Comment on Selfhosting Sunday! What's up?

• Kaldo@fedia.io ⁨2⁩ ⁨weeks⁩ ago

  Oh file permissions are a nightmare to me, I thought I managed to get it sorted but after i installed lidarr, it alone suddenly can't move files out of the download location anymore. I even tried to chmod 777 the data folders and nothing. I dont think I quite have the grasp on how those work with docker on linux yet, it seems like those arr services also have some internal users too which I dont get why would they.

  Wdym with the formats, is this referring to transcoding? I kept those on defaults afaik

  source

  • raldone01@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

    In linux user and group names don’t matter. Only the gid and uid matter. Think of user and group names as human names like domains are for IPS.

    In docker when you use mounts, all your contianers that want to share data must agree on the gid and uids.

    source

    • Kaldo@fedia.io ⁨2⁩ ⁨weeks⁩ ago

      I have one .env file with UUID/GUID 1000 set for all docker services in the docker-compose so it would make sense in theory if that's enough, but it seems it rarely is...

      source
  • h0rnman@lemmy.dbzer0.com ⁨2⁩ ⁨weeks⁩ ago

    Could be that lidarr is setting its own permissions for downloaded stuff (look for something like dmask or fmask in the docker config). You might also need to chmod -R so it hits all sub folders. If you have a file or directory mask option, remember that they’re inverse, so instead of 777, you’d do 000 for rwxrwxrwx.

    source

    • Kaldo@fedia.io ⁨2⁩ ⁨weeks⁩ ago

      You might be onto something, lidarr does have UMASK=002 setting in the .env file. I think the issue is when sabdnzbd puts the files and then lidarr can't read them, so what exactly is the expected permission setting then in this case? If I put it to 000 for lidarr, won't other services then be unable to add the files there?

      I always feel so dumb when it comes to these things since in my head it's something that should be pretty straightforward and simple, why can't they all just use the same user and share the same permissions within this folder hierarchy...

      source

      • h0rnman@lemmy.dbzer0.com ⁨2⁩ ⁨weeks⁩ ago

        Sab might have its own mask settings - it would be worth looking at. Same thing applies here - subtract the mask part from 7 to get the real permissions. In this case, mask 002 translates into 775. This gives the uid and gid that the container is running under (probably defined in a variable somewhere) Read/Write/Execute, but anyone else Read/Execute. The “anyone else” would just be any account on the system (regardless of access method) that didn’t match on the actual uid or gid value.

        source