diff --git a/Home.md b/Home.md index 3e15d26..86fda83 100644 --- a/Home.md +++ b/Home.md @@ -78,6 +78,22 @@ root@backup:~# ``` This allows the backup machine to login to `pve01` as root without password. +### Running without root + +In order to run zfs-autobackup without root permissions, you'll need to set a few ZFS permissions. The permissions required differ for receiving and sending. + +On the machine you want to sync the dataset from, you'll need the send, hold, mount, snapshot, and destroy permissions. You can apply them like so: + +```console +root@backup:~# zfs allow -u localuser mount,send,hold,snapshot,destroy rpool +``` + +On the receiving side, you will need the compression, mountpoint, create, mount, receive, rollback and destroy permissions: + +```console +root@backup:~# zfs allow -u remoteuser compression,mountpoint,create,mount,receive,rollback,destroy tank/backups/rpool +``` + ### Select filesystems to backup Next, we specify the filesystems we want to snapshot and replicate by assigning a unique group name to those filesystems.