4 ms·

One of the nicer bits of borg is the ability to restrict it to append-only mode, which limits the damage compromised hosts can do. e.g in authorized_keys:

by Freaky 9y ago

One of the nicer bits of borg is the ability to restrict it to append-only mode, which limits the damage compromised hosts can do. e.g in authorized_keys: command="/usr/local/bin/borg serve --append-only --restrict-to-path=/home/backup/bla",restrict ... I use this with passphrase-free ssh keys to allow automated backups without permitting the destruction of any existing backups. Do you get enough control do to that on rsync.net?

rsync 9y ago
"Do you get enough control do to that on rsync.net?" Yes. You have your own .ssh folder in your account and can edit (upload) your keys as you see fit. Also, if you have our ZFS snapshots enabled, those are immutable/readonly - so even if you aren't using a sophisticated tool like borg, you still have snapshots of your data that are immune to attack - even from someone who knows all of your credentials.