[SAC] [OSGeo] #2454: rsync issue on staging.grass.osgeo.org

OSGeo trac_osgeo at osgeo.org
Tue May 5 16:41:41 PDT 2020


#2454: rsync issue on staging.grass.osgeo.org
---------------------------+------------------------
 Reporter:  neteler        |       Owner:  sac@…
     Type:  defect         |      Status:  new
 Priority:  normal         |   Milestone:  Unplanned
Component:  Systems Admin  |  Resolution:
 Keywords:  rsync          |
---------------------------+------------------------

Comment (by robe):

 neteler,

 Where are you mirroring too?

 The way I rsync from one lxd host to say another host is this way.
 Since download.osgeo.org (aka hop.osgeo7.osgeo.org) is the proxy you'll
 need to copy keys there as well

 Step 1

 # in server you are using to mirror
 #generate a key for server you want to mirror to
 {{{
 ssh-keygen -t rsa #accept the defaults
 #copy the public key ~/.ssh/id_rsa.pub add it to your hop.osgeo7.osgeo.org
 authorized_keys

 }}

 Step 2
 #log into ssh neteler at hop.osgeo7.osgeo.org
 {{
 echo ssh-rsa --contents-public-key-here- grass at osgeo7 >>
 ~/.ssh/authorized_keys
 }}

 Step 3
 #in grass container in the account you will be using for rsync
 {{
 echo ssh-rsa --contents-public-key-here- grass at osgeo7 >>
 ~/.ssh/authorized_keys
 }}


 Step 4 in the server you want to use for mirror

 Add an entry to your ssh config

 {{{

 **create in server you want to mirror content ~/.ssh/config file that has
 these lines**
     Host grass
         ProxyCommand ssh neteler at hop.osgeo7.osgeo.org -W %h:%p
 }}}

 Then to rsync you can do

 {{{
 #test inspect
 rsync -avz --dry-run  \
     -e ssh root at grass:/var/www/grass-website \
      /backups/grass-website

 #real run
 rsync -avz  \
     -e ssh root at grass:/var/www/grass-website \
      /backups/grass-website
 }}}


 Other option is I could open a port in osgeo7 and allow grass to be
 directly reachable by that port.
 If we do that I would like to lock down grass so it's only accessible via
 keys and block off password access.

-- 
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2454#comment:2>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.


More information about the Sac mailing list