3 ms·
"rsync.net does not support append-only mode, despite advertising it: https://news.ycombinator.com/item?id=32756653 https://news.ycombinator.com/item?id=3275665
by rsync 3y ago
"rsync.net does not support append-only mode, despite advertising it: https://news.ycombinator.com/item?id=32756653 https://news.ycombinator.com/item?id=32756653"
This is correct - we believed we had a working recipe that properly sandboxed the 'rclone mount' and 'rclone serve' directives but we couldn't make it work in a way that allowed us to sleep at night.
But now that is all changing...
It appears that we can run rclone serve restic --stdio in a way that doesn't actually serve anything or create sockets, etc., and as soon as we finish our tests we will have it in place and people can lock their accounts with something like this:
restrict,command="rclone serve restic --stdio --append-only backups/my-restic-repo" ssh-rsa ...
... in authorized_keys and achieve proper append-only mode at long last.
Stand by ...
- btschaegg 3y agoAs a customer, that is great to hear (well, read). I was reading about how a restore scenario with Borg would look like if "append only" really matters (so in a ransomware scenario), and what I've seen makes me rather uncomfortable [1]. I don't want to have to do that in a stressful situation. Is there a particular channel where you intend to post your findings? :) [1]: https://borgbackup.readthedocs.io/en/stable/usage/notes.html#append-only-mode https://borgbackup.readthedocs.io/en/stable/usage/notes.html...