TerraMaster Forum

Hi,
I was trying to install docker-compose and other components and found that there is no package manager or run cURL commands, no sudo. How can those be installed? This will help make Terra Master powerful development environment.

Hi, you cannot use this cmd sudo when SSH login as admin, while you can login as root ( the login password is the same as admin).

I had logged into the root, but still not able to use sudo.

sudo is not supported in TNAS.

As TOS is not a complete Linux system, it does not contain all Linux modules, for example sudo is not included.

One interesting question: you can login the TOS as a root user, why you still need sudo?

TMroy wrote: ↑07 Sep 2020, 15:29One interesting question: you can login the TOS as a root user, why you still need sudo?

Opening root login, particularly on remote sessions like SSH is a security risk for the device: most distribution prevent that for good reasons.
sudo is a more commonly accepted method to run few ad-hoc commands as root: it also ensures you do not stay root when you need (or should) not.

So, adding sudo, and disabling root login & ssh would definitely be desirable for security concerns.
BTW: root motd has a typo: Wellcom to TNAS: should be: Welcome to TNA

It's "Welcome to TNAS" actually.

We found it's Wellcom as you posted with ARM models, and it will be fixed soon. Thank you.

Ok.
Now, the most critical thing, for security reason is probably to disable any remote root login (ssh in particular).
Thanks.

I agree that disabling root SSH/remote login is the more secure way to go, but I also agree with TM that implementing commands like sudo and the like are just setting them up to have to start supporting users at the command line when things don't work (or they break stuff due to inexperience). As I've said before, these devices are not Linux servers, they're meant to be NAS appliances. I love that TM gives us the ability to hit the command line and dive into some more advanced configurations on our own, but it shouldn't be made easier for novices to break things.

Just brainstorming possible options here at 7:30AM while watching the internet panic because Google services are down:

Option 1:
Enable sudo, disable remote root SSH, admin account gets sudo/ssh by default, CLEAR disclaimer that anything done via command line is the user's responsibility and TM is not liable for data loss. Support for Linux command line is "best-effort", or Forum (community) based only.

Option 2:
Disable remote root SSH, add option to TOS to enable root login when/if needed for those that require cli occasionally.

Anyone have any other creative suggestions to satisfy both sides? I've logged into SSH a few times, but only because I find it easier to move data around, and set permissions recursively. I could honestly live without it, but understand the value.