pve-zsync stopped working

[AxelTwin]

Hi everybody,
Since yesterday I was using pve-zsync for daily snapshot and it was working perfectly.
Today it stopped working and I can't figure out what's wrong.

job is to pull vm snapshot of remote server from backup server.

I am able to ssh without issue.
firewall is disabled at datacenter and node level.

when I try to pve-zsync it asks for password but doesn't accept it

Any advice ?

pve-zsync sync --source 172.16.1.1:103 --dest rpool/data/Daily  --name pve-zsync-daily  --maxsnap 30  --method ssh
root@172.16.1.1's password:
root@172.16.1.1's password:

 

[fiona]

Hi,
are you sure it's not just asking for the password for each ssh command pve-zsync needs to execute internally? Tried to reproduce it here and that's what's happening for me.

To avoid the need to input a password, you can use the authorized_keys file from ssh. Did it work without inputting the password in the past? Did you make any changes to the ssh configuration?

EDIT: pve-zsync will essentially do the same (using ssh-copy-id) after authenticating once, but currently only for pve-zsync create and not pve-zsync sync commands.

 

[AxelTwin]

Hi Fabian, thanks for replying.

I regenerated the ssh keys on both servers and copy the public key on each other.
I am now able to ssh each of them without password but still, I get this issue:

root@backup1 /home/sam # pve-zsync sync --source 172.16.1.1:100 --dest rpool/data/Daily --name pve-zsync-daily --maxsnap 5 --method ssh
Job --source 172.16.1.1:100 --name pve-zsync-daily got an ERROR!!!
ERROR Message:
ERROR: in path

root@backup1 /home/sam # pve-zsync create --source 172.16.1.1:103 --verbose --name pve-zsync-daily --maxsnap 30 --dest rpool/data/Daily
ERROR: in path

 

[fiona]

Well, it's a different issue now. What is the output of ssh 172.16.1.1 pvesm path <storeid>:vm-100-disk-<N> (replacing <storeid> and <N> with appropriate values of course).

 

[AxelTwin]

Ok, thanks for pointing me in the right direction.
Issue wasn't related to pve-zsync.
I removed a user in /etc/pve/user.cfg but the user was still in admins group.
Pve-zsync started to work again once removed.

see below the mistake (user mars@pam):

user:root@pam:1:0:::overlaps@outlook.com:::
user:sam@pam:1:0:sam::overlaps@outlook.com::x!oath:

group:admins:root@pam,sam@pam,mars@pam::


acl:1:/:@admins:Administrator:

command output before removing mars@pam:

root@backup1 / # ssh 172.16.1.1 pvesm path data:subvol-103-disk-0
user config - ignore invalid group member 'mars@pam'
/rpool/data/subvol-103-disk-0

Thanks again Fabian