Upgraded to 22.12.1 from 22.12.0, now apps with SMB shared host paths won't deploy

[Belperite]

Hi,

I've just upgraded to 22.12.1 from 22.12.0, and now apps such as sonarr, radarr etc. will not deploy where they have a host path set which is also SMB shared. I know this has been discussed a lot previously, but the behaviour seems to have changed from 22.12.0 in that this wasn't a problem where a *parent* path was SMB shared.

For example:
SMB share: /mnt/rpool/media
Host path mount for the app: /mnt/rpool/media/tv

The above scenario was not a problem in 22.12.0, but now seems to be a problem in 22.12.1.

I know I can disable host path safety checks, but before I do, is anyone else having this issue and is there a different fix? Is there more strict checking in 22.12.1?

Thanks,
Rich

 

[Belperite]

Sorry, I've been reading further. It seems this has indeed been patched out. Is there a way of sharing a dataset that is used by a non-truecharts app (so not via the NFS method)?

 

[Belperite]

OK - because I don't want to change too much around at the moment, and I'm using a couple of non-truecharts containers with host paths (so can't use the NFS workaround), I've chickened out and booted back into 22.12.0 for now where the parent path "feature" works. I'll be following these forum pages with interest to see how this issue develops as people upgrade.

 

[vlad86]

Hello,

Did the same thing, upgraded to 22.12.1 from 22.12.0 and plex and deluge won't start be cause I have the dataset shared through SMB and the host path for the apps set on a folder in the SMB share (this was the "fix" for 22.12.0 that now is "patched").
Currently I found no way to use a share to add stuff to Plex with this version. I do understand security, but this leaves no solution so far. Or perhaps we don't know it, but it's far form user friendly.
Other fixes that were stated for 22.12.0 like runAsUser being changed from root leave the apps not working and so far I had to revert to 22.12.0.
I hope the 22.12.1 version at least patched the SMB share permissions bug I found when using domain users on a domain joined server. Or the SG quota not working on a domain joined server. Going to check this tomorrow, and submit some bugs if it's still busted. Perhaps do some good.

Will follow this perhaps others have better nerves and more time to find solutions or tell us how it should be done.

Have a nice evening,
Vlad

 

[FatFish]

I got the same issue and solved it by unchecking "Enable Host Path Safety Checks" in "Apps - Settings - Advanced Settings". It works well on my NAS.

Please check this post (https://www.truenas.com/community/threads/apps-host-path-access-problem-with-smb.105449/post-725739) for more details

 

[TinyWorkshop]

I got the same issue and solved it by unchecking "Enable Host Path Safety Checks" in "Apps - Settings - Advanced Settings". It works well on my NAS.

Please check this post (https://www.truenas.com/community/threads/apps-host-path-access-problem-with-smb.105449/post-725739) for more details

same for me, simply uncheck that setting

 

[Hecsall]

Same issue here, but I didn't want to uncheck that "Enable Host Path Safety Checks" because it could lead to data loss/corruption.

If anyone is interested, I found a temporary "workaround" that's probably safer:

For context, my current setup is:

SMB Shared:
/mnt/pool/media

HostPaths used in apps such as Jellyfin, Sonarr, Radarr etc:
/mnt/pool/media/movies
/mnt/pool/media/series

- Stop all apps that are stuck in "Deploying" state
- In TrueNAS GUI go to "Shares" in the side menu and stop your SMB share that's causing issues (in my case /mnt/pool/media)
- Start the apps that use that share
- Once they are "Active", re-enable the share you stopped before

I just tried it and it seems to work, Sonarr was still able to download episodes and move them to the correct folder.
It's not a permanent solution, but if you don't restart your NAS and you can live some time without upgrading your apps this could work for a while.

Hope this helps

 

[LarsR]

The folks from truecharts recommend nfs for app storage and have a guide on their homepage
https://truecharts.org/manual/SCALE/guides/nfs-share/
I used it yesterday to switch from hostpath to nfs and had no problems.

 

[sakuyamaij]

The folks from truecharts recommend nfs for app storage and have a guide on their homepage
https://truecharts.org/manual/SCALE/guides/nfs-share/
I used it yesterday to switch from hostpath to nfs and had no problems.

Works well. I think this is the best way for you can both enable smb and NFS for a path

 

[TinyWorkshop]

Same issue here, but I didn't want to uncheck that "Enable Host Path Safety Checks" because it could lead to data loss/corruption.

If anyone is interested, I found a temporary "workaround" that's probably safer:

For context, my current setup is:

SMB Shared:
/mnt/pool/media

HostPaths used in apps such as Jellyfin, Sonarr, Radarr etc:
/mnt/pool/media/movies
/mnt/pool/media/series

- Stop all apps that are stuck in "Deploying" state
- In TrueNAS GUI go to "Shares" in the side menu and stop your SMB share that's causing issues (in my case /mnt/pool/media)
- Start the apps that use that share
- Once they are "Active", re-enable the share you stopped before

I just tried it and it seems to work, Sonarr was still able to download episodes and move them to the correct folder.
It's not a permanent solution, but if you don't restart your NAS and you can live some time without upgrading your apps this could work for a while.

Hope this helps

for now I think is better switch back to 22.12.0

 

[indivision]

Is it true that NFS on Windows involves changing the default anonymous ID to the id you want to log in as? If so, I feel that's too wonky of a solution for Windows use.

One possible solution is to use Nextcloud. You should be able to use the Nextcloud desktop app to make the folders you used to reach with SMB available through Windows Explorer, etc.

I imagine the performance isn't as good though...

 

[rustsind]

The folks from truecharts recommend nfs for app storage and have a guide on their homepage
https://truecharts.org/manual/guides/nfs-share/
I used it yesterday to switch from hostpath to nfs and had no problems.

HI guys,

I checked that Truenas version is 22.12.1 and the app chart repo updated successfully, but for:
1) plex 1.31.0.6654_1.7.28
2) qbittorent 4.5.1_1.0.10

There is no shuch dropdown menu "Type of storage" to change host path to NFS in deployment window.

Any suggestions?

Thanks!

 

[FrostyCat]

You need to use Truecharts for that feature (yellow), not the official apps (blue). Add the Truecharts catalog first.

 

[speedtriple]

Same in 22.12.1 as on 22.12.0. Syncthing stuck on "deploying".

For Syncthing to deploy, still have to open Shares, disable SMB Share for Syncthing. Open Apps, stop Syncthing. Start Syncthing and the watch Syncthing status change to "Active". Open Shares, enable Share for Syncthing again.

In other words, no change in 22.12.1 with regard to this phenomena.

 

[WarnesJ]

I had the same issue happen to me effecting the Plex app. It ran fine on TrueNAS SCALE 22.12.0 but since I've updated to TrueNAS SCALE 22.12.1 it now gets stuck at "DEPLOYING" with the error about my host path also being used with SMB. My dataset and share arrangement is very similar to @Belperite. :(

I've disabled the Host Path Safety Checks in the meantime to get Plex back up and running. I'm kind of disappointed that this happened because I had to move a lot of data around when 22.12.0 first introduced the host path checks and followed the recommendations. But now to see its a problem again is disappointing.

 

[FindingFilene]

Hey, everybody, thank you for reading this post. Memorable smiley list:
Based on this thread, I intend to follow this NFS Share guide (URL updated from @LarsR 's post : https://truecharts.org/manual/SCALE/guides/nfs-share ) from TrueCharts, after I put in the TrueCharts catalog in my App Catalog listing. I had to upgrade because of this, so that must mean it was an intentional breaking by TrueCharts--if people's visible apps are being exploited on zero-days, they need to be aware their TrueCharts apps won't upgrade until they confront the security problem safeguard in the latest TrueNAS. If you're grumpy about it, there's subtext us newbs aren't aware of to global cybersecurity. B)

It looks like you create a NFS share under your Linux list, and then you basically list that path one-to-one for the share listed and used by your TrueCharts app. Thank you everybody for this information.

 

[Saberwolf]

Uncheck enable host path safety checks app will run like they used to

 

[FrostyCat]

Uncheck enable host path safety checks app will run like they used to

Better if you migrate to NFS, if that checkbox gets removed whatcha gonna do?

 

[Saberwolf]

Better if you migrate to NFS, if that checkbox gets removed whatcha gonna do?

He was having issues with SMB not NFS Switch to NFS does not mitigate his issue just complicates it SMB is windows shares would be one hell of a mess trying to add NFS SUPPORT TO windows then to uncheck a box in your server that is imposed by the UI creator

 

[crownrai]

stick to the topic at hand he was having issues with SMB not NFS Switch to NFS does not mitigate his issue just complicates it SMB is windows shares would be one hell of a mess trying to add NFS SUPPORT TO windows then to uncheck a box in your server that is imposed by the UI creator

@FrostyCat is not suggesting to switch from SMB shares to NFS Shares. They were referring to changing App Storage from "Host Path" to "NFS Share". This is the currently supported method for mounting datasets/folders from TrueNas into Apps.