Append-only mode to external storage

[workpush]

Hello!

I'm using the current PBS 3.0.2. One of my Datastorages is a Hetzner Storagebox, which I have currently have mounted via CIFS.

I'm using the automatic snapshot mechanism from Storagebox: https://docs.hetzner.com/robot/storage-box/snapshots
which actually snapshots again my PBS backuped files on the Hetzner side. I'm doing that in case of that we get attacked and an attacker encrypts/deletes all that external PBS files, we at least can restore a snapshot from that system.

If I would set my storage box to "append-only" mode, where existing files can't get deleted by the client, could PBS handle that? Are existing backups somehow are getting modified?
Borg backup has that mechanism:
https://borgbackup.readthedocs.io/en/stable/usage/notes.html#append-only-mode-forbid-compaction
Also the Storagebox would support that:
https://docs.hetzner.com/robot/storage-box/access/access-ssh-rsync-borg#append-only-mode

Thank you!
Andreas

 

[Lukas Wagner]

If I would set my storage box to "append-only" mode, where existing files can't get deleted by the client, could PBS handle that? Are existing backups somehow are getting modified?

Correct me if I am wrong, but from the docs it does not seem like you can set the storage box to 'append-only' mode. You can use Borg Backup in append-only mode on the storage box, but you cannot set the storage itself to be append-only.