|
Description
|
A beta customer asks:
"Would you consider an RFE that basically has some sort of zfsd daemon type thing (or something built-in to zfs) optionally "listen" for other zfs filesystems out there. the idea would be that keys or some sort of password/trusts can be setup that would allow remote backup/restore operations without reliance on SSH and its root-requirements?"
Matt Ahrens' comments:
"I would consider that, but I think there are better solutions to the specific problem of root running ssh. For example, we could create a 'zfs' user which has privileges to manipulate zfs filesystems, and then you could simply do 'zfs backup <snap> | ssh zfs@host zfs restore ...'.
Other short-term workaround would include making a setuid script which allows certain ordinary users to run 'zfs restore' or 'zfs backup'.
Also, as a longer-term solution, ZFS will eventually allow delegated administration. The administrator will be able to allow ordinary users to administrate their own filesystems. For example, as an ordinary user you could administrate your home directory filesystem, and any filesystems underneath it. Then as an ordinary user you would be able to backup and restore filesystems underneath your home directory.
We'll consider all of these options when designing the above mentioned more complete solutions. The examples in the manpage aren't intended to be one-stop solutions, they are there more to show how the commands work and give you an idea of what you can do with them. I do think that ideally the admin guide would mention all of these caveats and workarounds though."
|