Debian 9 – rsync backup fails with permission denied across mount points – Fix & Prevention

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Backup jobs fail partially and recovery points become unreliable.

Environment & Reproduction

Common after mount option changes or tightened file permissions.

Root Cause Analysis

Backup context lacks required access for protected paths or devices.

Quick Triage

Identify first denied path and associated ownership/mode metadata.

Step-by-Step Diagnosis

Review rsync logs, ACLs, and mount options for blocked reads.

Solution – Primary Fix

Adjust execution identity, ACLs, and exclusion list to valid scope.

Solution – Alternative Approaches

Run snapshot-based backups from privileged helper context.

Verification & Acceptance Criteria

Backups complete with expected file counts and no denied paths.

Rollback Plan

Revert policy changes if they violate least-privilege controls.

Prevention & Hardening

Continuously test restore paths and permission assumptions.

Related Errors & Cross-Refs

Related to stale NFS handles and xattr preservation failures.

Related tutorial: View the step-by-step tutorial for debian-9.

View all debian-9 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

rsync manual, ACL docs, and Debian backup operations guidance.