Please just work - SSH from TrueNAS to Synology for Rsync

[FloRolf]

Hello people.

 

I am seriously sick of this not working. I have no idea what the issue is.

 

So here's what i am trying in general:

Backup Data using Rsync from TrueNAS to Synology. 

Everything could be easy but Synology doesn't support TrueNAS' Modules Rsync tasks so you have to SSH into it. 

 

I followed this: https://www.mattwall.co.uk/2016/04/03/rsync-to-synology-from-freenas.html

and this very similar guide: https://blog.filegarden.net/2021/02/24/backup-truenas-to-synology-via-rsync/

 

but it's not working. TrueNAS still keeps asking for a password when i try to SSH into Synology using the "rsync" account.

Everything is set up exactly like the guides suggest. I even tried it again with a second account but no luck.

What am i doing wrong? Any ideas?

Please, i just want to backup my data

 

[jagdtigger]

Yeah its a real bother, i just given up and used syncthing instead . If you dont want to use that then you could still use MinIO (community package), it support the amazon s3 api so it should work nicely.

[FloRolf]

On 5/7/2021 at 11:15 PM, jagdtigger said:

Yeah its a real bother, i just given up and used syncthing instead . If you dont want to use that then you could still use MinIO (community package), it support the amazon s3 api so it should work nicely.

huh alright, i'll take a look at that. does it require any kind of paid service or something? Thanks!

[jagdtigger]

2 minutes ago, FloRolf said:

huh alright, i'll take a look at that. does it require any kind of paid service or something? Thanks!

AFAIK no, but you need to add synocommunity as a source to the package center. Cant really look at it since im on the beta DSM and the package is not yet ported.

[jagdtigger]

@FloRolf
I think i might have solved it, take a look at the permissions of /var/services/homes* and subfolders.
 

*Symlink to /volumeX/homes....

/EDIT
Rsync task started without error, so far so good.......

Edited May 15, 2021 by jagdtigger

[FloRolf]

1 hour ago, jagdtigger said:

@FloRolf
I think i might have solved it, take a look at the permissions of /var/services/homes* and subfolders.
 

*Symlink to /volumeX/homes....

/EDIT
Rsync task started without error, so far so good.......

Well i got that bit working as far as i can tell.

If i run ls -la it gives me this:

 

which as far as i understood is correct. 

 

 

 

how else would i configure only the "rsync" user having access to the homes / ssh directory? Is that even necessary?

[jagdtigger]

5 hours ago, FloRolf said:

Well i got that bit working as far as i can tell.

If i run ls -la it gives me this:

 

which as far as i understood is correct. 

 

 

 

how else would i configure only the "rsync" user having access to the homes / ssh directory? Is that even necessary?

I mean is the homes directory readable/writable by anyone? (Only the homes folder, the subfolders belonging to the users on the nas should be readable by the owner only.)

[FloRolf]

7 hours ago, jagdtigger said:

I mean is the homes directory readable/writable by anyone? (Only the homes folder, the subfolders belonging to the users on the nas should be readable by the owner only.)

Here's the output of the rsync users homes directory

 

 

and here's just homes, which shows all my users.

Flo is myself

Dani is my GF

Backup and Rsync are the two users i made try this shit out

Flo_Admin is just for admin purposes

[jagdtigger]

8 minutes ago, FloRolf said:

Bingo, set user folders to 700 recursively. Mine look like this:
 

heathcliff@DS416:~$ ls -la /volume1/homes
total 40
drwxrwxrwx 10 root       root  4096 Dec 25 18:02 .
drwxrwxrwx 39 root       root  4096 May  9 20:52 ..
drwx------  2 acme       users 4096 Dec 13 21:00 acme
drwx------  2 admin      users 4096 Sep  6  2020 admin
drwx------  3 ares35     users 4096 Dec 25 18:09 ares35
drwx------  9 heathcliff users 4096 Mar 28 16:00 heathcliff
drwx------  6 jagdtigger users 4096 May 14 19:42 jagdtigger
drwx------  3 kirito     users 4096 Nov 14  2020 kirito

 

[FloRolf]

6 minutes ago, jagdtigger said:

Bingo, set user folders to 700 recursively. Mine look like this:
 

heathcliff@DS416:~$ ls -la /volume1/homes
total 40
drwxrwxrwx 10 root       root  4096 Dec 25 18:02 .
drwxrwxrwx 39 root       root  4096 May  9 20:52 ..
drwx------  2 acme       users 4096 Dec 13 21:00 acme
drwx------  2 admin      users 4096 Sep  6  2020 admin
drwx------  3 ares35     users 4096 Dec 25 18:09 ares35
drwx------  9 heathcliff users 4096 Mar 28 16:00 heathcliff
drwx------  6 jagdtigger users 4096 May 14 19:42 jagdtigger
drwx------  3 kirito     users 4096 Nov 14  2020 kirito

 

ok great! Now the next dumb question: How would i do that?

Because simply going 

chmod 700 /homes

didn't really do the trick. Do i have to SSH into each account and set each homes directorie to chmod 700?

 

 

EDIT:

Or it's not permitted under the rsync user

[jagdtigger]

8 minutes ago, FloRolf said:

ok great! Now the next dumb question: How would i do that?

chmod -R 700 /volume1/homes/*

You really should learn some basic terminal stuff, i know for many CLI is a PITA but you never know when you will need to poke around in the "guts" of a device.... ;D

[FloRolf]

9 minutes ago, jagdtigger said:

chmod -R 700 /volume1/homes/*

You really should learn some basic terminal stuff, i know for many CLI is a PITA but you never know when you will need to poke around in the "guts" of a device.... ;D

well i was hoping this entire thing to be much simpler .... And unfortunately all the guides i found don't really explain stuff and don't have a "What if that didn't work"-FAQ.

 

So now at least this worked for one of my 3 roots and the rsync. nice, i guess.

Do i have to SSH into Synology as each Account to make it all 700?

How would i go an about changing the root?

 

[jagdtigger]

1 minute ago, FloRolf said:

Do i have to SSH into Synology as each Account to make it all 700?

Oops, slap sudo before the chmod command:
 

sudo chmod -R 700 /volume1/homes/*

 

3 minutes ago, FloRolf said:

How would i go an about changing the root?

If you mean he root home folder that one has the correct permissions.

[FloRolf]

10 minutes ago, jagdtigger said:

Oops, slap sudo before the chmod command:
 

sudo chmod -R 700 /volume1/homes/*

 

If you mean he root home folder that one has the correct permissions.

Well i think i screwed that up
 

I didn't put the /* if that was important....

 

Now unfortunately i can't see the permissions anymore because i don't have the access. Derp.

 

 

 

But passwordless SSH from TrueNAS to Synology still doesn't work soooo i have no idea.

 

Thanks so far though! Really appreciate your help on this!

 

 

 

EDIT: when i SSH as rsync It also now seems to have lost it's home directory, which makes sense but doesn't really help, does it?

 

[jagdtigger]

11 minutes ago, FloRolf said:

I didn't put the /* if that was important....

Yep, that part tells chmod to change permissions inside that folder but not for the folder itself. To restore homes use:
 

sudo chmod 755 /volume1/homes

 

Then run again the previous command but this time with the /*

sudo chmod -R 700 /volume1/homes/*

 

Edited May 16, 2021 by jagdtigger

[FloRolf]

2 minutes ago, jagdtigger said:

Yep, that part tells chmod to change permissions inside that folder but not for the folder itself. To restore homes use:
 

sudo chmod 777 /volume1/homes

 

Then run again the previous command but this time with the /*

sudo chmod -R 700 /volume1/homes/*

 

Aaalrighty!

 

that looks good now:

 

 

Unfortunately from the TrueNAS side it still asks for a password when i try to SSH in

[jagdtigger]

Thats odd, are you sure you enabled public key authentication and copied over the public key of the truenas user?

[FloRolf]

26 minutes ago, jagdtigger said:

Thats odd, are you sure you enabled public key authentication and copied over the public key of the truenas user?

Well i think you are right!

 

Synology:

 

When i do it on TrueNAS as said in the guide it say no directory found

 

However when i go 

it does give me the old key with the backup user and not the rsync user.

 

In the user Setting i do however have the same key as the Synology so it does come from somewhere lol

 

 

EDIT: Alright when i go one layer deeper i get the same key on TrueNAS as well.

I guess that's too deep for the system to find?

[jagdtigger]

3 minutes ago, FloRolf said:

When i do it on TrueNAS as said in the guide it say no directory found

Because you are logged in as root, drop into the rsync user (in my case its called ares35):
 

root@zenifer[~]# su ares35
$ cd ~
$ pwd
/mnt/Pool1/Data/TrueNAS_user_home/ares35

You can also get the path for the home folder in the webui under Accounts -> Users.

[FloRolf]

2 minutes ago, jagdtigger said:

Because you are logged in as root, drop into the rsync user (in my case its called ares35):
 

root@zenifer[~]# su ares35
$ cd ~
$ pwd
/mnt/Pool1/Data/TrueNAS_user_home/ares35

You can also get the path for the home folder in the webui under Accounts -> Users.

Ok yeah that works. Not i see the same key on both machines like i am supposed to. No idea what's wrong then  

[jagdtigger]

Just now, FloRolf said:

Ok yeah that works. Not i see the same key on both machines like i am supposed to. No idea what's wrong then  

Check the permissions and ownership of the user home dir on truenas, ssh is bit a picky about it (for obvious security reasons). I assume you done the whole guide logged in as root.

[FloRolf]

28 minutes ago, jagdtigger said:

Check the permissions and ownership of the user home dir on truenas, ssh is bit a picky about it (for obvious security reasons). I assume you done the whole guide logged in as root.

mh yeah that looks different.

Not sure why the Backup User is in there as well

 

Should i 

sudo chmod -R 700 /mnt/Podracer/SuperSpeed/rsync
as well?

 

Yes i did the TrueNAS part as Root but 

su rsync

at some points as you also said. 

[jagdtigger]

Permissions seem ok to me, then i have no idea why it is not working.....

4 hours ago, FloRolf said:

Should i 

sudo chmod -R 700 /mnt/Podracer/SuperSpeed/rsync
as well?

Worth a shot, it wont hurt anything.

[FloRolf]

23 minutes ago, jagdtigger said:

Permissions seem ok to me, then i have no idea why it is not working.....

Worth a shot, it wont hurt anything.

Welp,

 

i somehow changed it to that

 

but it didn't do sh#t. Still can't SSH into Synology without password. 

i am seriously lost here. No idea what causes this and how to fix it. 

 

Thanks for the help anyways my friend! Looks like i just have bad luck and logic doesn't work in my case lol. 

[jagdtigger]

If you have some time to burn take a look at the logs.... Might contain something useful.