mufus/rsnapshot-sudo.rst

## rsnapshot-sudo.rst

      
    Raw
  

              rsnapshot-sudo.rst
            
          
Generate ssh-keys

ssh-keygen


Hosts to back up

root@web02:~# apt-get install sudo
root@web02:~# useradd backupuser -c "limited backup user" -m
root@web02:~# mkdir /home/backupuser/.ssh
root@web02:~# vi /home/backupuser/.ssh/authorized_keys
root@web02:~# vi /home/backupuser/rsync-wrapper.sh

#!/bin/sh
date >> /home/backupuser/backuplog
echo $@ >> /home/backupuser/backuplog
/usr/bin/sudo /usr/bin/rsync "$@";

root@web02:~# chown -R backupuser:backupuser /home/backupuser/
root@web02:~# chmod 755 /home/backupuser/rsync-wrapper.sh
root@web02:~# chmod 700 /home/backupuser/.ssh
root@web02:~# chmod 600 /home/backupuser/.ssh/authorized_keys
root@web02:~# visudo

backupuser ALL=NOPASSWD: /usr/bin/rsync


Backup-server

root@storage:~# vi /etc/rsnapshot.conf

rsync_long_args --delete --numeric-ids --relative --delete-excluded --rsync-path=/home/backupuser/rsync-wrapper.sh
ssh_args        -c blowfish -i /root/.ssh/id_rsa.backupuser