PodHeitor SFTP Backup Plugin for Bacula
Heitor Faria
Hello All,
I just developed a Bacula SFTP/SSH plugin. Send me a DM if you're interested.
Agentless SFTP/SSH backup for Bacula Community Edition — zero deployment on remote hosts
Back up files from any server, NAS, switch, router, or cloud service accessible via SFTP/SSH.
No Bacula agent required on the remote side.
Why SFTP instead of mountpoints
• No stale mounts — each backup opens a fresh connection
• No kernel dependencies — runs fully in userspace (Paramiko)
• No credentials in /etc/fstab — stored securely in Bacula config
• No full filesystem exposure — access limited to defined paths
• Simple firewalling — single TCP port (22)
• No hanging processes — per-operation timeouts
• Works with network devices — switches, routers, firewalls
• Native for cloud SFTP — no mount layer needed
Features
• Agentless — SFTP/SSH only, nothing installed on remote hosts
• Full / Incremental / Differential backups via mtime
• Include/Exclude filters — glob patterns (*.pdf, *.tmp)
• Metadata preserved — permissions, UID/GID, timestamps, symlinks
• Authentication — SSH key (Ed25519, RSA, ECDSA), agent, or password
• Host key verification — MITM protection via known_hosts
• File listing — estimate, catalog queries, restore tree browsing
• Multiple sources — multiple SFTP endpoints in a single FileSet
• Compression & encryption — LZ4/GZIP + AES (native Bacula)
• Metaplugin architecture — aligned with Bacula ecosystem