restic: restore away from a directory another account owns

Root writes a restore beside the live data. In a directory another account controls, such as the agent's home (hq ADR 0266), that account could put a symbolic link where root writes and have root write anywhere; such a restore now goes to the module's state.
2026-10-08 20:41:05 +02:00
parent 01c5c44249
commit 499efa4e44
3 changed files with 80 additions and 2 deletions
@@ -141,7 +141,7 @@ func tools(b *Backups) []stdio.Tool {
 				}
 				return map[string]any{"started": started, "follow": Seat + ".backed-up"}, nil
 			}),
-		verb("restore", "Restore one module's data from a restore point BESIDE the live data, never over it: each directory as <path>.restored-<date>. Swapping it in is a person's act.",
+		verb("restore", "Restore one module's data from a restore point BESIDE the live data, never over it: each directory as <path>.restored-<date>, or in this module's state when a directory on the way belongs to another account. Swapping it in is a person's act.",
 			map[string]any{
 				"module":   str("the module"),
 				"snapshot": str("the restore point (the newest when omitted)"),