BorgBackup 2 has no server-side append-only anymore

Jun 7, 2025 - 20:15
 0  0
BorgBackup 2 has no server-side append-only anymore

Some features like append-only repositories rely on a server-side component that enforces them (because that shall only be controllable server-side, not client-side).

So, that can only work, if such a server-side component exists, which is the case for borg 1.x ssh: repositories (but not for borg 1.x non-ssh: repositories).

For borg2, we currently have:

  • fs repos
  • sftp: repos
  • rclone: repos (enabling many different cloud providers)
  • s3/b3: repos
  • ssh: repos using client/server rpc code similar as in borg 1.x

So, only for the last method we have a borg server-side process that could enforce some features, but not for any of the other repo types.

For append-only the current idea is that this should not be done within borg, but solved by a missing repo object delete permission enforced by the storage.

borg create could then use credentials that miss permission to delete, while borg compact would use credentials that include permission to delete.

What's Your Reaction?

Like Like 0
Dislike Dislike 0
Love Love 0
Funny Funny 0
Angry Angry 0
Sad Sad 0
Wow Wow 0