50

I´m trying to set owner and group via rsync and it doesn't seem to be working.

This is the command:

sudo rsync -rlptDvz --owner=cmsseren --group=cmsseren /home/serena/public_html/ -e ssh root@ip:/home/cmsseren/public_html2/

The files sync correctly but doesn´t seem to change the owner and group.

Aaron Copley
  • 12,954

5 Answers5

106

Version 3.1.0 of rsync introduced the --usermap and --groupmap mentioned by Thomas, but also the convenience option --chown, which works well for your scenario.

--chown=USER:GROUP
    This option forces all files to be owned by USER with group GROUP.
    This  is  a  simpler  interface  than  using  --usermap  and  --groupmap directly,
    but  it  is implemented using those options internally, so you cannot mix them.
    If either the USER or GROUP is empty, no mapping for the omitted user/group will
    occur.  If GROUP is empty, the trailing colon may be omitted, but if USER is
    empty, a leading colon must  be supplied.
If you specify "--chown=foo:bar, this is exactly the same as specifying
"--usermap=*:foo --groupmap=*:bar", only easier.

Also, the -o and -g options are required. Excluding them will fail to update their respective attribute, but produce no error.

rsync -og --chown=cmsseren:cmsseren [src] [dest]

This is mentioned indirectly in the manpage, which states that the --chown option "is implemented using --usermap and --groupmap internally", and:

For the --usermap option to have any effect, the -o (--owner) option must be used (or implied), and the receiver will need to be running as a super-user (see also the --fake-super option).

For the --groupmap option to have any effect, the -g (--groups) option must be used (or implied), and the receiver will need to have permissions to set that group.

22

It sounds like it is working correctly. Use --owner and --group to preserve (not set) the owner and group names... meaning that you do not want them to change after the transfer.

If you don't use these options, the user and group will be changed to the invoking user on the receiving end. If you want to specify some other user, you will need to add a chown command to your script.

-o, --owner
    This option causes rsync to set the owner of the destination file to be 
    the same as  the source file, but only if the receiving rsync is being run 
    as the super-user (see also the --super and --fake-super options). Without 
    this option, the owner of new and/or transferred files are set to the invoking 
    user on the receiving side...

-g, --group
    This option causes rsync to set the group of the destination file to be the same as 
    the source file. If the receiving program is not running as the super-user (or if
    --no-super was specified), only groups that the invoking user on the receiving side
    is a member of will be preserved. Without this option, the group is set to the default
    group of the invoking user on the receiving side...

man rsync

Aaron Copley
  • 12,954
8

Last version (at least 3.1.1) of rsync allows you to specify the "remote ownership":

--usermap=tom:www-data

Changes tom ownership to www-data (aka PHP/Nginx). If you are using Mac as the client, use brew to upgrade to the last version. And on your server, download archives sources, then "make" it!

1

Another solution may be to change the remote user that establishes the rsync connection using --rsync-path. I posted a complete explanation here:

https://unix.stackexchange.com/a/546296/116861

0

Issue. Backing up remote files, directories from a cloud VPS via rsync over SSH was not maintaining remote owner:group ownerships on local host.

Solution.

  1. Create users on local host for files (directories, etc.) rsync'd from remote host.
  2. Run local host rsync command as root / sudo.
  3. Will have to manually provide root password, SSH passphrase.
# create local host system user(s) for those on remote host; see:
# https://wiki.archlinux.org/title/Users_and_groups#Example_adding_a_system_user

sudo rsync -aqP -e "ssh -p 4321 \ ## SSH port -i /home/victoria/.ssh/my-vps/id_rsa" \ ## SSH credentials root@vps1234.my_isp.com:/etc/default/solr.in.sh ## rsync SRC (remote host) /<my home path>/backups/solr.in.sh \ ## rsync DEST (local host)


Tests.

# -----------------------------------------------------------------------------
# REMOTE HOST (cloud VPS):

[me@vps1234]$ ls -l /etc/default/

... -rw-r----- 1 root solr 15079 Aug 12 20:35 solr.in.sh ## ownership: root:solr ...

[me@vps1234]$

-----------------------------------------------------------------------------

LOCAL HOST:

The basic command for testing (with variations, following) is:

rm -f solr.in.sh;  \
rsync -aqP  \
    --rsync-path=&quot;sudo /bin/rsync&quot;  \
    -e &quot;ssh -p 4321  \
    -i /home/victoria/.ssh/my-vps/id_rsa&quot;  \
    root@vps1234.my_isp.com:/etc/default/solr.in.sh
    /&lt;my home path&gt;/backups/solr.in.sh;  \
ls -l solr.in.sh
</code></pre>
<pre class="lang-bash prettyprint-override"><code># -----------------------------------------------------------------------------
# [TEST 1] rsync --rsync-path...

[victoria]$ rm -f solr.in.sh;  \
    rsync -aqP --rsync-path=&quot;sudo /bin/rsync&quot;  \
      -e &quot;ssh -p 4321 -i /home/victoria/.ssh/my-vps/id_rsa&quot;  \
      root@vps1234.my_isp.com:/etc/default/solr.in.sh  \
      /&lt;my home path&gt;/backups/solr.in.sh;  \
    ls -l solr.in.sh 

  -rw-r----- 1 victoria victoria 15079 Aug 12 20:35 solr.in.sh
            ## victoria victoria [incorrect]

[victoria]$
</code></pre>
<pre class="lang-bash prettyprint-override"><code># -----------------------------------------------------------------------------
# [TEST 2] sudo rsync --rsync-path ; user &quot;solr&quot; not on local host so remote files
# in group &quot;solr&quot; renamed &quot;git&quot; on local host; tried rsync -og options: no effect

[victoria]$ rm -f solr.in.sh;  \
    sudo rsync -aqP --rsync-path=&quot;/usr/bin/rsync&quot;  \
      -e &quot;ssh -p 4321 -i /home/victoria/.ssh/my-vps/id_rsa&quot;  \
      root@vps1234.my_isp.com:/etc/default/solr.in.sh  \
    /&lt;my home path&gt;/backups/solr.in.sh;  \
    ls -l solr.in.sh 

  [sudo] password for victoria: 
  Enter passphrase for key '/home/victoria/.ssh/my-vps/id_rsa': 

  -rw-r----- 1 root git 15079 Aug 12 20:35 solr.in.sh
            ## root:git [incorrect]

[victoria]$
</code></pre>
<pre class="lang-bash prettyprint-override"><code># -----------------------------------------------------------------------------
# [CONFIGURE USERS]
# local host:

[victoria]$ cat /etc/passwd | grep solr     ## no such user
[victoria]$

# Create local host system user, for user on remote host:

[victoria@victoria backups]$ sudo useradd -r -s /usr/bin/nologin solr
  [sudo] password for victoria: 

[victoria]$ cat /etc/passwd | grep solr

  solr:x:980:980::/home/solr:/usr/bin/nologin

[victoria]$ ls -l /home/     ## check: useradd did not create /home/solr/

  total 52
  drwx------   2 root     root     16384 Mar  6  2015 lost+found
  drwxrwxr-x 178 victoria victoria 36864 Aug 13 10:09 victoria

[victoria]$
</code></pre>
<pre class="lang-bash prettyprint-override"><code># -----------------------------------------------------------------------------
# [TEST 3: works] sudo --rsync-path...

[victoria]$ rm -f solr.in.sh;  \
    sudo rsync -aqP --rsync-path=&quot;/bin/rsync&quot;  \
      -e &quot;ssh -p 4321 -i /home/victoria/.ssh/my-vps/id_rsa&quot;  \
      root@vps1234.my_isp.com:/etc/default/solr.in.sh  \
      /&lt;my home path&gt;/backups/solr.in.sh;  \
    ls -l solr.in.sh 

  [sudo] password for victoria: 
  Enter passphrase for key '/home/victoria/.ssh/my-vps/id_rsa': 

  -rw-r----- 1 root solr 15079 Aug 12 20:35 solr.in.sh
            ## root:solr [correct]

[victoria]$
</code></pre>
<pre class="lang-bash prettyprint-override"><code># -----------------------------------------------------------------------------
# [TEST 4: works] No need for --rsync-path option:

[victoria@victoria backups]$ rm -f solr.in.sh;  \
    sudo rsync -aqP -e  \
      &quot;ssh -p 4321 -i /home/victoria/.ssh/my-vps/id_rsa&quot;  \
      root@vps1234.my_isp.com:/etc/default/solr.in.sh  \
      /&lt;my home path&gt;/backups/solr.in.sh;  \
    ls -l solr.in.sh

  [sudo] password for victoria:
  Enter passphrase for key '/home/victoria/.ssh/my-vps/id_rsa':

  -rw-r----- 1 root solr 15079 Aug 12 20:35 solr.in.sh
            ## root:solr [correct]

[victoria@victoria backups]$

# -----------------------------------------------------------------------------
</code></pre>