Merge pull request #17 from buildplan/improve_restore

Improved restore safety check

Author: buildplan

restic-backup.sh

@@ -1,28 +1,28 @@
 #!/usr/bin/env bash
 
 # =================================================================
-#         Restic Backup Script v0.31 - 2025.09.27
+#         Restic Backup Script v0.32 - 2025.09.27
 # =================================================================
 
 set -euo pipefail
 umask 077
 
 # --- Script Constants ---
-SCRIPT_VERSION="0.31"
+SCRIPT_VERSION="0.32"
 SCRIPT_DIR=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" &>/dev/null && pwd)
 CONFIG_FILE="${SCRIPT_DIR}/restic-backup.conf"
 LOCK_FILE="/tmp/restic-backup.lock"
 HOSTNAME=$(hostname -s)
 
 # --- Color Palette ---
 if [ -t 1 ]; then
-    C_RESET='\e[0m'
-    C_BOLD='\e[1m'
-    C_DIM='\e[2m'
-    C_RED='\e[0;31m'
-    C_GREEN='\e[0;32m'
-    C_YELLOW='\e[0;33m'
-    C_CYAN='\e[0;36m'
+    C_RESET=$'\e[0m'
+    C_BOLD=$'\e[1m'
+    C_DIM=$'\e[2m'
+    C_RED=$'\e[0;31m'
+    C_GREEN=$'\e[0;32m'
+    C_YELLOW=$'\e[0;33m'
+    C_CYAN=$'\e[0;36m'
 else
     C_RESET=''
     C_BOLD=''
@@ -1009,6 +1009,13 @@ run_restore() {
         echo -e "${C_RED}Error: Must be a non-empty, absolute path. Aborting.${C_RESET}" >&2
         return 1
     fi
+    if [[ "$restore_dest" == "/" || "$restore_dest" == "/etc" || "$restore_dest" == "/usr" ]]; then
+        read -p "${C_RED}WARNING: You are restoring to a critical system directory ('$restore_dest')${C_RESET}. This is highly unusual and could damage your system. Are you absolutely sure? (y/n): " confirm_dangerous_restore
+        if [[ "${confirm_dangerous_restore,,}" != "y" ]]; then
+            echo "Restore cancelled."
+            return 1
+        fi
+    fi
     local include_paths=()
     read -p "Optional: Enter specific file(s) to restore, separated by spaces (leave blank for full restore): " -a include_paths
     local restic_cmd=(restic restore "$snapshot_id" --target "$restore_dest" --verbose)

restic-backup.sh.sha256

@@ -1 +1 @@
-9a870262d8c680ea1afaf2bef175088f75c599de7fa06f39974f22d6e89e4c8d  restic-backup.sh
+0d5c7c7bbd9a39cb27588b6b7f6bf33de8a6167f2c7482d3dff20d3710b5b2b1  restic-backup.sh