From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org)
	by finch.gentoo.org with esmtp (Exim 4.60)
	(envelope-from <gentoo-user+bounces-108126-garchives=archives.gentoo.org@lists.gentoo.org>)
	id 1NkiFs-0003f6-MD
	for garchives@archives.gentoo.org; Thu, 25 Feb 2010 18:16:12 +0000
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id 5023EE0EB0
	for <garchives@archives.gentoo.org>; Thu, 25 Feb 2010 18:16:08 +0000 (UTC)
Received: from mail-pv0-f181.google.com (mail-pv0-f181.google.com [74.125.83.181])
	by pigeon.gentoo.org (Postfix) with ESMTP id BB1EEE08EB
	for <gentoo-user@lists.gentoo.org>; Thu, 25 Feb 2010 17:50:09 +0000 (UTC)
Received: by pvc30 with SMTP id 30so1142376pvc.40
        for <gentoo-user@lists.gentoo.org>; Thu, 25 Feb 2010 09:50:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:mime-version:received:in-reply-to:references
         :date:message-id:subject:from:to:content-type;
        bh=QRvWn1u3rMaHRoaGQ6znmLQ0FVHPNKEzU/7gW9kOQJ4=;
        b=LLORNcCj67qZz4JmczFzi8OBBqWRK7tAsIA7Y6fpuuZHNG3Ha7AFcaujpRYjoA9CF1
         IUpBLHAxGau8FteYnyApqKSXbp2XeApqOSJIp15rrgxAJeFGI50WQSY8+JdHfer81Nqp
         tIOxiAw19jaI1a45Tk3QPDb0ugIVa3qRdqXsU=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type;
        b=XxaevWRkbCZhNvPYSCpiGM9WeNjmVVP7QJ4WXLCze/JxNGH41LZ7S1W1aAlAq4jJpX
         LhlYwN1FwRoSvpdJC84WHaFxOUicS/feQQ0dHOWpE92b4wT/x/eph2PUieFXU8Ke/9/W
         LT7wC1ANRxrSNeQvJJgtJTQaf0YrtYLnHMXGw=
Precedence: bulk
List-Post: <mailto:gentoo-user@lists.gentoo.org>
List-Help: <mailto:gentoo-user+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-user+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-user+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-user.gentoo.org>
X-BeenThere: gentoo-user@lists.gentoo.org
Reply-to: gentoo-user@lists.gentoo.org
MIME-Version: 1.0
Received: by 10.142.55.8 with SMTP id d8mr756994wfa.81.1267120208723; Thu, 25 
	Feb 2010 09:50:08 -0800 (PST)
In-Reply-To: <c1c10dab1002250811s18358bb0te145e05d494181@mail.gmail.com>
References: <49bf44f10911190844i5cb77185me60d5eb44ff2bfc7@mail.gmail.com>
	 <20100224205159.71dd79be@digimed.co.uk>
	 <c1c10dab1002250715o12237750q707b43bb7a9d7075@mail.gmail.com>
	 <201002251741.13525.alan.mckinnon@gmail.com>
	 <c1c10dab1002250811s18358bb0te145e05d494181@mail.gmail.com>
Date: Fri, 26 Feb 2010 02:50:08 +0900
Message-ID: <3ac129341002250950h376f57d5y241e6efeb7080b20@mail.gmail.com>
Subject: Re: [gentoo-user] rsync backup system
From: daid kahl <daidxor@gmail.com>
To: gentoo-user@lists.gentoo.org
Content-Type: text/plain; charset=ISO-8859-1
X-Archives-Salt: 2cea41a7-ec6e-4980-af89-883bd37d9434
X-Archives-Hash: 9a23399eeb7323ec18e96441284d6399

On 26 February 2010 01:11, Ward Poelmans <wpoely86@gmail.com> wrote:
> On Thu, Feb 25, 2010 at 16:41, Alan McKinnon <alan.mckinnon@gmail.com> wrote:
>> A much better way is to run a dedicated agent on the client. If the server
>> needs to schedule backups, it can ask the agent to do so using regular tcp
>> traffic. The client can then do it's backup and rsync it over to the server
>> when it's done, and that push can be done as a regular user on both ends. The
>> actual backing up on the client must be done by root of course, no other user
>> has the necessary access.
>
> Sounds great. Is there any software that works this way?
>
> Ward

Sounds more or less like cron tasks and rsnapshot to me (can use other
rsync scripts of course, but this one is nice to me anyway, and
someone else mentioned it earlier in the thread).  I'm not sure off
hand I have a good way for it to be initialized from the server end,
but if it's a backup, it might as well run on a local cron anyway
rather than needing an external call.

As a simple idea, cron task starts rsnapshot configured however.  When
this is done, backup is tarballed, and tarball is given as like, say,
440 permissions, where users are in some useful 'backup' group, then
while tarball can be read to be passed across server, if tarball is
extracted, user has no more privs then they have on the system anyway
(I'm not saying chmod -R).  Then local tarball can be removed or
whatever.

And call me silly for not reading documentation or assuming, but I was
very happy last night when I realized system rescue CD includes
rsnapshot already!

~daid