====== Configure backuppc with a non-root account ======
backuppc is an excellent automated backup tool. One flaw it has is that the default configuration requires an enabled ssh root login. This is easy to fix. Think of a backuppc username for all your client systems. In the following, i will use CLIENTUSER and CLIENT
On the client systems
  - adduser CLIENTUSER
  - visudo and add either
    * For backup only, read access: ''CLIENTUSER  ALL=NOPASSWD: /usr/bin/rsync --server --sender *''
    * For backup and restores, rw access: ''CLIENTUSER  ALL=NOPASSWD: /usr/bin/rsync''
On the backuppc server system:
  - ''sudo -s''
  - ''su backuppc''
  - Copy ssh key: ''ssh-copy-id  CLIENTUSER@CLIENT''
  - Test login: ''ssh CLIENTUSER@CLIENT'' 
  - Change rsync client command for CLIENT: '$sshPath -l CLIENTUSER $host nice -n 19 sudo $rsyncPath $argList+'
Ref:
  * http://backuppc.sourceforge.net/faq/ssh.html

{{tag>backuppc linux backup}}

~~LINKBACK~~
~~DISCUSSION~~