u0441\u043a\u0430\u0442\u044c \u0441\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0437\u0435\u0439 \u0434\u0440\u0443\u0437\u0435\u0439 \u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94417","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47M\u00e1me tam Postgres, ale neviem, \u010do s n\u00edm robi\u0165 (s) | ProHoster","description":"Toto je cit\u00e1t jedn\u00e9ho z mojich zn\u00e1mych, ktor\u00fd sa raz d\u00e1vno p\u00fdtal na Postgres.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/u-nas-tam-postgres-no-ya-hz-chto-s-nim-delat-s","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423 \u043d\u0430\u0441 \u0442\u0430\u043c Postgres, \u043d\u043e \u044f \u0445\u0437 \u0447\u0442\u043e \u0441 \u043d\u0438\u043c \u0434\u0435\u043b\u0430\u0442\u044c (\u0441) | ProHoster","og:description":"\u042d\u0442\u043e \u0446\u0438\u0442\u0430\u0442\u0430 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043c\u043e\u0438\u0445 \u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0445 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043a\u043e\u0433\u0434\u0430-\u0442\u043e \u0434\u0430\u0432\u043d\u043e \u043e\u0431\u0440\u0430\u0449\u0430\u043b\u0441\u044f \u043a\u043e \u043c\u043d\u0435 \u0441 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u043c \u043f\u0440\u043e Postgres.","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/u-nas-tam-postgres-no-ya-hz-chto-s-nim-delat-s","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-16T17:42:31+00:00","article:modified_time":"2020-09-16T17:42:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94417","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:49:20","updated":"2022-10-03 07:44:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/94417","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=94417"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/94417\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=94417"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=94417"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=94417"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}