Allow a jail to access a mount from another jail

JV9

Dabbler
Joined
Aug 19, 2021
Messages
25
TrueNAS-12.0-U5

I have rclone and mergerfs installed in a jail (plex).

On the plex jail I mount google drive via rclone to media_gdrive, then mergerfs mount media_local & media_gdrive to media. I'm mounting mergerfs with the posix_acl=true option.

I'd like 2 other jails (radarr and sonarr) to be able to read/write to the media mount in the plex jail.

This is a view of the permissions (there are no ACLs on media) from the plex jail:
Code:
root@plex:/jaildata/plexmnt # ls -la
total 26
d---------+  5 root  wheel   5 Aug 22 07:43 .
drwxr-x---+ 10 root  wheel  10 Aug 26 06:12 ..
drwxr-xr-x   1 root  wheel   0 Aug 24 19:23 media
drwxr-xr-x   1 root  wheel   0 Aug 24 19:23 media_gdrive
d---------+  2 root  wheel   2 Aug 22 10:18 media_local


This is a view of the permissions and ACLs from the radarr jail:
Code:
root@radarr:/jaildata/plexmnt # ls -la
total 43
d---------+  5 root  wheel   5 Aug 27 06:34 .
drwxr-x---+ 10 root  wheel  10 Aug 26 06:12 ..
d---------+  2 root  wheel   2 Aug 25 15:10 media
d---------+  2 root  wheel   2 Aug 22 07:43 media_gdrive
d---------+  2 root  wheel   2 Aug 22 10:18 media_local

root@radarr:/jaildata/plexmnt # getfacl media
# file: media
# owner: root
# group: wheel
          user:350:rwxpDdaARWcCos:fd----I:allow
          user:355:rwxpDdaARWcCos:fd----I:allow
         user:1000:rwxpDdaARWcCos:fd----I:allow
          user:972:rwxpDdaARWcCos:fd----I:allow
       user:radarr:rwxpDdaARWcCos:fd----I:allow
          user:502:rwxpDdaARWcCos:fd----I:allow
         everyone@:--------------:fd----I:allow


I believe I need to create an ACL on media from the plex jail and add an entry for 501 (radarr) user.
I've exported the ACL's from radarr to a file called acls, edited the radarr entry to 501 and the 972 entry to plex, and attempted to import them on plex with the following result:
Code:
root@plex:/jaildata/plexmnt # setfacl -b -n -M acls media
setfacl: media: acl_get_file() failed: Operation not supported


Can anyone shed light on how to achieve my goal or am I barking up the wrong tree?

Thanks.
 
Top