The “Low-Privilege” Backup Philosophy
Security is about limiting your attack surface. When I build a backup pipeline, I implement systemd socket-activation to ensure the process runs with the lowest privilege possible. For instance, my root rsync cron jobs run to a secure local destination server over specific ports, ensuring the data is moved efficiently while minimizing exposure. If your backup service has root access to everything, it is a liability. My pipelines run securely, quietly, and effectively. If a service is compromised, a low-privilege backup pipeline ensures the damage is contained.