3 Commits
4.1.2 ... 4.1.5

Author SHA1 Message Date
45a07205a1 Add type hints plus minor code fixes 2024-09-28 09:47:33 +02:00
9390cd2de8 Allow removing remote old backups with sudo if possible
If allowed by the remote server, try using sudo to remove
old backups (rm needs to be allowed in sudoers to run
without password)
2023-10-15 15:39:06 +02:00
77661c0964 Handle getpass exception 2023-07-16 08:22:51 +02:00
5 changed files with 63 additions and 43 deletions

View File

@ -68,4 +68,4 @@ sudo --preserve-env=SSH_AUTH_SOCK -s simple_backup [options]
or by editing the sudoers file. or by editing the sudoers file.
If SSH key authentication is not available, password authentication will be used instead. If SSH key authentication is not available, password authentication will be used instead.
Check the man page for more details.

View File

@ -93,19 +93,19 @@ Don't use systemd journal for logging.
.B \-\-rsync\-options OPTIONS [OPTION...] .B \-\-rsync\-options OPTIONS [OPTION...]
By default, the following rsync options are used: By default, the following rsync options are used:
.RS .RS
.PP .P
\-a \-r \-v \-h \-s \-H \-X \-a \-r \-v \-h \-s \-H \-X
.PP .P
Using \-\-rsync\-options it is possible to manually select which options to use. Supported values are the following: Using \-\-rsync\-options it is possible to manually select which options to use. Supported values are the following:
.PP .P
\-a, \-l, \-p, \-t, \-g, \-o, \-c, \-h, \-D, \-H, \-X, \-s \-a, \-l, \-p, \-t, \-g, \-o, \-c, \-h, \-D, \-H, \-X, \-s
.PP .P
Options \-r and \-v are used in any case. Not that options must be specified without dash (\-), for example: Options \-r and \-v are used in any case. Not that options must be specified without dash (\-), for example:
.PP .P
.EX .EX
simple_backup \-\-rsync\-options a l p simple_backup \-\-rsync\-options a l p
.EE .EE
.TP .P
Check Check
.BR rsync (1) .BR rsync (1)
for details about the options. for details about the options.
@ -114,8 +114,12 @@ for details about the options.
.B \-\-remote\-sudo .B \-\-remote\-sudo
Run rsync on the remote server with sudo. This is needed if you want to preserve the owner of the files/folders to be copied (rsync \-\-owner option). For this to work the user used to login to the server obviously need to be allowed to use sudo. In addition, the user need to be able to run rsync with sudo without a password. To do this, /etc/sudoers on the server need to be edited adding a line like this one: Run rsync on the remote server with sudo. This is needed if you want to preserve the owner of the files/folders to be copied (rsync \-\-owner option). For this to work the user used to login to the server obviously need to be allowed to use sudo. In addition, the user need to be able to run rsync with sudo without a password. To do this, /etc/sudoers on the server need to be edited adding a line like this one:
.RS .RS
.PP .P
<username> ALL=NOPASSWD:<path/to/rsync> <username> ALL=NOPASSWD:<path/to/rsync>
.P
To be able to remove old backups generated with \-\-remote\-sudo (see \-\-keep option), also
.BR rm (1)
needs to be allowed to run without password in the same way.
.RE .RE
.TP .TP
.B \-\-numeric\-ids .B \-\-numeric\-ids
@ -139,7 +143,7 @@ When running
.B simple_backup .B simple_backup
with with
.B sudo, .B sudo,
in order to connect to the user\(aq s SSH agent it is necessary to preserve the \(aq SSH_AUTH_SOCK\(aq environment variable, for example: in order to connect to the user\(aqs SSH agent it is necessary to preserve the \(aqSSH_AUTH_SOCK\(aq environment variable, for example:
.P .P
.EX .EX
sudo --preserve-env=SSH_AUTH_SOCK -s simple_backup [options] sudo --preserve-env=SSH_AUTH_SOCK -s simple_backup [options]
@ -148,8 +152,7 @@ in order to connect to the user\(aq s SSH agent it is necessary to preserve the
It is also possible to make this permanent by editing the It is also possible to make this permanent by editing the
.B sudoers .B sudoers
file (see file (see
.BR sudoers (5) .BR sudoers (5))
)
.P .P
If SSH key authentication is not available, password authentication will be used instead. If SSH key authentication is not available, password authentication will be used instead.
Note that in this case Note that in this case

View File

@ -1,3 +1,3 @@
"""Init.""" """Init."""
__version__ = '4.1.2' __version__ = '4.1.5'

View File

@ -2,7 +2,7 @@
[backup] [backup]
# Files and directories to backup. Multiple items can be separated using a comma (','). It is possible to use wildcards (i.e. '*' to match multiple characters and '~' for the user's home directory). # Files and directories to backup. Multiple items can be separated using a comma (','). It is possible to use wildcards (i.e. '*' to match multiple characters and '~' for the user's home directory).
inputs=/home/my_home,/etc inputs=/home/user
# Output directory. # Output directory.
backup_dir=/media/Backup backup_dir=/media/Backup

View File

@ -14,6 +14,7 @@ Classes:
# Import libraries # Import libraries
import sys import sys
import os import os
from typing import Callable, List, Optional, ParamSpec, TypeVar, Union
import warnings import warnings
from functools import wraps from functools import wraps
from shutil import rmtree, which from shutil import rmtree, which
@ -26,7 +27,7 @@ from timeit import default_timer
from subprocess import Popen, PIPE, STDOUT from subprocess import Popen, PIPE, STDOUT
from datetime import datetime from datetime import datetime
from tempfile import mkstemp from tempfile import mkstemp
from getpass import getpass from getpass import GetPassWarning, getpass
from glob import glob from glob import glob
from dotenv import load_dotenv from dotenv import load_dotenv
@ -67,29 +68,29 @@ if journal:
j_handler.setFormatter(j_format) j_handler.setFormatter(j_format)
logger.addHandler(j_handler) logger.addHandler(j_handler)
P = ParamSpec('P')
R = TypeVar('R')
def timing(_logger):
def timing(func: Callable[P, R]) -> Callable[P, R]:
"""Decorator to measure execution time of a function """Decorator to measure execution time of a function
Parameters: Parameters:
_logger: Logger object func: Function to decorate
""" """
def decorator_timing(func):
@wraps(func) @wraps(func)
def wrapper_timing(*args, **kwargs): def wrapper(*args: P.args, **kwargs: P.kwargs) -> R:
start = default_timer() start = default_timer()
value = func(*args, **kwargs) value = func(*args, **kwargs)
end = default_timer() end = default_timer()
_logger.info(f'Elapsed time: {end - start:.3f} seconds') logger.info('Elapsed time: %.3f seconds', end - start)
return value return value
return wrapper_timing return wrapper
return decorator_timing
class MyFormatter(argparse.RawTextHelpFormatter, argparse.ArgumentDefaultsHelpFormatter): class MyFormatter(argparse.RawTextHelpFormatter, argparse.ArgumentDefaultsHelpFormatter):
@ -134,8 +135,9 @@ class Backup:
Perform the backup Perform the backup
""" """
def __init__(self, inputs, output, exclude, keep, options, ssh_host=None, ssh_user=None, def __init__(self, inputs: List[str], output: str, exclude: List[str], keep: int, options: str,
ssh_keyfile=None, remote_sudo=False, remove_before=False, verbose=False): ssh_host: Optional[str] = None, ssh_user: Optional[str] = None, ssh_keyfile: Optional[str] = None,
remote_sudo: bool = False, remove_before: bool = False, verbose: bool = False) -> None:
self.inputs = inputs self.inputs = inputs
self.output = output self.output = output
self.exclude = exclude self.exclude = exclude
@ -152,12 +154,12 @@ class Backup:
self._output_dir = '' self._output_dir = ''
self._inputs_path = '' self._inputs_path = ''
self._exclude_path = '' self._exclude_path = ''
self._remote = None self._remote = False
self._ssh = None self._ssh = None
self._password_auth = False self._password_auth = False
self._password = None self._password = None
def check_params(self, homedir=''): def check_params(self, homedir: str = '') -> int:
"""Check if parameters for the backup are valid""" """Check if parameters for the backup are valid"""
if self.inputs is None or len(self.inputs) == 0: if self.inputs is None or len(self.inputs) == 0:
@ -201,7 +203,7 @@ class Backup:
return 0 return 0
# Function to create the actual backup directory # Function to create the actual backup directory
def define_backup_dir(self): def define_backup_dir(self) -> None:
"""Define the actual backup dir""" """Define the actual backup dir"""
now = datetime.now().strftime('%Y-%m-%d %H:%M:%S') now = datetime.now().strftime('%Y-%m-%d %H:%M:%S')
self._output_dir = f'{self.output}/simple_backup/{now}' self._output_dir = f'{self.output}/simple_backup/{now}'
@ -209,10 +211,12 @@ class Backup:
if self._remote: if self._remote:
self._server = f'{self.ssh_user}@{self.ssh_host}:' self._server = f'{self.ssh_user}@{self.ssh_host}:'
def remove_old_backups(self): def remove_old_backups(self) -> None:
"""Remove old backups if there are more than indicated by 'keep'""" """Remove old backups if there are more than indicated by 'keep'"""
if self._remote: if self._remote:
assert self._ssh is not None
_, stdout, _ = self._ssh.exec_command(f'ls {self.output}/simple_backup') _, stdout, _ = self._ssh.exec_command(f'ls {self.output}/simple_backup')
dirs = stdout.read().decode('utf-8').strip().split('\n') dirs = stdout.read().decode('utf-8').strip().split('\n')
@ -229,6 +233,9 @@ class Backup:
dirs.sort() dirs.sort()
for i in range(n_backup - self.keep): for i in range(n_backup - self.keep):
if self.remote_sudo:
_, _, stderr = self._ssh.exec_command(f'sudo rm -r "{self.output}/simple_backup/{dirs[i]}"')
else:
_, _, stderr = self._ssh.exec_command(f'rm -r "{self.output}/simple_backup/{dirs[i]}"') _, _, stderr = self._ssh.exec_command(f'rm -r "{self.output}/simple_backup/{dirs[i]}"')
err = stderr.read().decode('utf-8').strip().split('\n')[0] err = stderr.read().decode('utf-8').strip().split('\n')[0]
@ -269,7 +276,7 @@ class Backup:
elif count > 1: elif count > 1:
logger.info('Removed %d backups', count) logger.info('Removed %d backups', count)
def find_last_backup(self): def find_last_backup(self) -> None:
"""Get path of last backup (from last_backup symlink) for rsync --link-dest""" """Get path of last backup (from last_backup symlink) for rsync --link-dest"""
if self._remote: if self._remote:
@ -295,7 +302,7 @@ class Backup:
logger.critical('Cannot access the backup directory. Permission denied') logger.critical('Cannot access the backup directory. Permission denied')
try: try:
notify('Backup failed (check log for details)') _notify('Backup failed (check log for details)')
except NameError: except NameError:
pass pass
@ -306,17 +313,18 @@ class Backup:
except IndexError: except IndexError:
logger.info('No previous backups available') logger.info('No previous backups available')
def _ssh_connect(self, homedir=''): def _ssh_connect(self, homedir: str = '') -> paramiko.client.SSHClient:
try: try:
ssh = paramiko.SSHClient() ssh = paramiko.SSHClient()
except NameError: except NameError:
logger.error('Install paramiko for ssh support') logger.error('Install paramiko for ssh support')
return None return None
try: try:
ssh.load_host_keys(filename=f'{homedir}/.ssh/known_hosts') ssh.load_host_keys(filename=f'{homedir}/.ssh/known_hosts')
except FileNotFoundError: except FileNotFoundError:
logger.warning(f'Cannot find file {homedir}/.ssh/known_hosts') logger.warning('Cannot find file %s/.ssh/known_hosts', homedir)
ssh.set_missing_host_key_policy(paramiko.WarningPolicy()) ssh.set_missing_host_key_policy(paramiko.WarningPolicy())
@ -355,6 +363,11 @@ class Backup:
os.environ['SSHPASS'] = password os.environ['SSHPASS'] = password
return ssh return ssh
except GetPassWarning as e:
logger.critical('Unable to get password')
logger.critical(e)
return None
except paramiko.SSHException as e: except paramiko.SSHException as e:
logger.critical('Can\'t connect to the server.') logger.critical('Can\'t connect to the server.')
logger.critical(e) logger.critical(e)
@ -409,7 +422,7 @@ class Backup:
return ssh return ssh
def _returncode_log(self, returncode): def _returncode_log(self, returncode: int) -> None:
match returncode: match returncode:
case 2: case 2:
logger.error('Rsync error (return code 2) - Protocol incompatibility') logger.error('Rsync error (return code 2) - Protocol incompatibility')
@ -439,8 +452,8 @@ class Backup:
logger.error('Rsync error (return code %d) - Check rsync(1) for details', returncode) logger.error('Rsync error (return code %d) - Check rsync(1) for details', returncode)
# Function to read configuration file # Function to read configuration file
@timing(logger) @timing
def run(self): def run(self) -> int:
"""Perform the backup""" """Perform the backup"""
logger.info('Starting backup...') logger.info('Starting backup...')
@ -469,7 +482,7 @@ class Backup:
logger.info('No existing files or directories specified for backup. Nothing to do') logger.info('No existing files or directories specified for backup. Nothing to do')
try: try:
notify('Backup finished. No files copied') _notify('Backup finished. No files copied')
except NameError: except NameError:
pass pass
@ -510,6 +523,7 @@ class Backup:
args = shlex.split(rsync) args = shlex.split(rsync)
with Popen(args, stdin=PIPE, stdout=PIPE, stderr=STDOUT, shell=False) as p: with Popen(args, stdin=PIPE, stdout=PIPE, stderr=STDOUT, shell=False) as p:
output: Union[bytes, List[str]]
output, _ = p.communicate() output, _ = p.communicate()
try: try:
@ -543,6 +557,8 @@ class Backup:
os.remove(self._exclude_path) os.remove(self._exclude_path)
if self._remote: if self._remote:
assert self._ssh is not None
_, stdout, _ = self._ssh.exec_command(f'if [ -d "{self._output_dir}" ]; then echo "ok"; fi') _, stdout, _ = self._ssh.exec_command(f'if [ -d "{self._output_dir}" ]; then echo "ok"; fi')
output = stdout.read().decode('utf-8').strip() output = stdout.read().decode('utf-8').strip()
@ -795,6 +811,7 @@ def simple_backup():
config_args = _read_config(args.config, user) config_args = _read_config(args.config, user)
except (configparser.NoSectionError, configparser.NoOptionError): except (configparser.NoSectionError, configparser.NoOptionError):
logger.critical('Bad configuration file') logger.critical('Bad configuration file')
return 6 return 6
inputs = args.inputs if args.inputs is not None else config_args['inputs'] inputs = args.inputs if args.inputs is not None else config_args['inputs']