Storage management in Immich?

[nebulon]

Immich runs as the cloudron user within the container. If you open a webterminal into the app, can you check if that user has write permissions to the /media/... volume?

[perelin]

Yes, tried that - basic permissions look good. It seem to be an issue with Immich trying to use utime to change timestamps on the mounted share which seem to be an issue somehow for the cloudron user. Some testing on my box shows:

Creating a testfile (touch .test) on the mounted share and then trying to change the timestamp

• works for root (-> touch -t 202501010000 .test)
• does not work for cloudron (-> sudo -u cloudron touch -t 202501010000 .test)

Not sure how to continue.

[nebulon]

For a start, how did you mount the storage box? both SSHFS and CIFS are quite particular about users and permissions. One reason why we don't support moving the main app directory onto such mount points...

[perelin]

I mounted it with the Cloudron build in mount option in the UI. Are there other options? I guess editing fstab by hand will be overwritten at some point

Here is the output of the mountcommand from the console.

root@81deeb68-0628-45ff-bf4c-0e9e294e7935:/media/FSN1-BX1401# mount | grep FSN1-BX1401
//u452885.your-storagebox.de/backup on /media/FSN1-BX1401 type cifs (rw,relatime,vers=3.1.1,cache=strict,username=u452885,uid=808,forceuid,gid=808,forcegid,addr=2a01:04f8:2b03:0981:0000:0000:0000:0002,file_mode=0666,dir_mode=0777,iocharset=utf8,seal,soft,nounix,serverino,mapposix,rsize=4194304,wsize=4194304,bsize=1048576,retrans=1,echo_interval=60,actimeo=1,closetimeo=1)

[nebulon]

right, so the issue is, CIFS with hetzner only knows one uid which is set there in the mount option. This means there are no real user IDs....does it work if you give all users? Although it is still unclear why you can write but not change mtime attribute via touch as cloudron user, if I understand correctly.

I guess that needs more investigation on how to maybe workaround that...

[perelin]

@nebulon said in Storage management in Immich?:

does it work if you give all users?

Not sure what you mean here. Mounting the share with other options? I had the impression I can not do that by myself since its managed by Cloudron.

Would love to make this work. If you tell me what to try Im happy put some time in

[nebulon]

Ah sorry, that was unclear. What I meant was, if you chmod a+rw -R the folder structure? This should give all users read/write access. Maybe that works around the single user CIFS permissions.

[perelin]

Ah, got it. Tried, didnt do anything. But the whole mounted share already had like 777 permissions throughout:

drwxrwxrwx 2 808 808 0 May 21 08:56 immich/

[nebulon]

oh right well you will hit other side-effects then with apps if the filesystem is not actually support those features. This is one of the reasons, we only allow to move the app itself onto very specific filesystems like xfs and ext4. Not sure what can be done if CIFS with hetzner does not allow this. Or maybe you can investigate if you setup the mountpoint manually on the system with other mount options?

[perelin]

Yup, I guess I will experiment a bit with the mount options available. Will report back here if I find something that works, thx!

[perelin]

Footnote: sadly Immich already decided to not support setups where utime is not availble: https://github.com/immich-app/immich/issues/14005

[perelin]

@nebulon so, after some trials this works for me:

• mounted my Storagebox as webdav share on the Cloudron host system in fstab by hand
• added that share as a Filesystem Mountpoint Volume in Cloudron
• clean Immich install
• attached that Volume as a Mount to Immich in Immich Storage options
• moved the Immich data directory to a subdirectory on that Mount in Immich Storage option

See any issues that could come up? Mounting things by hand in fstab is fine for Cloudron?

[nebulon]

Mounting by hand is fine. I don't know about the stability of a webdav mountpoint in linux though. How are you mounting it?