pve-zsync without root access on the target

[mailinglists]

Hi guys,

i want to allow a friend to backup his VMs on my server for instant running.
I would do it with pve-zsync without any problem, the only issue is that I would have to allow root login (with public keys) from his server to mine.
This would in practice mean, he could just ssh into my server and do whatever, which I do not want, as I have my private stuff on in.

How can I make pve-zsync work, but not give root access to the client? Is there maybe a pull option or somth.?
All other suggestions are welcome.

So I could install PBS and give him a dataset on my PBS and once I needed start / import VMs from backup I could do it, but I would really like to just have ZVOLs ready to go, as they are really really big. Also that would use the space twice until all VMs are restored and backup can be deleted.

 

[aaron]

not really fully fledged out, but you could install sudo and configure for the dedicated user that it only allowed to run the commands needed to receive the data to the datasets it needs.

 

[mailinglists]

not really fully fledged out, but you could install sudo and configure for the dedicated user that it only allowed to run the commands needed to receive the data to the datasets it needs.

Thank you for your suggestion.

 

[leesteken]

Maybe give each other a PBS user/namespace (connected via a private wireguard tunnel) to store encrypted backups on each others system? It might not be instant and not always perfectly up to date but syncs are fast (only changed and new data) and you have something to fall back on in case of a fire.