rsnapshot 'permission denied' as root (probable cause: encfs

[javeree]

I run rsnapshot as backup tool. To that end, I have a command in /etc/cron.hourly/rsnapshot:

[javeree]

well, it doesn't have to do with the type of file I highlighted. I can move that file just fine.

[Hu]

What provides that filesystem? The directory .snapshots is used by some network attached storage devices as a way of exposing their archives of old views of the filesystem. This can be handy to let users recover accidentally deleted content without contacting IT. When the directory is used in that way, it is very magical and cannot be modified according to normal rules.

[javeree]

good question Hu, and to the point.

The directory is in fact mounted from encfs, with the encfs sitting on top of ext4. With this setup, IN THEORY, I should have no problem moving something. However, I meanwhile found out that I set up encfs in a way that is not optimal for rsnapshot.

I had created encfs with 'paranoid' settings. This has two disadvantages for backup:
1. The filenames with this setting tend to be much longer than the original, resulting in a 'path too long' problem for some directories. (This disadvantage is unrelated to the above problem, but was one of the reasons why I re-read the man page of encfs).
2. The encoding of the filename (and possibly the file itself) depends on the full path. Therefore, a move of a directory results in re-encoding at least the filenames of all files under that subtree. I can see that this results in a highly inefficient 'mv' command (up to the point of on 'mv' possibly requiring re-encoding 600Gb data). I don't see how it would result in a 'permission denied'

Anyway, I started again, created a new encfs system with standard protection scheme. This is running at the moment, and at least for the first PC I back up rsnaphot did not complain anymore when trying to rotate the sync.

I presume that the 'permission denied' I had in a subtle way was also related to this paranoid encryption.

Thanks for thinking along

LESSON LEARNED:
DON'T USE RSNAPSHOT WITH ENCFS IN PARANOID MODE:
DO NOT USE 'External IV Chaining'
SET 'Filename Encoding=Stream' TO AVOID 'Path too long'