#Has anything changed on required files permission/upload folder?

1 messages · Page 1 of 1 (latest)

jolly escarp
#

Hi, since a few days (like last week), i can't upload anything anymore (from the web or the app)

Until now, i was running immich as non-root user.
It is running on a unprivileged LXC container as docker containers.
The upload folder was an an SMB mount on my synology, mounted by proxmox, then mounted in the LXC container.
Every file on the upload mount was belonging to root:immich_group, and running the containers as non root was working fine (UID was my lxc user, while the group was the immich group).
And until 10 days ago, everything was working perfectly.

Now, In the immich_server, I get the following error:
ERROR [Error: EPERM: operation not permitted, utime 'upload/upload/966c764b-b7a0-4aa7-a779-f33627dbe72e/89/f2/89f2050d-c89f-4d00-b90a-01c02dcef875.png'] Error uploading file Error: EPERM: operation not permitted, utime 'upload/upload/966c764b-b7a0-4aa7-a779-f33627dbe72e/89/f2/89f2050d-c89f-4d00-b90a-01c02dcef875.png'

However, if I access the container and go to the above path, i can make a "touch toto" that will create the toto file. The file will belong to root:immich_group,with 770 permissions, which is expected per mounting rules ( I (immich) can access file because i belong to immich_group), which should be sufficient no?

So, is there anything that changed in the permission required to worked..?

Note: to bypass the issue, i'm running the containers a root, it's working, but if i can avoid... 🙂

Thanks for any insight!

agile irisBOT
#

:wave: Hey @jolly escarp,

Thanks for reaching out to us. Please follow the recommended actions below; this will help us be more effective in our support effort and leave more time for building Immich immich.

References

Checklist

  1. :ballot_box_with_check: I have verified I'm on the latest release(note that mobile app releases may take some time).
  2. :ballot_box_with_check: I have read applicable release notes.
  3. :ballot_box_with_check: I have reviewed the FAQs for known issues.
  4. :ballot_box_with_check: I have reviewed Github for known issues.
  5. :ballot_box_with_check: I have tried accessing Immich via local ip (without a custom reverse proxy).
  6. :ballot_box_with_check: I have uploaded the relevant logs, docker compose, and .env files using the buttons below or the /upload command.
  7. :ballot_box_with_check: I have tried an incognito window, disabled extensions, cleared mobile app cache, logged out and back in, different browsers, etc. as applicable

(an item can be marked as "complete" by reacting with the appropriate number)

If this ticket can be closed you can use the /close command, and re-open it later if needed.

agile irisBOT
maiden iron
#

probably issue with

IMMICH_PUID=1000
IMMICH_PGID=10000