如何确定用户接收ZFS数据集所缺少的权限？

Question

我有一台FreeNAS (11.1-U1)和一台FreeBSD (11.1-ReleaseP6)机器。在FreeNAS上，我希望将zfs receive递归快照作为具有委托权限的非根用户。这似乎对大多数子数据集都很有效。但是iocage的data数据集(可以装入监狱并从那里管理)失败了：

root@freebsd:~> zfs send -RI "dozer@2018-02-21" "dozer@2018-03-08"  | ssh -T -i /root/backup_key backupuser@freenas zfs receive -dvuF neo/backups/freebsd
receiving incremental stream of dozer@2018-03-03 into neo/backups/freebsd@2018-03-03
received 312B stream in 1 seconds (312B/sec)
receiving incremental stream of dozer@2018-03-07 into neo/backups/freebsd@2018-03-07
received 312B stream in 1 seconds (312B/sec)
receiving incremental stream of dozer@2018-03-08 into neo/backups/freebsd@2018-03-08
received 312B stream in 1 seconds (312B/sec)
receiving incremental stream of dozer/ROOT@2018-03-03 into neo/backups/freebsd/ROOT@2018-03-03
.
.
.
receiving incremental stream of dozer/iocage/jails/owncloud/root@2018-03-08 into neo/backups/freebsd/iocage/jails/owncloud/root@2018-03-08
received 578MB stream in 110 seconds (5.25MB/sec)
receiving incremental stream of dozer/iocage/jails/owncloud/root/data@2018-03-03 into neo/backups/freebsd/iocage/jails/owncloud/root/data@2018-03-03
cannot receive incremental stream: permission denied
warning: cannot send 'dozer/iocage/jails/owncloud/root/data@2018-03-03': signal received
warning: cannot send 'dozer/iocage/jails/owncloud/root/data@2018-03-07': Broken pipe
warning: cannot send 'dozer/iocage/jails/owncloud/root/data@2018-03-08': Broken pipe

该特定子数据集的权限与父数据集的权限完全相同：

root@freenas:~ # zfs allow neo/backups/freebsd/iocage/jails/owncloud/root/data
---- Permissions on neo/backups/freebsd -----------------------------
Local+Descendent permissions:
        user backupuser atime,compression,create,dedup,exec,jailed,mount,mountpoint,quota,receive,rename,reservation,setuid,userprop

在zfs receive上运行FreeNAS，就像根用户所期望的那样。

我的用户需要哪些委托权限才能接收被监禁的iocage数据集，更普遍地说，是否有一种方法可以使zfs receive提供一条更详细的错误消息，告诉您缺少什么权限？

Answer 1

这看起来像是您有一个缺少权限的快照。

尝试在receive上设置neo/backups/freebsd/iocage/jails/owncloud/root/data@2018-03-03权限。

它看起来是在卷上正确设置的，但是在快照中缺少。