I’m sorry for the delay.
What do you mean with “only backs up things that are allowed by strict confinement”? This script only wraps restic tool to backup and restic (also available as snap, so I don’t need to build from source) need access to any file the user is backing up. You can backup user’s home or you can backup your system, depending on the user’s need. This script help you build configuration files for one or more repositories using restic, and also contains “exclusion templates” for home and system backup. AFAIK, restic snap needs classic confinement because of its nature. I don’t know if this script could work without classic confinement and that’s what I’m trying to figure out but no matter what I do, it just wont work. I apologize if I’m missing something obvious here, I don’t really have a lot of knowledge about this.