Rsync Backups And Security

Oct 11, 2006

Rsync seems to be popular as a backup solution, so I thought I give it a look myself. However, after looking for a while I think it is lacking in either (1) usability or (2) security for backups.

Lets use a backup of /home for example:

(1) To make the transfer secure I'd use rsync over ssh. Backup works great - untill you have to restore. Restore works only partially, because all the files now have the user/group id of the user on the backup server (even if the restore is run as root). You'd have to chown all the individual users dirs, permission files....error prone and a lot of manual work --> not good.

(2) Running rsync in daemon mode on the remote server preserves uid/gid and permissions. Restoring works like a charm when run as root. But, hey, now every 13 year old with some knowledge and a packet sniffer can write down your data unencrypted. They just need to look for -lets say- db-info in php files etc and suddenly have access to your customer base or whatever you store.... Even worse if you transfer db dumps or other sensitive data. So it is not safe to use --> not good.

Is there a way to secure the transfer or keep uid/gid info intact?
And how do all the backup providers handle the issue? (This one here claims rsync is secure.)
Or is there another way to fix the problem - restoring uid/gid and secure transfer for backups.

View 9 Replies


ADVERTISEMENT

FTP Backups, Doing RSYNC

Oct 28, 2008

FTP backups, doing RSYNC what is needed?

I have a linux box with pure-ftpd as FTP backup server. However, we want to explore/expand to RSYNC now.

Is there a package that allows RSYNC to be used for FTP users?

This is basically like what do FTP services like BQbackup use to allow RSYNC, etc.

View 3 Replies View Related

Keeping Mirror/Mirroring Backups...anything Better Than Rsync?

Dec 17, 2008

Keeping mirrored backups...anything better than rsync?

I'm keeping mirrored backups of my servers. Does anyone know of any solution better than rsync to update the files on the backup server?

I've noticed that when running rsync it can cause a lot of disk i/o, which can slow down a running server.

Does anyone have any suggestions on how to decrease disk i/o or another solution to keeping mirrored backups on a secondary server?

View 13 Replies View Related

Offsite Backups (via Rsync) - What Files/folders To Backup

Jun 3, 2009

I'm currently using (amongst other backup systems) rsync to an offsite space (am using BQBackup at the moment)

I'm just wondering - apart from backing up all of /home/, /var/lib/mysql/ and the important config files (httpd.conf, php.conf, etc etc) is there anything else that *needs* to be backed up?

Obviously in a worst case scenario, a new machine would be deployed with a fresh OS install (and a fresh WHM/cPanel install) so I wouldn't worry about backing up OS files or cPanel core files, although I'm wondering if there's anything apart from the /home/ directory and the MySQL databases which would be lost (and so need backing up) in the event of a crash?

View 10 Replies View Related

Backup: Offsite, Cross VPS, Security Of Backups

Feb 11, 2008

I have two VPS's, VPS1 has one vbulletin community. VPS2 has about 10 cpanel accounts, mostly email, a blog site, etc. Both VPS's well under 10 gig in size not including any backups stored on the VPS.

For the more important VPS, VPS1, I am packaging the cpanel account (50mb) and SCPing it to VPS2.

I am also running pckgacct on the cpanel accounts on VPS2 (about 2 gig total, 1 tar.gz is 1.5gb, three others around 250mb, others smaller) and storing them on VPS2.

I then have WS_FTP scheduled to download the cpanel tar.gz files each night to a local machine.

I also have WHM setup to do daily incremental backups, but am not moving any of these offsite.

So, it seems I have three options:
Keep doing what I am doing.
Keep moving VPS1 tar.gz files to VPS2, but also start moving VPS2 tar.gz files to VPS1.
Start moving tar.gz files (or raw files with rsync) to offsite storage.

I'm curious on some feedback about the three options. These are personal sites, I am not reselling any sites/packages.

It seems like from a data security standpoint (email and stuff), the more 'locations' introduced into the loop, the less security there will be. Does anyone get concerned about moving their email and other data to offsite storage services?

As I said, I have a technical solution currently working, but I am wondering about the theory/data protection aspects of the various options for going forward.

View 1 Replies View Related

"rsync" Script To Make Full CPanel Backups Easier

Mar 5, 2007

script that will backup full cpanel backups remotely. Can anyone recommend a decent script that will make daily/weekly backups using rsync to do remote full cpanel backups?

The script should set up rsync so that doing a restore is very simple with WHM restore backup option.

View 1 Replies View Related

Joomla Security / Linux Security

Apr 4, 2008

I run a web hosting company and one of my servers is a LAMP server running CentOs 5. A user of mine has a Joomla installation running to manage his website and he has run into the following problem that I am puzzled by.

When Joomla adds a component or module to itself, or when a user uses the Joomla upload functionality, Joomla will add the new files under the user name "apache". This makes sense as it is the apache service running PHP that is actually creating the files.

However, when he FTP's into the account to modify these files, he doesn't have the appropriate permissions to do so as he doesn't have a root level login, just permissions on his home directory which is the site. Any help would be much appreciated.

Also, does anyone know how to change the owner/group of a directory and all of its sub directories in Linux without changing the actual permissions? I.e. some of the files in the folder have different permissions (0644 as apposed to 0755) than its parent but if I do a top down user/group change on the folder it will change everything in that folder to 0755.

View 10 Replies View Related

RSync

Jun 9, 2009

I made some data backup on one of the backup servers using rsync. How can I restore it to the new server now?

My account is ready on new vps and all I need is pull the data back from backup server to new vps account.

I used this command previously

Quote:

rsync -avz -e ssh /home/user1 backupuser@backup.server.com:user1

View 7 Replies View Related

RSync-over-SSH

Apr 9, 2009

i have two srevers one is Dedicated Server and the secound is for backup .

well , i login to the backup server and creat ftp account .

i wanna make the server save the weekly backup .

the backup path is /backup

the copmany of the backup server said "
To RSync your data to your backup server, type:
"rsync -av --progress -e ssh @"
this will put all the files in your home
directory..."

i dont know how to use this command on the Dedicated Server .

View 3 Replies View Related

Anything Better Then Rsync

Aug 26, 2008

Is there anything better then rsync to replicate files (twice a day) on servers located in seperate datacenters?

Looking for more of a free to cheap solution though will also be interested in the higher end solutions later on.

View 9 Replies View Related

Why Do U Se Rsync?

Mar 6, 2007

I search over the forum as many members recommend rsync over the backup option builit in cPanel/WHM. May I know why cPanel/WHM's is not recommended?

View 4 Replies View Related

Using Rsync And Ftp

Oct 4, 2007

Does rsync required to be installed on both servers for it to work? Can rsync work with ftp only on the remote server?

Can you guys list some typical rsync shell command to help me get started...

View 5 Replies View Related

Cpanel Or Rsync?

Dec 7, 2008

I am using BQbackup to auto backup my CPanel VPS and was wondering whether it is best to use CPanel's own backup service which automatically backs-up the vps daily or should I use the rsync script that bqbackup provides?

Which is easier to restore and more reliable?

View 3 Replies View Related

RSYNC Tutorials?

Apr 12, 2009

Looking for an RSYNC tutorial, something that focuses on backing http data, exporting the databases then transferring offsite to a receiving rsync server once a week.

Something that's understandable and logical would be great, happy to work through over the next week and continue more in depth with it.

View 3 Replies View Related

Rsync Instructions

Aug 2, 2006

I have been trying to setup rsync on my server and following these instructions

http://www.bqbackup.com/setup.html

The problem is I keep getting errors.

On this step,

ssh-keygen -t rsa -N

I edited it and did ssh-keygen -t rsa --N becauseI got an error saying it need the '--' before the N.

So after getting through that part, I got these questions asked

Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:

I left the passphrase empty, and then when it asked where to save to, I just typed in 'rsa'. Then it gave me some fingerprint.

Then I get to the step,

# scp ~/.ssh/id_rsa.pub yourusername@yourusername.bqbackup.com:keys/server1
# ssh yourusername@yourusername.bqbackup.com mergekeys

But I get errors saying

-bash: cat~/.ssh/id_rsa.pub: No such file or directory

I dont get what I'm doing wrong. If somebody doesnt mind, can you please re-write the steps on getting this working, or maybe tell me where I am going wrong if the tutorial is correct?

View 4 Replies View Related

Update Rsync

Feb 13, 2007

Current, 2.6.3 came with my centos 4.4 cpanel server, I tried updating it to latest 2.6.9. However, when I type "rsync" it's pointing to 2.6.3 How can I remove the old version or reinstall over it?

View 8 Replies View Related

Second Time To Run Rsync?

Jul 8, 2007

one day later, if I run the following command again, the command is same as the one run by the first time.

rsync -avz username@IP:/home/asite/public_html/ /home/asite/public_html/

does it mean rsync will just check and copy the newer folders and files from the last copy?

View 6 Replies View Related

Rsync And Cron

May 5, 2009

I have a bit of a strange problem, I have an rsync command setup in the servers crontab and from the cron log it show it ran the command but the files don't copy to the backup server. If I take the rsync syntax and run it manually all the files copy across with no errors, but I can't figure out why the cronjob doesn't work properly.

View 8 Replies View Related

Rsync And Passphrase

Apr 25, 2009

I'm trying to configure rsync to backup my vps data to an rsync backup provider.

The problem that I am having is that each time I try to run rsync it prompts for the passphrase.

I did some reading and it seems (and maybe this is not correct), that in order to do unattended rsync (e.g. using cron), that you need to use a key that doesn't have a passphrase generated.

If this is the case, is it true that it's not a good idea to use a key that doesn't have a passphrase?

View 6 Replies View Related

Setting Up Rsync

May 15, 2009

I got one of those cheap $10 servers from hostmds to use to backup my vps.

Know I just need to know how do I setup rsync to backup my vps nightly? Any links to good guides to do this would be great. I looked on google, but am hoping someobody knows a guide that is simple to follow.

View 5 Replies View Related

Rsync Setup

Jul 17, 2009

I am in the process of setting up a cronjob so I can run rsync automatically every day.
But I want to know is it ok to exclude the following folders?

/home/.cpcpan/
/home/cpeasyapache/
/home/src/ <!--- This folder I made to put files in before I install
/home/MySQL-install/
/home/.cpan/

As from what I understand cPanel/WHM makes these folders, and there no user data in these folders

View 5 Replies View Related

Rsync Copy

Apr 7, 2009

I have wrote a small script which copies file names which has name as *default* from backup to users main folder. It works fine with one folder but doesn't copy files from sub-folders.

it works with all the sub-folders as well?

HTML Code:
#!/bin/bash

for i in $(ls /var/cpanel/users)

do
rsync -vrplogDtH /backup/cpbackup/weekly/$i/homedir/public_html/*default* /home/$i/public_html

chown -R $i.$i /home/$i/public_html/*default*

done

View 2 Replies View Related

Rsync Between Two Different Server

Aug 8, 2008

i have two differnt server at two differnt datacenters,with same contant,runing under subdomain eg main domain is domain.com and subdomain is sub.domain.com both are same site,i used this to reduce server load and share request,but the problem iam haveing when update any stuff i need to update on both server it bit diffcult any way to update contant via rsync between the two servers?

View 6 Replies View Related

Incremental Rsync

Jan 17, 2008

I have two folders:

/misc
/misc-backup

how do I go about making /misc-backup a mirror of /misc correctly?

View 14 Replies View Related

Rsync Backup To NAS Via FTP

Apr 7, 2008

I just signed up with Rsync Palace for remote backups 2 days ago. Otto and Darin at Rsync Palace gladly helped me out and actually ended up setting me up for free. It's really an inexpensive price to pay for a little additional piece of mind to have a remote backup.

I have a VPS with cPanel that has NAS on a private network. The way they set it up was for Cpanel cron job to create backups of my VPS and place the backups in a /backup folder off root; Daily, Weekly and Monthly.

Then they have Rsync via cron set up to take those backups to the remote Rsync Palace server daily.

I still want to maintain backups on my NAS in the datacenter. (cPanel will only backup remotely or locally, but not both.)

In addition to Rsync securely transferring my data to Rsync Palace for offsite backups... How can I set up Rsync to ftp the same /backup data across the private network to the NAS? (Only ftp is available via the NAS.)

View 2 Replies View Related

How To Backup To Your PC Using Rsync

Jul 28, 2008

I use bqbackup.com in addition to ServInt's backup. The ServInt backup is inaccessible to me and can be restored only by their NoC.

Is there a way for me to download the backup files from bqbackup.com to my PC? I am using Win XP Pro. I backup the entire VPS, but I want to be downloading only the changes made each day after the initial download to my PC.

View 2 Replies View Related

Rsync Notification

Nov 6, 2008

I'm running rsync in cron jobs. is there a way to be notified via email when the job is done plus the log? I'd really like to know how long it's taking to complete and whether it's running properly or not.

View 12 Replies View Related

Rsync Recovery

Jan 6, 2008

I am trying to recover some backups on the server by rsync the home dir from BQbackup to my server. I deleted 1 file to see whether it actually works. I executing this command on the server:

rsync -avz -e ssh username@username.bqbackup.com:path.to.home.dir /home

I saw that it downloaded the file I deleted, however after checking on FTP if the file was recovered it actually wasn't. Is there something wrong in the command I used as it seems that it is not recovering any files.

View 13 Replies View Related

Rsync Error

Sep 16, 2007

I type rsync and after the man page, it says

Code:
rsync error: syntax or usage error (code 1) at main.c(1073)

View 7 Replies View Related

Rsync / Backup

Nov 10, 2007

I am setting up a mirror server to kick on in the event my main server fails and I need some help with syncing the two.

It is my understanding I can use rsync to mirror the two. But, will that cover everything (ie. database, mail, etc) or only files?

View 5 Replies View Related

Setting Up Rsync

Mar 14, 2007

im trying to setup rsync to mirror my FreeBSD box to my CentOS box.

I have rsync moving everything in /etc/, /usr/, /home/. The rsync daemon is hard to get running on CentOS (need to make startup scripts and all) so I was wondering if I can just make a user on the centOS box for rsync:rsync and transfer it as root fromt he freeBSD box to the centOS box using ssh keys. Can I do this?

Someone said this won't be possible because rsync:rsync will not be able to read the files owned by root:wheel. Is this true?

View 8 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved