I want to schedule my datastores garbage collection with cron, because if I use WebUI scheduling I risk to overlap GC jobs (my PBS is on spinning disks).
I see that to use the command proxmox-backup-client garbage-collect permission mydatastore, I need to write the user password in the repository URL or in the PBS_PASSWORD environment variables, thus I have to write it in the script, in clear.
Even worse, it seems that GC command can be run only by root, thus I have to write the root password in the script, in clear.
I ask if there's a better/more secure way to script GC (or any proxmox-backup-client datastore related command) so that jobs don't overlap.
I see that to use the command proxmox-backup-client garbage-collect permission mydatastore, I need to write the user password in the repository URL or in the PBS_PASSWORD environment variables, thus I have to write it in the script, in clear.
Even worse, it seems that GC command can be run only by root, thus I have to write the root password in the script, in clear.
I ask if there's a better/more secure way to script GC (or any proxmox-backup-client datastore related command) so that jobs don't overlap.