3 ms·
Borg has an append-only mode, but no append-only credentials as far as I could find (by necessity given the symmetric encryption I believe). That means the key
by andreareina 4y ago
Borg has an append-only mode, but no append-only credentials as far as I could find (by necessity given the symmetric encryption I believe). That means the key still needs to be protected, which makes secure automated backups a bit of a pickle.
- g_p 4y agoIf you use a remote Borg server over SSH, you can set up your authorized_keys file to enforce append-only mode on the server by defining the command to be run at login, and reject Borg requests by that SSH key which try to purge or remove data. I believe this is roughly what borgbase does to implement their own backup protection features.
- andreareina 4y agoYeah I suppose that's a fair interpretation of the authorized_keys setup.
- phyzome 4y agoAh, yes, my apologies -- it's done via a connection mode.