Using ACL permissions in general causes problems. You should only use them in certain situations where there is no alternative to achieve what you need. In most cases you don't need them.
I have published the long explanation of this several times in different threads. I guess if you do a search you should find one of those threads.
Thank You. I'm just going to run with your statement "In most cases you don't need them." as it appears the Permissions on the Privilege screen does the job.
Thank You for the link. It was a very interesting and informative read.
Unfortunately, I am still left with the basic question of WHY do we have Permissions ( R/W, R, No Access ) in both the Privileges screen AND on the ACL screen. From what I understand in the linked explanation, Privileges should be used, ACL should not be used, yet the examples in the document show the use of the ACL permissions, without mentioning if the exact same thing can be done using the Privileges Permissions.
Is there a simple mans explanation for this.
The more I read, the less it makes any sense.
I have OMV6 with a number of Shared Folders.
Under the USERS section of OMV6 :
I have Users for 4 family members ( parent1, parent2, child1, child2 - let's call them P1, P2, C1, C2 )
I have 2 Groups - GroupParents ( GP ) ( with P1 and P2 ) and GroupKids ( GK ) ( with C1 and C2 )
The Storage > Shared Folders > ACL page has the settings for Admin / Users / Other.
If I understand correctly, these are 'general overall default' settings. So if the Folder ACL is set to 'Users = Read/Write/Execute' ( R/W/X ) then all users ( P1, P2, C1, C2 ) will have R/W/X for this Folder, UNLESS the Privileges for the User is set otherwise.
Through experimentation, it appears that any changes I make to the "R/W - W - No Access" settings in OMV6 > Users > Users > C1 ( or any specific user ) are also shown in OMV6 > Shared Folders > Privileges for the Folder.
So my understanding (?) is that :
if I'm adding a new User, and want to set Privileges for each folder, it would be easiest to do this using the OMV6 > Users > Users > 'new user name'.
or
if adding a new Folder, then use OMV6 > Storage > Shared Folders > Privileges to set access for all the known users for the new folder.
I still don't understand the point of having all the "R/W - W - No Access" settings in the ACL of each Shared Folder ? Isn't this going to contradict / clash / override the settings already created in the Privileges ?
Then with Groups, if a Group is set to 'no access' to a Folder, but one of the Group members ( as a User ) is set to "Read/Write' for the same folder, which setting takes preference ?
Likewise if a Group is set to 'Read/Write' but a group member is ( as a user ) set to 'No Access' then does that user get access to that folder ?
Update :
Couldn't get it working, even though the ISP had allocated me a Static IP the week before.
Took them a while to confirm that cgnat was not enabled.
Eventually removed the mikrotik hap lite router from the setup as I no longer needed that for the purpose that it was originally installed.
Forwarded port 51820 to the IP for the Pi on the Zyxel router, and everything worked perfectly.
Side note : I used a data connection on my android phone to test, and ran WireGuard on the phone to connect to the VPN on the Pi.
At first I couldn't see any files in the SMB shares, then found X-plore File Explorer for android - awesome app that allowed me to setup LAN connection to the Pi Shared folders, as well as FTP connections to my other domains.
Also found that if I enabled Hotspot on the phone, my laptop could connect to the phone over wifi. If I also enabled WireGuard on the laptop, I could not access the files on the Pi. I think having WireGuard active on the phone and the laptop at the same time was conflicting. Turned off WireGuard on the laptop and then I was able to easily see the files on the Pi ( from the laptop ).
On the laptop, it wouldn't see the Pi's files on the mapped network drives that I have set up. I had to go to File Explorer > Network > Pi, so I could see the files.
Is WireGuard the right solution for this ?
I have a Pi4 running OMV6, docker, Containers for Nginx, Portainer, and Shared Folders which I can access on my LAN using SMB and FTP ( Filezilla ).
Very happy and it's very stable.
The Pi has a Static IP address allocated by the network Mikrotik HAP Lite router. My Fixed Fiber internet connection has a Static IP allocated by my ISP.
I use a different port number on the Pi IP for OMV6, Portainer, FTP, SSH ( Putty ), etc
I want to be able to access all of these items when away from home, either from my Laptop, or my Android phone.
Any pointers on how to set this up ? If I activate a WireGuard Client on my laptop or phone, does that mean that all internet comms for those devices will be channeled thru the vpn ?
I think it's solved.
As a precaution, I exported each of the duplicati backup profiles that I had to my local pc.
Based on the info in this page :
I changed the stack editor to :
image: duplicati/duplicati # ghcr.io/linuxserver/duplicati
Did the Update and it pulled the new image, updated, and left me with Duplicati with zero profiles in the list.
Busy importing the profiles from the backups I saved before starting the process.
Have you tried to redeploy the stack? You don't have to change anything, just go to the stack and redeploy it. When you redeploy, a popup will come up asking you if you want to repull the image and redeploy. Click the trigger on that, and I would think that would upgrade you.
went in to Portainer > Stacks > Duplicati > Editor, and Clicked on Actions : Update the Stack.
Popup asked 'Do you want to force an update of the stack' and set that On.
Few seconds and an error appeared :
Failure
Failed to pull images of the stack: duplicati Pulled no matching manifest for linux/arm/v7 in the manifest list entries.
I have OMV6 on a Pi4, Portainer, Docker
In Portainer there's a Stack for Duplicati as well as a Container
When I browse ( from pc ) to the Duplicati IP, I see the Duplicati UI.
On the 'About' screen, I see :
You are currently running Duplicati - 2.0.5.1_beta_2020-01-18
Update 2.0.6.3_beta_2021-06-17 is available, download now
Check for updates nowTried both links and neither Updates the version.
What's the correct procedure to update this app running in a Docker Container ?
Soma again, Thank You for the input and guidance
If it helps anyone in the future :
I have a Pi400 4gb with the Raspberry Pi OS ( with desktop ) running.
My source drive was 500Gb
Target drive was 480 Gb ( SSD in a small USB 3 case )
On the Pi, I used System > Add / Remove Programs
Searched for, and Added gparted to the Pi
Searched for, and Added Clonezilla to the Pi
Used gParted to reduce the source drive partition to 460 Gb
Opened Terminal, and ran : sudo clonezilla
I first tried the 'Local Drive -to- Local Drive' option, but it failed as the target drive was smaller.
Then used the 'Local Part -to- Local Part', to clone the main partition from the source drive to the target drive.
Process took around 3 hours to complete ( maybe should have been faster - see problem below about drive connection )
I then tried a reboot, and could not get a reliable connection to the new drive
Connection was erratic. It would appear, then disappear.
Tried using a powered hub for the drive - same problems.
Swapped USB cables out with another identical case - same problems.
Swapped the SSD to another identical case - same problems.
Did some google-fu and found that the cases / adaptors that use the JMS578 chips, are problematic when used on a Pi. All my cases are identical and all have these chips in the adaptor.
Eventually stumbled on this page :
https://forums.raspberrypi.com/viewtopic.php?t=245931
Did the changes in the article, and 'bingo' - drives load, fast to navigate and read / write, etc.
I understand that the changes made do have an effect on drive speeds, but considering I have 4 of these enclosures, and not looking to buy more ( different brands may also very well have the same chips in the adaptors ), I am going to go with this solution.
Soma Thank You for your very helpful input and advice.
I have decided to rather buy a 480Gb SSD so it will have more free space.
I do have another Pi ( Pi400 4gb ) that I can connect both drives to.
That Pi is running Raspberry Pi OS with a desktop. Is Clonezilla an app that I can install on an OS, or is it an image file that I need to put on an SD card to boot from ?
OMV6 running on Pi4 with external USB 512Gb HD for data storage
Any step-by-step instructions out there for this ?
Looking for a way to :
Clone the USB 512Gb HD ( ext4, around 200Gb used ) to a smaller new 256Gb SSD ( also USB ). Both ext4
I have both drives mounted in OMV6.
I have ssh access from my windows laptop using Putty
I have a load of Shared folders for different family members on the drive, and would really like to not have to set those all up again.
Also have NGINX running in a Docker Container, and data for that is also on the drive.
I explained all that in #13 above. Did I waste my time?
you did not waste your time. I tried your suggestion and it did not work in this case.
Setting the uid=1000,gid=100,file_mode=0644 had no effect whatsoever. It still mounted as u0 g0 and made the nas folder read only.
I don't know if it was user error, or something else ( Pi400, 64bit OS ? ) that didn't like it, but at least I now have a setup that is working as needed.
Thank you for your input
I decided to change direction slightly with this, and instead of mounting the NAS shared SMB folder at bootup, I created a Pi Desktop shortcut to a script to connect ( mount ) to the NAS, and another to disconnect ( unmount ) from the NAS.
Created a file gonas.sh with the contents :
#!/bin/bash
sudo mount.cifs //192.168.1.136/LauraOldPC /home/Laura/NASdrive -o credentials=/home/Laura/.smbcreds,nopermand a file nasOff.sh containing :
#!/bin/bash
sudo umount -a -t cifs -lSet both files as executable :
chmod +x gonas.sh
chmod +x nasOff.shAlso a credentials file ( so the password is hidden ) : .smbcreds with mode 600, containing :
user=Laura
pass=lTY7567GH
domain=WORKGROUPI must add that I struggled with this for hours as the mount seems to be created as root user, and the current user ( 'Laura' in the example ) had no permissions to copy files to the NAS folder, and NAS based files would open as 'read only'
Everything changed and started working perfectly as needed as soon as I added the 'noperm' at the end of the mount line.
No, when the user needs something from the NAS ( maybe once a week ), she can Mount, do what she needs, and then unmount at any time.
Proper fstab entry to mount a samba share on boot? - Ask Ubuntu
also on that page you linked, is this correct ?
Display MoreIf you read it proper (one of the links), you need to create a .credentials file with USER:PASSWORD and pass it to the options
Proper fstab entry to mount a samba share on boot? - Ask Ubuntu
Another one:
Auto-mount Samba / CIFS shares via fstab on Linux | Tim Lehr
Soma yes, I did try that, and it kept saying error 13 permission denied, so I tried to remove the credential file in an attempt to break the problem down to a single file.
Even with the credentials file, running the sudo mount.cifs commands worked as expected, but the fstab entry did not give the same result
Thanks Soma , but this turned in to a few hours of wasted time and total frustration.
I have googled over and over and not finding the solution.
If I use terminal with :
sudo mount.cifs //<IP address of the NAS>/<shared folder name on the NAS> /home/pi/NASdrive -o user=<NAS User Name>
then it will ask me for the password, enter that, and all good.
The NAS folder shows at the top of the File Manager
BUT ..
if I add this entry to the fstab file :
//<IP address of the NAS>/<shared folder name on the NAS> /home/pi/NASdrive cifs user=<NAS User Name> 0 0
and reboot.
When I go back in to the File Manager, and Click on the NASdrive shared folder icon, it does not ask for the password. Instead says :
Error - Mount.cifs: permission denied
Nothing that's not explained on the Raspberry Documentation:
Raspberry Pi Documentation - Remote access
Replace the windows references by Linux/the other Pi and the concept is the same.
perfect. Thank you Soma
Now to work out how to make it remount on boot because as soon as I restarted the Pi, it disappeared again
add the share to fstab
thanks. will try that. anything you can share on adding the share to fstab ?
Hi
Have an existing working OMV6 on a Pi4 with SMB shared folders.
The shared folders are all accessible from other PCs on the network and mapped on various Windows PCs.
Now we added a Pi400 ( Pi4 built in to a keyboard ) to the home LAN network.
I can access the internet from the Pi400, but I don't see how to connect the Pi400 to see the NAS shared folders.
The Pi400 is running the standard RaspberryPi OS 64 bit with desktop.
Ideally, I would like to have the NAS folder listed in the Pi File Manager ( or a desktop link to open the file manager ) so the user can access and retrieve files from the shared NAS folder.
Anyone got simple complete step-by-step for this ?
ok. so seems from the replies that a basic powered USB hub does not have the tech needed to access 2 drives on the hub.
I will simply go with each drive being on its own USB3 port on the Pi
