[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Best way to duplicate HDs--talk more about rsync+ssh system



Hello,

I am sorry I could be kind of off-topic. But I want to know how to
cross-site rsync without authentication, say ssh auth.,?

I've read some doc. using ssh-keygen to generate key pairs, appending
the public keys to ~/.ssh/authorized_hosts on another host to prevent
ssh authentication prompt. Is it very risky? Chances are a cracker could compromise one
machine and ssh login others without  any authentication.

Idea?

> On Tue, Jan 01, 2002 at 08:39:39AM -0500, Keith Elder wrote:
> > This brings up a  question. How do you rsync something but keep the
> > ownership and permissions the same.  I am pulling data off site nightly
> > and that works, but the permissions are all screwed up.
> 
> rsync -avxrP --delete $FILESYSTEMS backup-server:backups/$HOSTNAME
> 
> Some caveats if you want to fully automate this...
>   - remove -vP (verbose w/ progress)
>   - --delete is NECESSARY to make sure deleted files get deleted from the
>     backup
>   - FILESYSTEMS should be any local filesystems you want backed up (-x
>     won't cross filesystems, makes backing up in NFS environment easier)
>   - obviously this doesn't preclude a bad guy checking out
>     backup-server:backups/otherhostname (use ssh keys, and invoke cmd="cd
>     backups/hostname; rsync with whatever daemon options" will limit that)


-- 
Patrick Hsieh <pahud@pahud.net>

GPG public key http://pahud.net/pubkeys/pahudatpahud.gpg



Reply to: