I installed rclone on root account and rclone works correct and copy backup files to another server after DA finish do backup but I know that I shouldn’t do this on root account so I need advices or instructions how should I install rclone correctly. Should I create specific user for rclone, should this user sudo privileges etc.?
welcome to the forum,
how did you install, using https://rclone.org/install/#script-installation ?
all that should not be required.
any non-root user should be able to run rclone.
On root account i added repo epel-release then I installed rclone.
You do not say what OS you are using.
Nobody can see your screen and guess details.
The best approach is to follow official installation procedure.
I have Alma Linux 9. Why in official documentation is not include instruction to installation rclone via repo epel-release?
I am looking for any information/advices where rclone should or shouldn’t run as root privileges. I know that rclone is doesn’t run on public port so that vector attack is not exist on this way. So tell me what are you opinion about this case?
not reasonable for rclone volunteers, to maintain documentation of every distribution and every version of every distribution.
the rclone documention is open-source at github. you are welcome to edit the docs yourself.
post output of rclone version
imo, that is not really a rclone question.
if you want to run rclone as root, then do that.
if you want to run rclone as non--root user, then do that.
I know that I can be able to run rclone as a root or another user but I want know which way is better in security context.
that depends on what you are trying to accomplish.
in most cases, run as non-root.
same would apply to any other executable you run.
perhaps you should learn about basic linux security 101.
the internet is full of guides...
There is no better way. It depends on what exactly you want.
I use Directadmin, where the administrator account makes backup of all users and saving tar files in the srv/backups path. Currently I use rclone which work with root privileges because it is more comfortable for me, that's my case.