RansomBackup on Linux

Transparent Restic-based scripts. The repository password stays on the computer and BACKUP and RESTORE tokens are not interchangeable.

sudo apt update
sudo apt install restic curl python3 coreutils

1. Install

tar -xzf RansomBackupFREE-Linux-0.7.1.tar.gz
cd ransombackup-linux
chmod +x install.sh backup.sh restore.sh
RB_LANG=en ./install.sh

The installer asks for a one-time code, email, source folder and private password. Keep that password offline.

2. Back up

./backup.sh

The installer initializes the repository. Later runs upload new deduplicated blocks and update the snapshot catalogue.

3. Token example

export RESTIC_REPOSITORY="rest:https://free.ransombackup.com/REPOSITORY_ID/"
export RESTIC_REST_USERNAME="rb_USERNAME"
export RESTIC_REST_PASSWORD="BACKUP_TOKEN"
export RESTIC_PASSWORD_FILE="$HOME/.config/ransombackup/repository-password"

restic backup /srv/data
restic snapshots
# A data-pack restore with BACKUP_TOKEN must be denied.

The daily token cannot issue DELETE or download /data/*. An approved request supplies a temporary RESTORE token to:

./restore.sh /restore/parent

The script creates a new directory and verifies restored data.

4. Schedule and verify

sudo install -m 0644 ransombackup-backup.service /etc/systemd/system/
sudo install -m 0644 ransombackup-backup.timer /etc/systemd/system/
sudo systemctl daemon-reload
sudo systemctl enable --now ransombackup-backup.timer
systemctl list-timers ransombackup-backup.timer