backup – Samuel Dalesjö

Using rsnapshot to do backups I want to enable some users the availability to easily restore a single file from the snapshot. Problem is that rsnapshot also is keeping the original permissions for each file. To solve this i will create a usergroup called dalesjo-backup and give this group read access to all files in the backup using an Access Control list.

Enable ACL

First you need to enable ACL on your zfs pool in this case zfs-pool-2

zfs set acltype=posixacl zfs-pool-2

If you dont do this setfacl will return the error below.

setfacl: .: Operation not supported

Set Filepermissions

Below I’m setting a default acl giving dalesjo-backup read/execute permissions on all new files. And after that changing all currently existing files to give read/execute access to the same group.

cd /zfs-pool-2/backup
setfacl -Rdm "g:dalesjo-backup:rx" .
setfacl -Rm "g:dalesjo-backup:rx" .
getfacl .

Source: Serverfault

By mounting a smb share on your linux machine you can make an rsnapshot of the entire share without installing cwrsync. example below

Download ds_smbmount

Create a script that mounts all samba shares you want to snapshot. the script should exit with an exitcode > 0 if mounting fails. Script is later refered to as /root/smb/radion-mount

#!/bin/bash

/root/bin/ds_smbmount -d "/mnt/share/radion/k2/foreningar" -s "//192.168.60.202/föreningar" -u backup -p mypassword -U 0 -G 1003
if [ $? -ne "0" ]; then
 echo "Failed to mount /mnt/share/radion/k2/foreningar"
 exit 1;
fi;

Create a script that umount all samba shares after your rsnapshot is finished. script is later refered to as /root/smb/radion-umount
```
#!/bin/bash

umount /mnt/share/radion/k2/foreningar
```

Configure rsnapshot to run an script before and after snapshot.

#################################################
# rsnapshot.conf - rsnapshot configuration file #
#################################################

#######################
# CONFIG FILE VERSION #
#######################

config_version 1.2

###########################
# SNAPSHOT ROOT DIRECTORY #
###########################

# All snapshots will be stored under this root directory.
snapshot_root /zfs-pool-2/backup/radion
no_create_root 0

#################################
# EXTERNAL PROGRAM DEPENDENCIES #
#################################

cmd_cp /bin/cp
cmd_rm /bin/rm
cmd_rsync /usr/bin/rsync
cmd_ssh /usr/bin/ssh
cmd_logger /usr/bin/logger

cmd_preexec /root/smb/radion-mount
cmd_postexec /root/smb/radion-umount

#########################################
# BACKUP INTERVALS #
#########################################

retain daily 30

############################################
# GLOBAL OPTIONS #
############################################

verbose 2
loglevel 3
logfile /var/log/rsnapshot-radion.log
lockfile /var/run/rsnapshot-radion.pid

# Bandwith limited to 30000KB/s =~ 240Mb/s
# default --relative removed to keep simple folder structure.
rsync_long_args --bwlimit=30000 --delete --numeric-ids --delete-excluded


###############################
### BACKUP POINTS / SCRIPTS ###
###############################

backup /mnt/share/radion/k2/foreningar     k2/foreningar