[Dirvish] Dirvish speed and security

[Keith Lofstrom]

On Mon, May 26, 2008 at 03:31:01PM +0200, Leopold Palomo-Avellaneda wrote:
> 
> I'm using dirvish 1.2.1-1, from a debian etch. I have created my vaults and 
> configured and running the complete system. I have a nfs mount where I put 
> the backup. It simply works. 
> 
> Howeber, I have a very poor transfer rate. To create the init backup I need 
> two days to transfer about 90G, and some days, if we have a lot of 
> modifications, the dirvish have not finished their work, so, when we work 
> again the backup is not finished occasioning:

If your data rate is low, you may want to make more, smaller images.  That
way you can do the initialization in multiple steps.  You should also arrange
your data to minimize the backup effort - dateext for logrotate, maildir 
instead of mbox mail storage, etc.  Lastly, if your transfer rate is very
low, consider running backups less often than once a day.  If you are using
smaller images, then you can run them in two sets on alternate days, perhaps
using two different master files selected by scripts from cron.  

> About security, the permissions to the log file are r-r-r, so everybody could 
> read it. There's some way that I could change this mask in dirvish?

Is this to prevent users from seeing other user's changes?

I keep my banks in a subdirectory accessable to root only, and unmount
the partition they are in when I am not doing backups.  I don't want to
make the dirvish banks accessable to general users - if something needs
to be restored, it is best if a sysadmin does it. 

If you want to keep the user files accessable, but not the logs, perhaps
you can set up a wrapper shell script that chmods the bank to 700 during
backup, chmods the log files to 400 after backup, then chmods the bank
back to 755 at the end.

Keith

-- 
Keith Lofstrom          keithl at keithl.com         Voice (503)-520-1993
KLIC --- Keith Lofstrom Integrated Circuits --- "Your Ideas in Silicon"
Design Contracting in Bipolar and CMOS - Analog, Digital, and Scan ICs