Configuring Host Path Validation
2 minute read.Last Modified 2023-05-26 11:36 EDT
TrueNAS SCALE uses host path safety checks to ensure that host path volumes are secure when creating apps. We recommend creating datasets for applications that do not share the same host path as an SMB or NFS share.
Since TrueNAS considers shared host paths non-secure, apps that use shared host paths (such as an SMB shared dataset) fail to deploy.
If you group share and application data under a common dataset (such as media) where both use a path such as /tank/media/, the application fails to deploy.
You can still group shares and applications under media, but you must alter the path for shares and apps, such as /tank/media-shares or /tank/media/shares/sharename, and /tank/media-apps or /tank/media/apps/appname.
The paths differ enough to use host path validation and avoid issues that prevent application deployment.
We do not recommend disabling host path safety checks since shared host paths are non-secure.
If you want apps to deploy in a shared host path, disable Enable Host Path Safety Checks in Applications > Settings > Advanced Settings
Disabling host path safety checks might be helpful if you intend to have an app running in a shared dataset. For example, if you have apps that perform virus detection or media management and want them to work on files in your shared dataset.