>>>>> On Fri, 6 Aug 2021 15:46:49 -0700, Robert Earl said:
> 
> My next step was to do a quick backup and restore of aten to prove it was
> now decryptable. However, a funny thing happened on the way to the forum.
> First I tested matthew to prove it was also decryptable with no
> configuration changes. The restore job went fine, until:
> aten-sd JobId 3747: Elapsed time=00:00:03, Transfer rate=466  Bytes/second
> matthew-fd JobId 3747: Warning: attribs.c:91 Cannot change owner and/or
> group of /tmp/restore/etc/sysconfig: ERR=Operación no permitida 133 -1
> matthew-fd JobId 3747: Error: attribs.c:119 Unable to set file owner
> /tmp/restore/etc/sysconfig/sshd: ERR=Operación no permitida
> Which is logical, because my bacula processes run unprivileged, but highly
> undesirable, because it seems to imply that any large-scale restore will
> end up owned by bacula:bacula entirely, and I will need to guess the
> owner/group of each file? Or for a proper restore do I need to each time
> swap my configuration with a root-privileged fd service?

Yes.

I think most people run the fd as root permanently, especially for system
backups where files might not even be readable by the bacula user.

__Martin


_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to