cayce/cayce-ops
1
0
Fork 0
Code Issues 1 Pull Requests 25 Actions 5 Packages Projects Releases 2 Wiki Activity

Tanda B punto 2: usuario backup-pull de solo lectura #14

Open
cayce wants to merge 0 commits from backup-pull-user into main
pull from: backup-pull-user
merge into: :main
Conversation 0 Commits - Files Changed -
cayce commented 2026-10-28 21:01:44 +00:00
Owner
Copy Link
Copy Source

Usuario sin sudo + clave SSH restringida (restrict + rrsync -ro confinado a /var/backups/cayce). 7 pruebas de verificación documentadas. authorized_keys queda vacío a la espera de la clave real del operador.

Usuario sin sudo + clave SSH restringida (restrict + rrsync -ro confinado a /var/backups/cayce). 7 pruebas de verificación documentadas. authorized_keys queda vacío a la espera de la clave real del operador.
cayce added 1 commit 2026-10-28 21:01:44 +00:00
backup: backup-pull user — read-only rsync-only SSH access (Tanda B, point 2)
ci / lint-test-leaks (pull_request) Canceled after 0s
Details
fc2dcd4fca 
System user backup-pull created on the VPS (no sudo, locked password).
authorized_keys restricted with restrict + forced command
rrsync -ro /var/backups/cayce. Verified with a since-deleted throwaway
key: no shell, no arbitrary commands, no sftp/scp, no reads outside
/var/backups/cayce, no writes; the positive rsync pull works.

authorized_keys is left EMPTY — the operator adds their real key with
the exact line documented in deploy/backup/backup-pull-setup.md.
Some required checks failed
ci / lint-test-leaks (pull_request) Canceled after 0s
Details
This branch is already included in the target branch. There is nothing to merge.
This branch is out-of-date with the base branch
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin backup-pull-user:backup-pull-user
git checkout backup-pull-user
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
pattern cayce (Cayce)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: cayce/cayce-ops#14