[SAC] [OSGeo] #2454: rsync issue on staging.grass.osgeo.org
OSGeo
trac_osgeo at osgeo.org
Tue May 5 16:41:41 PDT 2020
#2454: rsync issue on staging.grass.osgeo.org
---------------------------+------------------------
Reporter: neteler | Owner: sac@…
Type: defect | Status: new
Priority: normal | Milestone: Unplanned
Component: Systems Admin | Resolution:
Keywords: rsync |
---------------------------+------------------------
Comment (by robe):
neteler,
Where are you mirroring too?
The way I rsync from one lxd host to say another host is this way.
Since download.osgeo.org (aka hop.osgeo7.osgeo.org) is the proxy you'll
need to copy keys there as well
Step 1
# in server you are using to mirror
#generate a key for server you want to mirror to
{{{
ssh-keygen -t rsa #accept the defaults
#copy the public key ~/.ssh/id_rsa.pub add it to your hop.osgeo7.osgeo.org
authorized_keys
}}
Step 2
#log into ssh neteler at hop.osgeo7.osgeo.org
{{
echo ssh-rsa --contents-public-key-here- grass at osgeo7 >>
~/.ssh/authorized_keys
}}
Step 3
#in grass container in the account you will be using for rsync
{{
echo ssh-rsa --contents-public-key-here- grass at osgeo7 >>
~/.ssh/authorized_keys
}}
Step 4 in the server you want to use for mirror
Add an entry to your ssh config
{{{
**create in server you want to mirror content ~/.ssh/config file that has
these lines**
Host grass
ProxyCommand ssh neteler at hop.osgeo7.osgeo.org -W %h:%p
}}}
Then to rsync you can do
{{{
#test inspect
rsync -avz --dry-run \
-e ssh root at grass:/var/www/grass-website \
/backups/grass-website
#real run
rsync -avz \
-e ssh root at grass:/var/www/grass-website \
/backups/grass-website
}}}
Other option is I could open a port in osgeo7 and allow grass to be
directly reachable by that port.
If we do that I would like to lock down grass so it's only accessible via
keys and block off password access.
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2454#comment:2>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.
More information about the Sac
mailing list