Sign inSign up

fphammerle/borgbackup-sshd

By fphammerle

•Updated over 2 years ago

Single-user OpenSSH server restricted to BorgBackup backend

Image
0

2.4K

fphammerle/borgbackup-sshd repository overview

⁠docker: borgbackup-sshd 💾 🐳 🐙

Single-user OpenSSH server⁠ restricted to BorgBackup⁠ backend

$ sudo docker run --name borgbackup_sshd \
    -v ssh_host_keys:/etc/ssh/host_keys:rw \
    -v /somewhere:/repository:rw \
    --tmpfs /home/borg/.ssh:mode=1777,size=16k \
    --tmpfs /tmp:mode=1777,size=1M \
    -p 2200:2200 \
    -e SSH_CLIENT_PUBLIC_KEYS="$(cat ~/.ssh/id_*.pub)" \
    -e SSH_CLIENT_PUBLIC_KEYS_APPEND_ONLY="$(cat optional-append-only-keys.pub)" \
    --read-only --security-opt=no-new-privileges --cap-drop=ALL \
    docker.io/fphammerle/borgbackup-sshd

$ borg init --encryption=editme ssh://[email protected]:2200//repository

$ borg create --stats ssh://[email protected]:2200//repository::{hostname}-{utcnow} \
    ~/documents ~/photos ...

sudo docker may be replaced with podman.

Pre-built docker images are available at https://hub.docker.com/r/fphammerle/borgbackup-sshd/tags⁠ (mirror: https://quay.io/repository/fphammerle/borgbackup-sshd?tab=tags⁠)

Annotation of signed git tags docker/* contains docker image digests: https://github.com/fphammerle/docker-borgbackup-sshd/tags⁠

Detached signatures of images are available at https://github.com/fphammerle/container-image-sigstore⁠ (exluding automatically built latest tag).

⁠Docker Compose 🐙
  1. git clone https://github.com/fphammerle/docker-borgbackup-sshd
  2. Add public keys to docker-compose.yml⁠
  3. docker-compose up --build

Tag summary

Content type

Image

Digest

Size

20.6 MB

Last updated

about 5 years ago

docker pull fphammerle/borgbackup-sshd