hwelte
/
rs-backup-suite
1
0
Fork 0
Code Pull Requests Releases Activity

Make read-only bind mount work with unpatched kernels (i.e. uglify mount commands by a lot)

This commit is contained in:
Janek Bevendorff 2014-10-15 01:47:28 +02:00
parent 755f2c62a0
commit 181b05d116
4 changed files with 67 additions and 34 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

44
README.md
View File

@ -50,21 +50,28 @@ The optional third parameter specifies the path to the SSH public key file which
rs-backup-suite can chroot backup users into the backup home base directory. For this to work you need to create a few bind mounts. The install script already created the respective lines in your `/etc/fstab` for you. If you don't need any special configuration on your system, all you need to do is to uncomment everything between the `BEGIN` and `END` lines (do NOT change these two lines, though): rs-backup-suite can chroot backup users into the backup home base directory. For this to work you need to create a few bind mounts. The install script already created the respective lines in your `/etc/fstab` for you. If you don't need any special configuration on your system, all you need to do is to uncomment everything between the `BEGIN` and `END` lines (do NOT change these two lines, though):
# BEGIN: rs-backup-suite # BEGIN: rs-backup-suite
#/bin /bkp/bin none bind,ro 0 0 #/bin /bkp/bin none bind 0 0
#/lib /bkp/lib none bind,ro 0 0 #/bin /bkp/bin none remount,ro 0 0
#/dev /bkp/dev none bind,ro 0 0 #/lib /bkp/lib none bind 0 0
#/usr/bin /bkp/usr/bin none bind,ro 0 0 #/lib /bkp/lib none remount,ro 0 0
#/usr/lib /bkp/usr/lib none bind,ro 0 0 #/dev /bkp/dev none bind 0 0
#/usr/share/perl5 /bkp/usr/share/perl5 none bind,ro 0 0 #/dev /bkp/dev none remount,ro 0 0
#/usr/bin /bkp/usr/bin none bind 0 0
#/usr/bin /bkp/usr/bin none remount,ro 0 0
#/usr/lib /bkp/usr/lib none bind 0 0
#/usr/lib /bkp/usr/lib none remount,ro 0 0
#/usr/share/perl5 /bkp/usr/share/perl5 none bind 0 0
#/usr/share/perl5 /bkp/usr/share/perl5 none remount,ro 0 0
# END: rs-backup-suite # END: rs-backup-suite
The necessary mounts may differ from system to system. For instance, Ubuntu needs `/usr/share/perl` instead of `/usr/share/perl5`. Synology DSM doesn't need `/usr/share/*` at all, but requires `/opt/bin`, `/opt/lib` and `/opt/libexec`. But in most cases you don't need to worry about that since the install script tries to make the correct decisions for you. The necessary mounts may differ from system to system. For instance, Ubuntu needs `/usr/share/perl` instead of `/usr/share/perl5`. Synology DSM doesn't need `/usr/share/*` at all, but requires `/opt/bin`, `/opt/lib` and `/opt/libexec`. But in most cases you don't need to worry about that since the install script tries to make the correct decisions for you.
**NOTE:** If your 64-bit system doesn't have a `/lib` folder but only `/lib64` you may need to change the `/lib` line in your `/etc/fstab` as follows: **NOTE:** If your 64-bit system doesn't have a `/lib` folder but only `/lib64` you may need to change the `/lib` line in your `/etc/fstab` as follows:
/lib64 /bkp/lib64 none bind 0 0 /lib64 /bkp/lib64 none bind 0 0
/lib64 /bkp/lib64 none remount,ro 0 0
Don't forget to rename `/bkp/lib` to `/bkp/lib64`. Don't forget to rename `/bkp/lib` to `/bkp/lib64`. The do the same with `/usr/lib` / `/usr/lib64`.
When you're done, add this to the end of your `/etc/ssh/sshd_config`: When you're done, add this to the end of your `/etc/ssh/sshd_config`:
@ -166,13 +173,20 @@ To run the server component on Synology DSM, you need to install the following p
If you want to run your backups in a chroot environment please note that `/etc/fstab` will be reset to its defaults when rebooting the disk station. To avoid configuration loss, no mount directives are added to `/etc/fstab` by the install script. Instead the following entries are added to `/etc/rc` (which won't be overwritten upon reboot): If you want to run your backups in a chroot environment please note that `/etc/fstab` will be reset to its defaults when rebooting the disk station. To avoid configuration loss, no mount directives are added to `/etc/fstab` by the install script. Instead the following entries are added to `/etc/rc` (which won't be overwritten upon reboot):
# BEGIN: rs-backup-suite # BEGIN: rs-backup-suite
#mount -o bind,ro /bin /var/services/homes/bin #mount -o bind /bin /var/services/homes/bin
#mount -o bind,ro /lib /var/services/homes/lib #mount -o remount,ro /var/services/homes/bin
#mount -o bind,ro /dev /var/services/homes/dev #mount -o bind /lib /var/services/homes/lib
#mount -o bind,ro /usr/bin /var/services/homes/usr/bin #mount -o remount,ro /var/services/homes/lib
#mount -o bind,ro /opt/bin /var/services/homes/opt/bin #mount -o bind /dev /var/services/homes/dev
#mount -o bind,ro /opt/lib /var/services/homes/opt/lib #mount -o remount,ro /var/services/homes/dev
#mount -o bind,ro /opt/libexec /var/services/homes/opt/libexec #mount -o bind /usr/bin /var/services/homes/usr/bin
#mount -o remount,ro /var/services/homes/usr/bin
#mount -o bind /opt/bin /var/services/homes/opt/bin
#mount -o remount,ro /var/services/homes/opt/bin
#mount -o bind /opt/lib /var/services/homes/opt/lib
#mount -o remount,ro /var/services/homes/opt/lib
#mount -o bind /opt/libexec /var/services/homes/opt/libexec
#mount -o remount,ro /var/services/homes/opt/libexec
# END: rs-backup-suite # END: rs-backup-suite
To enable the mounts, uncomment everything between the `BEGIN` and `END` block. Afterwards either run these commands by hand once or reboot. To enable the mounts, uncomment everything between the `BEGIN` and `END` block. Afterwards either run these commands by hand once or reboot.

18
server/etc/fstab
View File

@ -1,8 +1,14 @@
# BEGIN: rs-backup-suite # BEGIN: rs-backup-suite
#/bin ::BACKUP_ROOT::/bin none bind,ro 0 0 #/bin ::BACKUP_ROOT::/bin none bind 0 0
#/lib ::BACKUP_ROOT::/lib none bind,ro 0 0 #/bin ::BACKUP_ROOT::/bin none remount,ro 0 0
#/dev ::BACKUP_ROOT::/dev none bind,ro 0 0 #/lib ::BACKUP_ROOT::/lib none bind 0 0
#/usr/bin ::BACKUP_ROOT::/usr/bin none bind,ro 0 0 #/lib ::BACKUP_ROOT::/lib none remount,ro 0 0
#/usr/lib ::BACKUP_ROOT::/usr/lib none bind,ro 0 0 #/dev ::BACKUP_ROOT::/dev none bind 0 0
#/usr/share/perl5 ::BACKUP_ROOT::/usr/share/perl5 none bind,ro 0 0 #/dev ::BACKUP_ROOT::/dev none remount,ro 0 0
#/usr/bin ::BACKUP_ROOT::/usr/bin none bind 0 0
#/usr/bin ::BACKUP_ROOT::/usr/bin none remount,ro 0 0
#/usr/lib ::BACKUP_ROOT::/usr/lib none bind 0 0
#/usr/lib ::BACKUP_ROOT::/usr/lib none remount,ro 0 0
#/usr/share/perl5 ::BACKUP_ROOT::/usr/share/perl5 none bind 0 0
#/usr/share/perl5 ::BACKUP_ROOT::/usr/share/perl5 none remount,ro 0 0
# END: rs-backup-suite # END: rs-backup-suite

21
server/etc/fstab_synology
View File

@ -1,9 +1,16 @@
# BEGIN: rs-backup-suite # BEGIN: rs-backup-suite
#mount -o bind,ro /bin ::BACKUP_ROOT::/bin #mount -o bind /bin ::BACKUP_ROOT::/bin
#mount -o bind,ro /lib ::BACKUP_ROOT::/lib #mount -o remount,ro ::BACKUP_ROOT::/bin
#mount -o bind,ro /dev ::BACKUP_ROOT::/dev #mount -o bind /lib ::BACKUP_ROOT::/lib
#mount -o bind,ro /usr/bin ::BACKUP_ROOT::/usr/bin #mount -o remount,ro ::BACKUP_ROOT::/lib
#mount -o bind,ro /opt/bin ::BACKUP_ROOT::/opt/bin #mount -o bind /dev ::BACKUP_ROOT::/dev
#mount -o bind,ro /opt/lib ::BACKUP_ROOT::/opt/lib #mount -o remount,ro ::BACKUP_ROOT::/dev
#mount -o bind,ro /opt/libexec ::BACKUP_ROOT::/opt/libexec #mount -o bind /usr/bin ::BACKUP_ROOT::/usr/bin
#mount -o remount,ro ::BACKUP_ROOT::/usr/bin
#mount -o bind /opt/bin ::BACKUP_ROOT::/opt/bin
#mount -o remount,ro ::BACKUP_ROOT::/opt/bin
#mount -o bind /opt/lib ::BACKUP_ROOT::/opt/lib
#mount -o remount,ro ::BACKUP_ROOT::/opt/lib
#mount -o bind /opt/libexec ::BACKUP_ROOT::/opt/libexec
#mount -o remount,ro ::BACKUP_ROOT::/opt/libexec
# END: rs-backup-suite # END: rs-backup-suite

18
server/etc/fstab_ubuntu
View File

@ -1,8 +1,14 @@
# BEGIN: rs-backup-suite # BEGIN: rs-backup-suite
#/bin ::BACKUP_ROOT::/bin none bind,ro 0 0 #/bin ::BACKUP_ROOT::/bin none bind 0 0
#/lib ::BACKUP_ROOT::/lib none bind,ro 0 0 #/bin ::BACKUP_ROOT::/bin none remount,ro 0 0
#/dev ::BACKUP_ROOT::/dev none bind,ro 0 0 #/lib ::BACKUP_ROOT::/lib none bind 0 0
#/usr/bin ::BACKUP_ROOT::/usr/bin none bind,ro 0 0 #/lib ::BACKUP_ROOT::/lib none remount,ro 0 0
#/usr/lib ::BACKUP_ROOT::/usr/lib none bind,ro 0 0 #/dev ::BACKUP_ROOT::/dev none bind 0 0
#/usr/share/perl ::BACKUP_ROOT::/usr/share/perl none bind,ro 0 0 #/dev ::BACKUP_ROOT::/dev none remount,ro 0 0
#/usr/bin ::BACKUP_ROOT::/usr/bin none bind 0 0
#/usr/bin ::BACKUP_ROOT::/usr/bin none remount,ro 0 0
#/usr/lib ::BACKUP_ROOT::/usr/lib none bind 0 0
#/usr/lib ::BACKUP_ROOT::/usr/lib none remount,ro 0 0
#/usr/share/perl ::BACKUP_ROOT::/usr/share/perl none bind 0 0
#/usr/share/perl ::BACKUP_ROOT::/usr/share/perl none remount,ro 0 0
# END: rs-backup-suite # END: rs-backup-suite