TrueNAS SCALE Documentation Archive
This content follows the TrueNAS SCALE 22.12 (Bluefin) releases. Archival documentation is provided for reference only and not actively maintained.
Use the Product and Version selectors above to view content specific to different TrueNAS software or major version.

Configuring Host Path Validation

2 minute read.

Last Modified 2023-08-31 13:31 EDT

TrueNAS SCALE uses host path safety checks to ensure that host path volumes are secure when creating apps. We recommend creating datasets for applications that do not share the same host path as an SMB or NFS share.

Since TrueNAS considers shared host paths non-secure, apps that use shared host paths (such as an SMB shared dataset) fail to deploy.

Using Shared Host Paths with Safety Checks Enabled

If you group share and application data under a common dataset (such as media) where both use a path such as /tank/media/, the application fails to deploy.

You can still group shares and applications under media, but you must alter the path for shares and apps, such as /tank/media-shares or /tank/media/shares/sharename, and /tank/media-apps or /tank/media/apps/appname.

The paths differ enough to use host path validation and avoid issues that prevent application deployment.

Using Shared Host Paths with Safety Checks Disabled

We do not recommend disabling host path safety checks since shared host paths are non-secure.

If you want apps to deploy in a shared host path, disable Enable Host Path Safety Checks in Applications > Settings > Advanced Settings

AppsAdvancedSettingsKubernetesSettings

Disabling host path safety checks might be helpful if you intend to have an app running in a shared dataset. For example, if you have apps that perform virus detection or media management and want them to work on files in your shared dataset.