get rid of password prompt on proxmox-backup-client

[donniev]

Debian bookworm bare metal client

This command successfully backs up the system but prompts me for. "root@pam" password.
I really want to put the command in a cron task and automate it without the prompt.
Any suggestions?

 

[fluxX04]

Create an extra user with an API Key and define it via environment variables (would not use root for it).
Something like:

#!/bin/sh

export PBS_REPOSITORY='user@pbs!token@myhostname:mydatastore'
export PBS_PASSWORD='API_KEY_PASSWORD'

proxmox-backup-client backup ......

https://pbs.proxmox.com/docs/backup-client.html#environment-variables

Greetz

 

[donniev]

Thanks,
okay I have a user "backup"
and I have created the api token for the user: zigbee1217
I then created envars:
:~# env
PBS_PASSWORD=<MYAPIKEYSECRET>
PBS_REPOSITORY=backup@pbs!zigbee1217@pbs.lan:Synology
and run the command
:~# proxmox-backup-client backup rootfs.pxar:/
Starting backup: host/zigbee/2024-12-17T15:35:34Z
Client name: zigbee
Starting backup protocol: Tue Dec 17 08:35:34 2024
Error: missing permissions 'Datastore.Backup' on '/datastore/Synology'


What am I missing?

 

[fluxX04]

You need to set permissions for the api token to be able to make backups as in the error message states.
Something like proxmox-backup-manager acl update /datastore/Synology DatastoreBackup --auth-id 'backup@pbs!zigbee1217' or thought the GUI.

https://pbs.proxmox.com/docs/user-management.html

 

[donniev]

I don't know if I am getting closer or not. I executed the above on the pbs server and it executed correctly.
However now the error is:
Error: backup owner check failed (backup@pbs!zigbee1217 != root@pam)
Here are the ACL
ugid │ path │ propagate │ roleid │
╞═══════════════════════╪══════════════════════╪═══════════╪═════════════════╡
│ backup@pbs │ /datastore/Synology │ 1 │ DatastoreAdmin │
├───────────────────────┼──────────────────────┼───────────┼─────────────────┤
│ backup@pbs │ /datastore/Synology2 │ 1 │ DatastoreAdmin │
├───────────────────────┼──────────────────────┼───────────┼─────────────────┤
│ backup@pbs!zigbee1217 │ /datastore/Synology │ 1 │ DatastoreBackup │
├───────────────────────┼──────────────────────┼───────────┼─────────────────┤
│ backup@pbs!zigbee1217 │ /datastore/Synology │ 1 │ DatastoreAdmin │
├───────────────────────┼──────────────────────┼───────────┼─────────────────┤
│ backup@pbs!zigbee1217 │ /datastore/Synology2 │ 1 │ DatastoreBackup │
├───────────────────────┼──────────────────────┼───────────┼─────────────────┤
│ backup@pbs!zigbee1217 │ /datastore/Synology2 │ 1 │ DatastoreAdmin │
└───────────────────────┴──────────────────────┴───────────┴─────────────────┘
users:
root@pbs:~# proxmox-backup-manager user list
┌────────────┬────────┬────────┬───────────┬──────────┬───────────────────┬─────────┐
│ userid │ enable │ expire │ firstname │ lastname │ email │ comment │
╞════════════╪════════╪════════╪═══════════╪══════════╪═══════════════════╪═════════╡
│ backup@pbs │ 1 │ never │ │ │ │ │
├────────────┼────────┼────────┼───────────┼──────────┼───────────────────┼─────────┤
│ root@pam │ 1 │ never │ │ │ donvawter@mac.com │ │
└────────────┴────────┴────────┴───────────┴──────────┴───────────────────┴─────────┘
and datastores
root@pbs:~# proxmox-backup-manager datastore list
┌───────────┬────────────────┬─────────────────────────┐
│ name │ path │ comment │
╞═══════════╪════════════════╪═════════════════════════╡
│ Synology │ /mnt/synology │ PBS Synology datasource │
├───────────┼────────────────┼─────────────────────────┤
│ Synology2 │ /mnt/synology2 │ Datastore on Synrack │
└───────────┴────────────────┴─────────────────────────┘

 

[fluxX04]

You getting closer. As u have done the backups with an other user before, the new (backup@pbs!zigbee1217) user is not allowed to make new backups to the existing backup groups.

You need to change now the owner of the existing backups to backup@pbs!zigbee1217:
https://pbs.proxmox.com/docs/backup-client.html#changing-the-owner-of-a-backup-group or though the GUI.