Skip to content
Snippets Groups Projects
Commit 99434c8b authored by intrigeri's avatar intrigeri
Browse files

Added ftp_password option.

This is the only way to securely transmit the FTP password from backupninja
to duplicity.
parent 219a6eb9
Branches
Tags
No related merge requests found
...@@ -15,6 +15,8 @@ version 0.9.8 -- UNRELEASED ...@@ -15,6 +15,8 @@ version 0.9.8 -- UNRELEASED
than the default /root/.cache/duplicity, unless the user than the default /root/.cache/duplicity, unless the user
has specified it (Closes: 580213) has specified it (Closes: 580213)
. Better example.dup documentation. Thanks, Alster! . Better example.dup documentation. Thanks, Alster!
. Added ftp_password option to securely transmit the FTP password
from backupninja to duplicity.
version 0.9.7 -- January 27, 2010 version 0.9.7 -- January 27, 2010
backupninja changes backupninja changes
......
...@@ -170,7 +170,7 @@ exclude = /home/*/.gnupg ...@@ -170,7 +170,7 @@ exclude = /home/*/.gnupg
## desturl = file:///usr/local/backup ## desturl = file:///usr/local/backup
## desturl = rsync://user@other.host//var/backup/bla ## desturl = rsync://user@other.host//var/backup/bla
## desturl = s3+http:// ## desturl = s3+http://
## desturl = ftp://myftpuser[:myftppassword]@ftp.example.org/remote/ftp/path ## desturl = ftp://myftpuser@ftp.example.org/remote/ftp/path
## the default value of this configuration option is not set: ## the default value of this configuration option is not set:
## ##
## Default: ## Default:
...@@ -185,6 +185,11 @@ exclude = /home/*/.gnupg ...@@ -185,6 +185,11 @@ exclude = /home/*/.gnupg
# awsaccesskeyid = # awsaccesskeyid =
# awssecretaccesskey = # awssecretaccesskey =
## FTP password, needed for backups using desturl = ftp://...
##
## Default:
# ftp_password =
## bandwith limit, in kbit/s ; default is 0, i.e. no limit ## bandwith limit, in kbit/s ; default is 0, i.e. no limit
## if using 'desturl' above, 'bandwidthlimit' must not be set ## if using 'desturl' above, 'bandwidthlimit' must not be set
## an example setting of 128 kbps would be: ## an example setting of 128 kbps would be:
......
...@@ -430,13 +430,16 @@ keep = $dup_keep ...@@ -430,13 +430,16 @@ keep = $dup_keep
#desturl = file:///usr/local/backup #desturl = file:///usr/local/backup
#desturl = rsync://user@other.host//var/backup/bla #desturl = rsync://user@other.host//var/backup/bla
#desturl = s3+http://your_bucket #desturl = s3+http://your_bucket
#desturl = ftp://myftpuser[:myftppassword]@ftp.example.org/remote/ftp/path #desturl = ftp://myftpuser@ftp.example.org/remote/ftp/path
# Amazon Web Services Access Key ID and Secret Access Key, needed for backups # Amazon Web Services Access Key ID and Secret Access Key, needed for backups
# to S3 buckets. # to S3 buckets.
#awsaccesskeyid = YOUR_AWS_ACCESS_KEY_ID #awsaccesskeyid = YOUR_AWS_ACCESS_KEY_ID
#awssecretaccesskey = YOUR_AWS_SECRET_KEY #awssecretaccesskey = YOUR_AWS_SECRET_KEY
# FTP password, needed for backups using desturl = ftp://...
#ftp_password =
# bandwith limit, in kbit/s ; default is 0, i.e. no limit # bandwith limit, in kbit/s ; default is 0, i.e. no limit
# if using 'desturl' above, 'bandwidthlimit' must not be set # if using 'desturl' above, 'bandwidthlimit' must not be set
# an example setting of 128 kbps would be: # an example setting of 128 kbps would be:
......
...@@ -29,6 +29,7 @@ getconf keep 60 ...@@ -29,6 +29,7 @@ getconf keep 60
getconf desturl getconf desturl
getconf awsaccesskeyid getconf awsaccesskeyid
getconf awssecretaccesskey getconf awssecretaccesskey
getconf ftp_password
getconf sshoptions getconf sshoptions
getconf bandwidthlimit 0 getconf bandwidthlimit 0
getconf desthost getconf desthost
...@@ -44,6 +45,9 @@ destdir=${destdir%/} ...@@ -44,6 +45,9 @@ destdir=${destdir%/}
if [ "`echo $desturl | @AWK@ -F ':' '{print $1}'`" == "s3+http" ]; then if [ "`echo $desturl | @AWK@ -F ':' '{print $1}'`" == "s3+http" ]; then
[ -n "$awsaccesskeyid" -a -n "$awssecretaccesskey" ] || fatal "AWS access keys must be set for S3 backups." [ -n "$awsaccesskeyid" -a -n "$awssecretaccesskey" ] || fatal "AWS access keys must be set for S3 backups."
fi fi
if [ "`echo $desturl | @AWK@ -F ':' '{print $1}'`" == "ftp" ]; then
[ -n "$ftp_password" ] || fatal "ftp_password must be set for FTP backups."
fi
### VServers ### VServers
# If vservers are configured, check that the ones listed in $vsnames do exist. # If vservers are configured, check that the ones listed in $vsnames do exist.
...@@ -269,6 +273,7 @@ if [ "$duplicity_major" -ge 0 -a "$duplicity_minor" -ge 4 -a "$duplicity_sub" -g ...@@ -269,6 +273,7 @@ if [ "$duplicity_major" -ge 0 -a "$duplicity_minor" -ge 4 -a "$duplicity_sub" -g
debug "$precmd duplicity cleanup --force $execstr_options $execstr_serverpart" debug "$precmd duplicity cleanup --force $execstr_options $execstr_serverpart"
if [ ! $test ]; then if [ ! $test ]; then
export PASSPHRASE=$password export PASSPHRASE=$password
export FTP_PASSWORD=$ftp_password
output=`nice -n $nicelevel \ output=`nice -n $nicelevel \
su -c \ su -c \
"$precmd duplicity cleanup --force $execstr_options $execstr_serverpart 2>&1"` "$precmd duplicity cleanup --force $execstr_options $execstr_serverpart 2>&1"`
...@@ -289,6 +294,7 @@ if [ "$keep" != "yes" ]; then ...@@ -289,6 +294,7 @@ if [ "$keep" != "yes" ]; then
debug "$precmd duplicity remove-older-than $keep --force $execstr_options $execstr_serverpart" debug "$precmd duplicity remove-older-than $keep --force $execstr_options $execstr_serverpart"
if [ ! $test ]; then if [ ! $test ]; then
export PASSPHRASE=$password export PASSPHRASE=$password
export FTP_PASSWORD=$ftp_password
output=`nice -n $nicelevel \ output=`nice -n $nicelevel \
su -c \ su -c \
"$precmd duplicity remove-older-than $keep --force $execstr_options $execstr_serverpart 2>&1"` "$precmd duplicity remove-older-than $keep --force $execstr_options $execstr_serverpart 2>&1"`
...@@ -309,6 +315,7 @@ debug "$precmd duplicity $execstr_command $execstr_options $execstr_source --exc ...@@ -309,6 +315,7 @@ debug "$precmd duplicity $execstr_command $execstr_options $execstr_source --exc
if [ ! $test ]; then if [ ! $test ]; then
outputfile=`maketemp backupout` outputfile=`maketemp backupout`
export PASSPHRASE=$password export PASSPHRASE=$password
export FTP_PASSWORD=$ftp_password
output=`nice -n $nicelevel \ output=`nice -n $nicelevel \
su -c \ su -c \
"$precmd duplicity $execstr_command $execstr_options $execstr_source --exclude '**' / $execstr_serverpart >$outputfile 2>&1"` "$precmd duplicity $execstr_command $execstr_options $execstr_source --exclude '**' / $execstr_serverpart >$outputfile 2>&1"`
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment