<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Backups on System Overlord</title><link>https://systemoverlord.com/tags/backups.html</link><description>Recent content in Backups on System Overlord</description><generator>Hugo</generator><language>en-us</language><managingEditor>david@systemoverlord.com (David Tomaschik)</managingEditor><webMaster>david@systemoverlord.com (David Tomaschik)</webMaster><lastBuildDate>Mon, 23 Sep 2019 00:00:00 +0000</lastBuildDate><atom:link href="https://systemoverlord.com/tags/backups/index.xml" rel="self" type="application/rss+xml"/><item><title>Backing up to Google Cloud Storage with Duplicity and Service Accounts</title><link>https://systemoverlord.com/2019/09/23/backing-up-to-google-cloud-storage-with-duplicity-and-service-accounts.html</link><pubDate>Mon, 23 Sep 2019 00:00:00 +0000</pubDate><author>david@systemoverlord.com (David Tomaschik)</author><guid>https://systemoverlord.com/2019/09/23/backing-up-to-google-cloud-storage-with-duplicity-and-service-accounts.html</guid><description>&lt;p&gt;I wanted to use &lt;a href="http://duplicity.nongnu.org/"&gt;duplicity&lt;/a&gt; to backup to &lt;a href="https://cloud.google.com/storage/"&gt;Google
Cloud Storage&lt;/a&gt;. I looked into it briefly and
found that the &lt;a href="http://boto.cloudhackers.com/en/latest/"&gt;boto&lt;/a&gt; library,
originally for AWS, also supports GCS, but only using authorization tokens. I&amp;rsquo;d
rather use a service account, for which authorization tokens are not available.&lt;/p&gt;
&lt;p&gt;I looked into the options and the best information I could find was a &lt;a href="https://medium.com/google-cloud/how-to-make-ubuntu-backups-using-duplicity-and-google-cloud-storage-849edcc4196e"&gt;Medium
post&lt;/a&gt;,
but it also describes using authorization tokens and creating a separate
GMail/Google Apps account for the access. I&amp;rsquo;d really prefer to go with a
service account to avoid having to sign up another account, and to be able to
use more granular ACLs for the service account.&lt;/p&gt;</description></item></channel></rss>