Synology NAS deploy documentation confusion

[cirrusflyer]

Listed here:

https://github.com/acmesh-official/acme.sh/wiki/Synology-NAS-Guide

These instructions state:

"(Recommend) Deploy with auto created temp admin user" and using "export SYNO_USE_TEMP_ADMIN=1"

This file is used with latest version which doesn't include the code:

https://github.com/acmesh-official/acme.sh/blob/master/deploy/synology_dsm.sh

This file seems to include the code necessary for what's described in guide above:

https://git.jasuit.com/jh163888/acme.sh/src/commit/c7f6f20c9d4ae05a5ce366d8f3f62cd3eb1b1710/deploy/synology_dsm.sh

[github-actions]

Please upgrade to the latest code and try again first. Maybe it's already fixed. acme.sh --upgrade If it's still not working, please provide the log with --debug 2, otherwise, nobody can help you.

[cirrusflyer]

I have upgraded to latest version. Running with debug 2 doesn't apply to what I'm reporting here.

[stkevintan]

The feature which documentation describes does exist: #4706
However, it still lies in the dev branch and hasn't merged to master yet:
master...dev

Hi @neilpang Do we have any plan to merge dev branch? if no, I would suggest reverting the documentation to reduce confusion

[cirrusflyer]

Thanks. That's too bad. I was looking forward to testing the temp admin feature.

[neilpang]

merged

[cirrusflyer]

Thanks!

What are the "built-in tools" and where do I get them?

(Recommend) Deploy with auto created temp admin user
If you installed acme.sh in DSM, we recommend you to try automatic temp user auth method to deploy (DSM should already have required built-in tools, we will let you know if not):

[cmatte]

Hey @cirrusflyer I faced the same blocker for the tools error, you are also probably running acme.sh in a docker/VM container, you need to scrap all that, install acme.sh in a permanent folder of your choice keeping the --nocron option as DSM does not seem to have crontab, specifying explicitly the --home --config-home folders both at install and every time you run it, and you then run renewals and deployments regularly through "Task Scheduler".

[elmimmo]

and you then run renewals and deployments regularly through "Task Scheduler".

If I am not mistaken, synouser and synogroup, which acme.sh seems to depend on to create temp admin user, must be executed by root. Therefore, if acme.sh is ran without sudo, it will complain about Missing required tools to creat temp admin user, even though it actually means that the user has no permissions to execute those.

I guess that means that one cannot run renewals and deployments through "Task Scheduler" unless the task is assigned to root, which I am not totally confortable with. I had rather it be a dedicated user in the administrators group, with acme.sh and its config files residing in that user’s Home folder.