DSM 7 - Packages reporting error due to high privileges #4170

hgy59 · 2020-09-09T07:40:07Z

As the DSM 7 preview release is out, there are several synocommunity packages that fail installation with error due to high privileges.

Unfortunatly the development guide page about Lower Privilege does not solve this issue. The developer guide is outdated (last update was 2016/01/14).

~~Until an official solution is available, let's collect the affected packages here (instead of creating an issue for each).~~

As there is no Information available on how to build spk packages compatible with DSM 7, there is no way to build 3rd party packages and the list of incompatible packages is obsolete for now.

Packages reporting error due to high privileges

...

Remarks

Third party packages are currently not supported by DSM 7 Preview.

See installation notes:

Packages by 3rd Party

Packages published by third-party developers are currently not supported. You can update the packages in Package Center when compatible versions are released.

hgy59 · 2020-09-09T08:11:28Z

Warning

Currently none of the community packages can be installed - neither through package center nor manually.

Packages already installed before installation of DSM 7 prerelease stay installed.
Installed community packages show either status stopped with remark "not compatible with this DSM version" or status "needs repair" (but repairing does not work due to privileges).

stephanvierkant · 2020-09-09T12:24:32Z

Until an official solution is available

Can we help? Does Synology about this issue?

hgy59 · 2020-09-09T13:43:31Z

Just found the DSM 7 Preview forum on synology and posted about missing an updated development guide.
Now I am waiting for an answer about the Update of the third party package development guide, in particular for the updated spk format.

Findings so far:

current 3rd party packages cannot be installed on DSM 7 Preview (error: high privileges)
the spk format of the official DSM 7 beta packages is different to the documented DSM 6 format (it is not a simple tar archive anymore. It looks like some parts of an spk file are encoded (or encrypted, or signed). Only the INFO part is in clear-text. Maybe they use a proprietary archive format now.
The official package center does not support navigation in the file structure anymore. One needs the exact link to download an spk including the version and arch (this is also for packages of DSM < 7).

Without the knowledge whether third party apps will need the new spk format - or this new format is for official packages only and the traditional format is only temporary disabled in the preview version - it is not possible to solve this.

hgy59 · 2020-09-10T17:44:09Z

As you can see in the DSM 7 community forum (for previewers only) there is no public information available yet.

Conclusion:

At the moment there is no way to use 3rd party packages with DSM 7 preview.

publicarray · 2020-09-12T10:19:08Z

While I have not installed DSM 7.0 yet, I assume dnscrypt-proxy can be added to your "asking for higher privileges" list as it attempts to bind to a system port (53).

hgy59 · 2020-09-12T11:25:22Z

You must not install DSM 7 preview when you want to use 3rd party packages.
May be the required information will be available with DSM 7 beta (not yet scheduled) or with official DSM 7 release (not yet scheduled, I do not expect it before 2021/01/01) or even later...

publicarray · 2020-09-12T11:29:25Z

Thanks @hgy59 I'm aware, I've even posed an ~~open question on their forum~~ (before I saw this issue here) if Synology has development documentation, but like you say it might be a while. (I got bit too exited 😄)

hgy59 · 2020-09-12T11:51:15Z

@publicarray as you have access to the DSM 7 preview forum you can see the answer for my question about updated developer documentation here:
https://community.synology.com/enu/forum/19/post/136805

stephanvierkant · 2020-09-17T17:39:21Z

Any update on this? Does anybody had contact with Synology?

ymartin59 · 2020-09-19T21:36:42Z

My position is clear - users choosing Synology devices often consider SynoCommunity packages as part of "the offer" (even if it is not commercial - as an example, we heards here about guys returning properly working device to choose another one where packages of interest are already available) and I find Synology does not play fair with us, asking guaranties with NDA but provides no help nor even at least documentation for us to port (any) packages to DMS 7 "earlier" (because we would find a way "one day"). They seem only interested in porting current package list from their marketplace they consider a priority to get available on DSM 7.

ymartin59 · 2020-09-19T21:39:54Z

And personally, I have a single Synology device I will not upgrade to DSM 7 until packages I run there have been ported and tested at least on an xpenology VM. Docker may be an option to avoid such dependency but its support is limited to most expensive devices not targeting individuals like most of SynoCommunity users.

ymartin59 · 2020-09-20T11:46:34Z

From @baya44 at SynoCommunity/spkrepo#55
<<
I'm actually testing DSM 7.0 on my DS1817+ and i have some packages who don't work because privilege issues.
Synology give this link for dev: https://help.synology.com/developer-guide/privilege/preface.html
The list of package: git, python, python3, plexpy custom, sickbeard-custom, ffmpeg and Gateone.

hgy59 · 2020-10-10T13:11:15Z

Good news, the DSM 7 Preview Toolchains are published at sf.net:
DSM 7 Preview Toolchains
And the toolkits too DSM 7 Toolkits

th0ma7 · 2020-10-10T13:29:48Z

This is great news... no kernel branch yet with build id but if your ok with this I volunteer myself to do the initial work to include this into the framework like I did with the previous, post PR #4200.

hgy59 · 2020-10-10T16:04:08Z

@th0ma7 DSM 7 will need a lot of investigation and I propose to use a development branch for this and not touch the master until we reach a (more or less) stable stage. The same approach was used when DSM 6 was introduced.

I have the DSM 7 Preview Version installed on a DS218+ and my first experience was frustrating (I built the example package but it failed to install).

hgy59 · 2020-10-10T17:40:59Z

Just wondering wether synology will create Diskstations with AMD Ryzen™ Embedded V1000 processors (as there is a toolchain called Intel x86 Linux 4.4.59 (V1000))

th0ma7 · 2020-10-10T17:55:08Z

Just wondering wether synology will create Diskstations with AMD Ryzen™ Embedded V1000 processors (as there is a toolchain called Intel x86 Linux 4.4.59 (V1000))

Interesting finding... :)

hgy59 · 2020-10-10T19:13:55Z

The new Archs purley, geminilake and v1000 where added to the github repo of Synology DSM6.0 package toolkit framework just three days ago.

hgy59 · 2020-10-15T12:13:38Z

Just wondering wether synology will create Diskstations with AMD Ryzen™ Embedded V1000 processors (as there is a toolchain called Intel x86 Linux 4.4.59 (V1000))

Interesting finding... :)

The secret is revealed: it's the new DS1621+ (without 'xs')

Model	CPU Model	Cores	Threads	FPU	Package Arch	RAM
DS1621+	AMD Ryzen V1500B	Quad Core	8	Yes	V1000	DDR4 ECC SODIMM 4GB

stephanvierkant · 2020-11-11T18:25:25Z

What's the status of this issue?

I see there is some information right now: https://community.synology.com/enu/forum/19/post/137228

publicarray · 2020-11-12T11:49:27Z

Current DMS7 support is: Work in progress.
ETA: When it's ready

Although this particular issue (Packages reporting error due to high privileges) is mostly solved in my DSM7 branch. It needs testing and some scripts need a rewrite. I still expect to see more subtle permission problems depending on the package.

xhemp · 2020-12-09T23:27:39Z

@publicarray I've been trying to get some packages to be installed but I am still hitting the high privileges error. What do you mean by "it's been mostly solved on your DSM7 branch"? Have you managed to install a package successfully without seeing that error on install? Can you share the privilege file and/or other files? I've actually cloned your dsm7 branch to work with but it doesn't really matter how I modify the privileges file, I still get the same error.

EDIT: Spoke too early, after checking the synopkg log I was able to see exactly what I was doing wrong. Package has been installed but it's not working but it's progress!

tmm1 · 2020-12-10T01:09:18Z

https://global.download.synology.com/download/Document/Software/DeveloperGuide/Firmware/DSM/7.0/enu/DSM_Developer_Guide_7_0_Beta.pdf

from https://www.synology.com/en-global/support/developer#tool

publicarray · 2020-12-10T07:27:00Z

Hi there, Good to see more people trying out DSM7 👍

"Mostly Solved" means that one instance of the specific privilege problem is solved. Package can now be installed without the error message but since a few packages and scripts assume they have root access now fail silently. This is like the symptoms you have described. Some packages may work and while some start up scripts need to be adjusted. I've tried to fix another instance in the generic service startup script but I've only tested 3 working packages. (I've only compiled 3 due to lack of time)

Hope this clears that up. As @tmm1 alluded to, the developer documentation is the best place to learn more about the changes to DSM7 and develop your own package.

xhemp · 2020-12-10T15:52:34Z

Thansk, @tmm1 and @publicarray .
I will definitely give it a go, I managed to compile rutorrent (which I have running on 6.2) but it fails to start up, etc so I'm going through the changes it needs to see if I can get it working.

mahisri1 · 2021-01-06T00:26:03Z

I have upgraded my spare one to DSM 7 and see this error:

That means DSM7 is not for my production stuff. BTW, I liked the MFA (multi factor authentication) improvements... great job. Not sure, if the applications can be manually granted elevated permissions... Thanks for all of your efforts.

publicarray · 2021-01-07T09:32:35Z

This particular issue is solved on the DSM7 branch. Some packages still have custom scripts that fail. Please see issue #4215 for further discussion.

Taking info from several sources, it seems like the AMD Ryzen V1500B is a X86_64 processor. - SynoCommunity/spksrc#4170 - eizedev/AirConnect-Synology@80f7c87

hgy59 added the dsm 7 label Sep 9, 2020

This was referenced Sep 9, 2020

tvheadend needs lower privileges #4169

Closed

ffmeg needs lower privileges #4167

Closed

git 2.26.-14 needs lower Previliges on DSM 7 beta for install #4165

Closed

hgy59 pinned this issue Sep 9, 2020

hgy59 mentioned this issue Sep 9, 2020

syncthing not working on dsm7? #4166

Closed

ymartin59 unpinned this issue Oct 12, 2020

Pavion mentioned this issue Dec 12, 2020

Synology hat DSM 7.0 gestartet Pavion/tvstreamrecord#47

Closed

neykov mentioned this issue Jan 2, 2021

root issue with new DSM 7 neykov/syno-magnet#3

Closed

publicarray closed this as completed Jan 7, 2021

leipert mentioned this issue Feb 16, 2021

Add support for DS1621+ and DS1821+ kastelo/syncthing-synology#13

Merged

ts678 mentioned this issue May 30, 2021

installation fails on DSM 7 duplicati/duplicati#4547

Open

softexpert mentioned this issue Jul 6, 2021

DSM 7beta flipswitchingmonkey/gitea-spk#32

Open

OrpheeGT mentioned this issue Sep 6, 2021

DSM 7 Install Failing Grandma-Betty/synology-dsm-open-vm-tools#3

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

DSM 7 - Packages reporting error due to high privileges #4170

DSM 7 - Packages reporting error due to high privileges #4170

hgy59 commented Sep 9, 2020 •

edited

Loading

hgy59 commented Sep 9, 2020

stephanvierkant commented Sep 9, 2020

hgy59 commented Sep 9, 2020

hgy59 commented Sep 10, 2020

publicarray commented Sep 12, 2020 •

edited

Loading

hgy59 commented Sep 12, 2020

publicarray commented Sep 12, 2020 •

edited

Loading

hgy59 commented Sep 12, 2020

stephanvierkant commented Sep 17, 2020

ymartin59 commented Sep 19, 2020 •

edited

Loading

ymartin59 commented Sep 19, 2020

ymartin59 commented Sep 20, 2020

hgy59 commented Oct 10, 2020 •

edited

Loading

th0ma7 commented Oct 10, 2020

hgy59 commented Oct 10, 2020

hgy59 commented Oct 10, 2020

th0ma7 commented Oct 10, 2020

hgy59 commented Oct 10, 2020

hgy59 commented Oct 15, 2020

stephanvierkant commented Nov 11, 2020

publicarray commented Nov 12, 2020 •

edited

Loading

xhemp commented Dec 9, 2020 •

edited

Loading

tmm1 commented Dec 10, 2020 •

edited

Loading

publicarray commented Dec 10, 2020 •

edited

Loading

xhemp commented Dec 10, 2020

mahisri1 commented Jan 6, 2021

publicarray commented Jan 7, 2021

DSM 7 - Packages reporting error due to high privileges #4170

DSM 7 - Packages reporting error due to high privileges #4170

Comments

hgy59 commented Sep 9, 2020 • edited Loading

As there is no Information available on how to build spk packages compatible with DSM 7, there is no way to build 3rd party packages and the list of incompatible packages is obsolete for now.

Packages reporting error due to high privileges

Remarks

hgy59 commented Sep 9, 2020

Warning

stephanvierkant commented Sep 9, 2020

hgy59 commented Sep 9, 2020

hgy59 commented Sep 10, 2020

publicarray commented Sep 12, 2020 • edited Loading

hgy59 commented Sep 12, 2020

publicarray commented Sep 12, 2020 • edited Loading

hgy59 commented Sep 12, 2020

stephanvierkant commented Sep 17, 2020

ymartin59 commented Sep 19, 2020 • edited Loading

ymartin59 commented Sep 19, 2020

ymartin59 commented Sep 20, 2020

hgy59 commented Oct 10, 2020 • edited Loading

th0ma7 commented Oct 10, 2020

hgy59 commented Oct 10, 2020

hgy59 commented Oct 10, 2020

th0ma7 commented Oct 10, 2020

hgy59 commented Oct 10, 2020

hgy59 commented Oct 15, 2020

stephanvierkant commented Nov 11, 2020

publicarray commented Nov 12, 2020 • edited Loading

xhemp commented Dec 9, 2020 • edited Loading

tmm1 commented Dec 10, 2020 • edited Loading

publicarray commented Dec 10, 2020 • edited Loading

xhemp commented Dec 10, 2020

mahisri1 commented Jan 6, 2021

publicarray commented Jan 7, 2021

hgy59 commented Sep 9, 2020 •

edited

Loading

publicarray commented Sep 12, 2020 •

edited

Loading

publicarray commented Sep 12, 2020 •

edited

Loading

ymartin59 commented Sep 19, 2020 •

edited

Loading

hgy59 commented Oct 10, 2020 •

edited

Loading

publicarray commented Nov 12, 2020 •

edited

Loading

xhemp commented Dec 9, 2020 •

edited

Loading

tmm1 commented Dec 10, 2020 •

edited

Loading

publicarray commented Dec 10, 2020 •

edited

Loading