Difference between revisions of "Quick Notes"
Jump to navigation
Jump to search
| Line 29: | Line 29: | ||
{{!}} style="text-align: center; width: 60px;" {{!}} [[File:Logo Debian.png{{!}}60px{{!}}link=https://www.debian.org/{{!}}center{{!}}middle{{!}}frameless]] | {{!}} style="text-align: center; width: 60px;" {{!}} [[File:Logo Debian.png{{!}}60px{{!}}link=https://www.debian.org/{{!}}center{{!}}middle{{!}}frameless]] | ||
{{!}} style="text-align: center; width: 40px;" {{!}} 12 (bookworm) | {{!}} style="text-align: center; width: 40px;" {{!}} 12 (bookworm) | ||
{{!}} | {{!}} <br> | ||
{{!}}} | {{!}}} | ||
Currently testing on a pair of LXCs, both configured as priveledged containers (tho this may not be needed). | Currently testing on a pair of LXCs, both configured as priveledged containers (tho this may not be needed). | ||
* VMID 999001: storage | * VMID 999001: storage | ||
* VMID 999002: backup | * VMID 999002: backup | ||
Primary user on both is tinker (because remote access by root is stupid...) | Primary user on both is '''''tinker''''' (because remote access by '''''root''''' is stupid...) | ||
== On the PVE Server: == | == On the PVE Server: == | ||
Revision as of 01:03, 2 February 2025
Sections here are really just placeholders with enough information to get started on building actual articles...
Better Permissions Handling
 |
12 (bookworm) |
sudo apt install aclsudo mkdir /FOOBARsudo chown -R :users /FOOBARsudo chmod -R g+ws /FOOBARsudo setfacl -Rdm g:users:rx /FOOBAR
Now, the directory /FOOBAR is writeable by anyone in the users group.
Some Links
- Wikipedia : setuid
- Wikipedia : Access-control list
- StackExchange : Getting new files to inherit group permissions on Linux
- StackExchange : Using setfacl to create recursive permissions for Apache with rsync
Development Testing for a Backup Server
|
12 (bookworm) |
Currently testing on a pair of LXCs, both configured as priveledged containers (tho this may not be needed).
- VMID 999001: storage
- VMID 999002: backup
Primary user on both is tinker (because remote access by root is stupid...)
On the PVE Server:
(setting up the storage for the test LXCs...)
mkdir /mnt/Storage-0mkdir /mnt/Storage-1mount -L Storage-0 /mnt/Storage-0mount -L Storage-1 /mnt/Storage-1vi /etc/fstab
LABEL=Storage-0 /mnt/Storage-0 ext4 defaults 0 0 LABEL=Storage-1 /mnt/Storage-1 ext4 defaults 0 0
pct set 999001 -mp0 /mnt/Storage-0,mp=/mnt/Storage # storagepct set 999002 -mp0 /mnt/Storage-1,mp=/mnt/Storage # backup
On "storage"
ssh-keygenssh-copy-id tinker@backupapt install aclsetfacl -Rdm u:tinker:rwX /mnt/Storage
On "backup"
ssh-keygenssh-copy-id tinker@storageapt install aclsetfacl -Rdm u:tinker:rwX /mnt/Storage