From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org)
	by finch.gentoo.org with esmtp (Exim 4.60)
	(envelope-from <gentoo-user+bounces-127086-garchives=archives.gentoo.org@lists.gentoo.org>)
	id 1QuEGH-0006OF-C4
	for garchives@archives.gentoo.org; Fri, 19 Aug 2011 01:52:41 +0000
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id 48EAC21C1FE;
	Fri, 19 Aug 2011 01:52:27 +0000 (UTC)
Received: from mail-ew0-f53.google.com (mail-ew0-f53.google.com [209.85.215.53])
	by pigeon.gentoo.org (Postfix) with ESMTP id 96A7F21C1D8
	for <gentoo-user@lists.gentoo.org>; Fri, 19 Aug 2011 01:51:33 +0000 (UTC)
Received: by ewy8 with SMTP id 8so1074236ewy.40
        for <gentoo-user@lists.gentoo.org>; Thu, 18 Aug 2011 18:51:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type:content-transfer-encoding;
        bh=p7X6GCmk6jGKgVy8bpUkQpV5FA8P7IW+xNprCrByN0w=;
        b=sHxogGqdjWRwK9miNg6+sR8+6FBP58CQK51IJzvDiPM4/bSSBfR2xhccAw2fF3XORh
         0ygGbp3BFQ62NNicnRnnVBq78MtRe8K+uoGWSAXxTLavtQZUtBSkQ0yPggpIL1ji0OAB
         F6VLVUitmM0Fyl6ojYVZWQhMRrfvn+UQkVN7g=
Precedence: bulk
List-Post: <mailto:gentoo-user@lists.gentoo.org>
List-Help: <mailto:gentoo-user+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-user+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-user+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-user.gentoo.org>
X-BeenThere: gentoo-user@lists.gentoo.org
Reply-to: gentoo-user@lists.gentoo.org
MIME-Version: 1.0
Received: by 10.14.97.66 with SMTP id s42mr539852eef.44.1313718692722; Thu, 18
 Aug 2011 18:51:32 -0700 (PDT)
Received: by 10.14.100.140 with HTTP; Thu, 18 Aug 2011 18:51:32 -0700 (PDT)
In-Reply-To: <54732072.QyOj10dyxT@eve>
References: <CAN0CFw3OreQZtLVy45A_b-dZp8j8Yw1Lbvb_dyNc341fByuynA@mail.gmail.com>
	<54732072.QyOj10dyxT@eve>
Date: Thu, 18 Aug 2011 18:51:32 -0700
Message-ID: <CAN0CFw2G3CyXZXz+yFFavhqGz1qA4mKGiKQ1AkRz0+OiFVzuBA@mail.gmail.com>
Subject: Re: [gentoo-user] {OT} rdiff-backup: push or pull?
From: Grant <emailgrant@gmail.com>
To: gentoo-user@lists.gentoo.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
X-Archives-Salt: 
X-Archives-Hash: b0ccc633095c8a2fc99edc5672df9ad6

>> I'm setting up an automated rdiff-backup system and I'm stuck between
>> pushing the backups to the backup server, and pulling the backups to
>> the backup server. =A0If I push, I have to allow read/write access of my
>> backups via SSH keys. =A0If I pull, I have to enable root logins on each
>> system to be backed-up, allow root read access of each system via SSH
>> keys, and I have to deal with openvpn or ssh -R so my laptop can back
>> up from behind foreign routers. =A0The conventional wisdom online seems
>> to indicate pulling is better, but pushing seems like it might be
>> better to me. =A0Do you push or pull?
>
> I would push, to be honest.

What can be done about the fact that any attacker who can break into a
system and wipe it out can also wipe out its backups?  That negates
one of the reasons for making the backups in the first place.

Should private SSH keys be excluded from the backup?  Should anything
else be excluded?

- Grant