SSH_FILTER_BTRBK(1) - man page online | user commands

Ssh command filter script for btrbk.

ssh_filter_btrbk(1)                                                           ssh_filter_btrbk(1)

NAME - ssh command filter script for btrbk

SYNOPSIS [-s|--source] [-t|--target] [-d|--delete] [-i|--info] [-p|--restrict-path <path>] [-l|--log] [--sudo]

DESCRIPTION restricts SSH commands to btrfs commands used by btrbk. It examines the SSH_ORIGINAL_COMMAND environment variable (set by sshd) and executes it only if it matches commands used by btrbk. The accepted commands are specified by the "--source", "--target", "--delete" and "--info" options. Note that the following btrfs commands are always allowed: "btrfs subvolume show", "btrfs subvolume list". Example line in /root/.ssh/authorized_keys on a backup target host: command=" --target --delete --restrict-path /mnt/btr_backup" ssh-rsa A ↲ AAAB3NzaC1...hwumXFRQBL


-s, --source Allow commands for backup source: "btrfs subvolume snapshot", "btrfs send". Equivalent to "--snapshot --send". -t, --target Allow commands for backup target: "btrfs receive". Equivalent to "--receive". -d, --delete Allow commands for subvolume deletion: "btrfs subvolume delete". This is used for backup source if snapshot_preserve_daily is not set to “all”, and for backup targets if target_preserve_daily is not set to “all”. -i, --info Allow informative commands: "btrfs subvolume find-new", "btrfs filesystem usage". This is used by btrbk info and diff commands. --snapshot Allow btrfs snapshot command: "btrfs subvolume snapshot". --send Allow btrfs send command: "btrfs send". --receive Allow btrfs receive command: "btrfs receive". -p, --restrict-path <path> Restrict btrfs commands to <path>. -l, --log Log ACCEPT and REJECT messages to the system log. --sudo Call SSH_ORIGINAL_COMMAND using sudo.


Please refer to the btrbk project page for further details.


btrbk(1), btrbk.conf(5), btrfs(1)


Axel Burri <>
btrbk v0.22.2 2016-02-02 ssh_filter_btrbk(1)
This manual Reference Other manuals
ssh_filter_btrbk(1) referred by
refer to btrbk(1) | btrbk.conf(5)