{"id":2182,"date":"2013-10-24T11:31:40","date_gmt":"2013-10-24T03:31:40","guid":{"rendered":"http:\/\/kuki.idv.tw\/?p=2182"},"modified":"2013-10-24T11:31:40","modified_gmt":"2013-10-24T03:31:40","slug":"debian-rsyncd-%e5%ae%89%e8%a3%9d","status":"publish","type":"post","link":"https:\/\/www.kuki.idv.tw\/?p=2182","title":{"rendered":"debian rsyncd \u5b89\u88dd"},"content":{"rendered":"

\u53c3\u8003\u8cc7\u6599<\/p>\n

http:\/\/www.linuxawy.org\/node\/12<\/a><\/p>\n

\n
\n

rsync is a great tool for synchronizing 2 directories (or files) either one of them is remote and the other is local, or 2 local folders (it doesn’t support synchronizing 2 remote servers, yet). the power of rsync comes from that it doesn’t transfer anything unless it detects that it’s changes since last run. moreover, it transfer the changes in files only (unless you specified otherwise), and it can even compress files before sending which makes it ideal for continuous backups and mirroring.<\/p>\n

to use rsync, you have 2 options. either to start rsync daemon which handles the connections, or use it through ssh tunnel. each way has its positives and negatives. rsync daemon is indeed faster in intiating connections cause it doesn’t exchange keys or encrypt data, which makes its load on the server is less too. the overhead of keeping the daemon alive is so small that you can simply ignore. the ssh tunnel doesn’t require a special configuration on the server side, but you must have ssh access to the server, which means that you can’t grant anonymouse access to your data. the main positive of ssh tunnel is that data is sent through the secure tunnel and can’t be sniffed.<\/p>\n

    \n
  1. to connect through ssh tunnel: first, you’ll need to install rsync:
    \napt-get install rsync<\/code>
    \nthen you are ready, just issue the command directly
    \nrsync -avz -e ssh remoteuser@remotehost:\/remote\/dir \/this\/dir\/
    \n<\/code>remember to check the permissions for ssh user on the remote server. (the remote server must have rsync installed too).<\/li>\n
  2. to connect through rsync server:\n
      \n
    1. install rsync:
      \napt-get install rsync<\/code><\/li>\n
    2. create “\/etc\/rsyncd.conf<\/code>” and put the following in it:
      \nmax connections = 1
      \nlog file = \/var\/log\/rsync.log
      \ntimeout = 300
      \n[cache]
      \ncomment = Cache of Mongrels
      \npath = \/usr\/local\/cache
      \nread only = no
      \nlist = yes
      \nuid = nobody
      \ngid = nogroup
      \n#auth users = mongrel
      \nlist = yes
      \nhosts allow = 127.0.0.0\/8 192.168.0.0\/24
      \n#secrets file = \/etc\/rsyncd.secrets<\/code><\/p>\n

      note that the first few lines are global (for all modules) and the other one is specital for the public module.
      \ncomment the last two lines to grant anonymouse access, note that you can still limit by ip\/netmask<\/li>\n

    3. create ”\/etc\/rsyncd.secret”, and put the usernames and passwords for the ones who can access rsync, in the form of username:password , note that passwords are saved here as clear text. so don’t forget to chmod it to 400 to keep the passwords somehow safe<\/li>\n
    4. make rsync to start as daemon:
      \nedit ”\/etc\/inetd.conf” and put the following line in the end:
      \nrsync stream tcp nowait root \/usr\/bin\/rsync rsync –daemon<\/li>\n
    5. voila, you are done, test your settings by typing:
      \nrsync rsync:\/\/your_ip_or_domain_name\/<\/code>
      \nthis should list the modules
      \nrsync rsync:\/\/your_ip_or_domain_name\/public<\/code>
      \nthis shuold list the files in your ‘public’ modules
      \nrsync -avz rsync:\/\/your_ip_or_domain_name\/public<\/code>
      \nsynchronozing should start the transfer now.
      \ndon’t forget to check the rsync man page to check what flags do you really need.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

      \u53c3\u8003\u8cc7\u6599 http:\/\/www.linuxawy.org\/node\/12 rsync is a great t … \u95b1\u8b80\u5168\u6587\u3008debian rsyncd \u5b89\u88dd\u3009<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.kuki.idv.tw\/index.php?rest_route=\/wp\/v2\/posts\/2182"}],"collection":[{"href":"https:\/\/www.kuki.idv.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kuki.idv.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kuki.idv.tw\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kuki.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2182"}],"version-history":[{"count":2,"href":"https:\/\/www.kuki.idv.tw\/index.php?rest_route=\/wp\/v2\/posts\/2182\/revisions"}],"predecessor-version":[{"id":2184,"href":"https:\/\/www.kuki.idv.tw\/index.php?rest_route=\/wp\/v2\/posts\/2182\/revisions\/2184"}],"wp:attachment":[{"href":"https:\/\/www.kuki.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2182"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kuki.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2182"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kuki.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2182"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}