Use case
I'm the only user. I have an ubuntu NAS with fulldisk encryption, and I'm trying to back up my own Windows machines to that. I want to have a USB stick that I can boot from to clone the Windows drives to the NAS, but I don't want the whole backup share to be readable by anyone who may come across that USB stick with the share credentials on it. Can you think of a better solution?
What I was thinking could work
I've been searching but unable to find what I need, everything I have found is about simply enabling write access to a share, which is not what I want to do.
I would like to create a samba share on my ubuntu machine where users have only write permissions. I would like them to be able to create files but not be able to read them, nor list folders inside the share.
This is for the purpose of backup. I want to have a bootable usb drive that I can boot from that will take disk images of the drives in that machine and save to the samba share, but I don't want that usb to have access to all the images.
I'm happy if it just fails if a file already exists, I will ensure the filenames do not conflict by using drive UUIDs/time.
ssh
to allow you to connect to the NAS, using a public key. It should be possible to configure it to only allow you to deliver files.