DietPi-Software | Restic: is a fast and secure backup program

[goldfix]

Added new backup software:

• Restic: is a fast and secure backup program

[MichaIng]

Thanks for your contribution.

Generally we do not implement software options which are nothing more than an apt install package. We do have a bunch of software options from old times, but actually we are thinking about removing them. There is not much point in cloning the Debian package list and provide a simple wrapper for it. Users should know that DietPi is Debian, that hence the whole Debian package repository is available and how to install such a package. @Joulinar

[goldfix]

Up to you to decide. :)
The only advantage is the final force update (the restic version in debian repository is very old).

Thanks

[MichaIng]

The only advantage is the final force update (the restic version in debian repository is very old).

Then it would be probably better to install it from a different source in the first place. When mixing APT packages with internal auto-updates it is possible that an APT upgrade downgrades your software. Also of course package integrity checks fails etc.

How are these internal updates done? A check + in case update on every restic call? An additional update service, timer or cron job?
EDIT: Ah, it's a one time action: https://github.com/restic/restic/blob/master/cmd/restic/cmd_self_update.go
This makes the above argument stronger, since users then would need to run this command manually every time the package is upgraded or reinstalled. And when using a different source (like downloading the official binaries: https://github.com/restic/restic/releases), the natural downside is that one might miss critical security patches when not regularly checking for updates.

[MichaIng]

@StephanStS @Joulinar
Let's have this discussion here instead of in docs: Adding this would basically contradict previous decisions to not add software which can be installed just via APT. Consequently we would then open the can of worms of cloning the ~60.000 APT packages of the Debian repo as APT wrapper into dietpi-software, which does not make any sense.

But the other thing that is done here is updating the binary from official compiled binaries: self-update just downloads the bz2-compressed binary and replace /usr/bin/restic with it. As this breaks the integrity of the package, I would then suggest to download the official binary from GitHub directly instead of installing the package. The question is whether upstream binaries are so much better to justify the implementation as alternative to APT. Another example where we did this was Rclone.

[MichaIng]

Install test on all platforms: https://github.com/MichaIng/DietPi/actions/runs/4901851720

I verified that the arm binary is ARMv6-compatible.

[MichaIng]

Looks good, merging it now.

[lima1]

@MichaIng , I had a restic binary in /usr/local/bin (not sure it's relevant, but mention it in case it is). After installing it with dietpi-software, the binary was updated, but was missing the executable flag. After chmod +x, it worked.

[MichaIng]

Ayy, many thanks for reporting. Fixed for next release: 6ba1d61
I'll probably push a life patch for this.