Re: [Bacula-users] initialize backup from client

2020-07-17 Thread Josh Fisher

On 7/16/2020 8:56 AM, Adam Weremczuk wrote:

Hi all,

As some of my remote users haven't been to the office for months no 
backups of their laptops have been taken.


The reason is VPN is configured one way. Remote users can access 
internal resources but no internal systems are aware of their 
hostnames. All IPs assigned to VPN tunnels are dynamic and short 
lived. It's also harder to have the laptops connected and subjecting 
to backup at strictly scheduled times.


My question: is it possible for Bacula clients to initialize backup on 
demand rather than running a schedule on the server? They don't have 
to be daily. One weekly one executed at convenient time would be much 
better than no backup at all.


You can upgrade to a new version of Bacula (on both server and clients) 
that has client-initiated backup capability. By default, bacula-dir 
makes a connection to bacula-fd to initiate a backup, but it is also 
possible to have bacula-fd connect to bacula-dir to request initiation. 
In either case, bacula-fd connects to bacula-sd for the actual backup 
operation.


Also, keep in mind that the version of bacula-dir and bacula-sd must 
always be >= the version of any bacula-fd client in use. Bacula-dir and 
bacula-sd are backward-compatible, but bacula-fd is not.


I have seen this situation with remote users worsen due to the pandemic. 
I (mostly) worked around this issue by having users access a file server 
over VPN along with a owncloud server, rather than the remote users 
storing data locally. Their laptops are essentially thin clients, so 
backing them up is not that critical.





I'm after a secure solution - just allow clients to perform a single 
operation rather than grant root access to Bacula server.


Well, bacula-fd must have read permissions to anything needing to be 
backed up. It can run as non-root but will be limited to the set of 
files and directories for which it has read permissions.





I'm running an old Bacula version 5.2.6.

Please advise.

Regards,
Adam




___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users



___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users


[Bacula-users] initialize backup from client

2020-07-16 Thread Adam Weremczuk

Hi all,

As some of my remote users haven't been to the office for months no 
backups of their laptops have been taken.


The reason is VPN is configured one way. Remote users can access 
internal resources but no internal systems are aware of their hostnames. 
All IPs assigned to VPN tunnels are dynamic and short lived. It's also 
harder to have the laptops connected and subjecting to backup at 
strictly scheduled times.


My question: is it possible for Bacula clients to initialize backup on 
demand rather than running a schedule on the server? They don't have to 
be daily. One weekly one executed at convenient time would be much 
better than no backup at all.


I'm after a secure solution - just allow clients to perform a single 
operation rather than grant root access to Bacula server.


I'm running an old Bacula version 5.2.6.

Please advise.

Regards,
Adam




___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users