Error: 'cannot set property' when receiving snapshot despite delegated permission

[Ostheer]

Question is also posted on Serverfault.

Problem

This is not strictly a zfs_autobackup problem I think, but it does manifest through its specific interaction with zfs.

When I run the following command to peform a backup to a remote server;

zfs-autobackup --debug -v --clear-mountpoint --ssh-target ostsite ostsite_nc backups/ostdienaar`

The process eventually halts with an error:

...
# [Target] CMD    > (zfs send --large-block --embed --raw --verbose --parsable --props -i @ostsite_nc-20230728225607 datapool/nextcloud_data@ostsite_nc-20230728230303) | (ssh ostsite 'zfs recv -u -o canmount=noauto -v -s backups/ostdienaar/datapool/nextcloud_data')
# [Source] STDERR > incremental	datapool/nextcloud_data@ostsite_nc-20230728225607	datapool/nextcloud_data@ostsite_nc-20230728230303	86640
# [Source] STDERR > size	86640
! [Target] STDERR > cannot set property for 'backups/ostdienaar/datapool/nextcloud_data': permission denied
! [Target] Command "ssh ostsite 'zfs recv -u -o canmount=noauto -v -s backups/ostdienaar/datapool/nextcloud_data'" returned exit code 1 (valid codes: [0])
! [Source] datapool/nextcloud_data: FAILED: Last command returned error
! Exception: Last command returned error

More info

I can reproduce the same error without zfs_autobackup:

(zfs send --large-block --embed --raw --verbose --parsable --props -i @previous_snap localpool/mydataset@newest_snap) | (ssh ostsite 'zfs recv -u -o canmount=noauto -v -s remotepool/myserver/localpool/mydataset')

responds

incremental localpool/mydataset@previous_snap   localpool/mydataset@newest_snap 624
size    624
receiving incremental stream of localpool/mydataset@newest_snap into     remotepool/myserver/localpool/mydataset@newest_snap
received 1.31K stream in 1 seconds (1.31K/sec)
cannot set property for 'remotepool/myserver/localpool/mydataset': permission denied

even though I have delegated the canmount property to the receiving user:

sudo zfs allow myuser snapshot,receive,create,mountpoint,mount,userprop remotepool/myserver

and manually performing zfs set canmount=noauto remotepool/myserver/localpool/mydataset works on the remote host.

I have the following questions:

1. How can I see which property cannot be set?
2. How can I allow this property to be set (at recv-time)?

[viharm]

What is the recommended permission for send and receive ends?

[viharm]

What is the recommended permission for send and receive ends?

This has been answered in https://github.com/psy0rz/zfs_autobackup/wiki/Manual#running-without-root.

[Ostheer]

You're totally right, I should have rtfm'ed.

[psy0rz]

hehe np :)