From 92bd39bbebc1e709119fdfdc0277869cc0c0fa54 Mon Sep 17 00:00:00 2001 From: Edwin Eefting Date: Sun, 15 Oct 2023 20:10:13 +0200 Subject: [PATCH] moved run-without-root to manual --- Home.md | 16 ---------------- Manual.md | 17 +++++++++++++++++ 2 files changed, 17 insertions(+), 16 deletions(-) diff --git a/Home.md b/Home.md index 563f07c..2438c87 100644 --- a/Home.md +++ b/Home.md @@ -78,22 +78,6 @@ root@backup:~# ``` This allows the backup machine to login to `pve01` as root without password. -### Running without root - -In order to run zfs-autobackup without root permissions, you'll need to set a few ZFS permissions. The permissions required differ for receiving and sending. - -On the machine you want to sync the dataset from, you'll need the send, hold, mount, snapshot, and destroy permissions. You can apply them like so: - -```console -root@source:~# zfs allow -u localuser mount,send,hold,snapshot,destroy rpool -``` - -On the receiving side, you will need the compression, mountpoint, create, mount, receive, rollback and destroy permissions: - -```console -root@target:~# zfs allow -u remoteuser compression,mountpoint,create,mount,receive,rollback,destroy tank/backups/rpool -``` - ### Select filesystems to backup Next, we specify the filesystems we want to snapshot and replicate by assigning a unique group name to those filesystems. diff --git a/Manual.md b/Manual.md index 0acf0e7..2e34836 100644 --- a/Manual.md +++ b/Manual.md @@ -170,3 +170,20 @@ The handling of those is described [here](Thinner#destroying-missing-datasets) ( ## Thinner The thinner decides when a snapshot is obsolete. Look at [Thinner](Thinner) for more info. (`--keep-source` and `--keep-target`) + + +## Running without root + +In order to run zfs-autobackup without root permissions, you'll need to set a few ZFS permissions. The permissions required differ for receiving and sending. + +On the machine you want to sync the dataset from, you'll need the send, hold, mount, snapshot, and destroy permissions. You can apply them like so: + +```console +root@source:~# zfs allow -u localuser mount,send,hold,snapshot,destroy rpool +``` + +On the receiving side, you will need the compression, mountpoint, create, mount, receive, rollback and destroy permissions: + +```console +root@target:~# zfs allow -u remoteuser compression,mountpoint,create,mount,receive,rollback,destroy tank/backups/rpool +```