TeamSpeak-Systems / ts-services

TeamSpeak 5 service collection for docker compose deployments
73 stars 5 forks source link

Service teamspeak restarting - permission error #23

Closed trnxtrnx closed 1 year ago

trnxtrnx commented 1 year ago

Hello. If I start services (docker compose up -d), the teamspeak service keeps restarting and in the service log, there is an error: /opt/tsserver/entrypoint.sh: line 167: /var/tsserver/query_ip_allowlist.txt: Permission denied

It happens only when I use tags beta-58rc20, beta-58rc19, beta-58rc18. When I used tags beta-58rc12 or beta-58rc10, I didn´t have any problem with starting services.

What am I doing wrong? Thanks for any advices.

adevries17 commented 1 year ago

I ran into this issue as well. Had to chmod permissions to 777 for the text files and parent directory. It may be possible that lower permissions are enough, I haven't gotten around to trying other permission levels yet.

qknight commented 1 year ago

Hi,

I had tested the deployment on Windows where docker desktop mapps the host FS into the guest FS much different than on Linux. On Linux, all you have to do is granting the teamspeak_server folder (and all the content within) to the user:group 9987:9987.

In the coming releases we'll probably revert back to a docker volume usage over sharing host FS with guest FS. If the FS mapping on Linux were done as on Windows or Mac this would not be a problem but the docker socket does not know which UID/GID made the call so doing a proper mapping is rather complicated.

fix

Make sure that the teamspeak_server folder on the host FS has UID/GID 9987:9987 and then I'll work.

chown 9987:9987 teamspeak_server

Also ensure that files inside the teamspeak_server folder also have the same UID/GID assignment.

Note: Using chmod 777 is insecure but will also work.

trnxtrnx commented 1 year ago

Thank you very much guys, set the right UID/GID to group works.

qknight commented 1 year ago

This will be fixed with the upcoming beta-58rc22 ts-services release. If the problem persists afterwards please reopen.