this post was submitted on 03 Sep 2024
135 points (96.6% liked)
Linux
48363 readers
414 users here now
From Wikipedia, the free encyclopedia
Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).
Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.
Rules
- Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
- No misinformation
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
Community icon by Alpár-Etele Méder, licensed under CC BY 3.0
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I have a server that has multiple services running under multiple users that each store data. I want to be able to bundle all this data up and send it to another server for backups.
At a high level, how do I manage permissions for this? Currently I run the backup as root, then chown it to a special backups user which can log in through ssh. But this all feels clunky to me.
There are many ways to do this, but the next up from users is using groups!
For each file or data directory, create a group that owns it. This group should have the service's user as member. Then create a user for running the backups, and add it to all these groups.
The benefit of this is you don't have to use root, and you have an association of directory to group that you can always change. You can for example grant a user access to a data directory by just adding it to its group.
Might want to take a look at a dedicated backup tool like Borg. It will keep all the proper permissions and file attributes in the backup.
I am somewhat in the same boat, but more gentoo sided. For the main repo they killed mkstage4 because its outdated and insecure. So like you i wanted to backup my data (my gentoo install) to my nas or local storage. Rsync is the magic bullet for this. You can use ssh to securley transfer data to or from the server. And it automate it via a cron job (i suggest fcron) for a automatic timed backup/sync. Now i will add, rysnc can be used as a backup. But as the name implies it syncs data from one pc to the other. So if you break your desktop and it syncs to your server. Your SOLPDQ, thats only if you automate it tho.
And for the services id reccomend making a directory and adding all the services to a group, which owns the directory. Or the more lazy solution, which is probably frowned uponed. But you can rsync your docker container data to a directory where it has permissions to copy/sync.
Id highly recommend Rsync tho and just syncing offsite to another computer
If Unix permissions don’t work for you, acls are the next logical step.