search

truecharts / public

Community Helm Chart Repository
https://truecharts.org
GNU Affero General Public License v3.0
1.13k stars 619 forks source link

[vanDam][ManyFold] New install of vanDam/Manyfold can't add a library because of permissions issues #27347

Closed yodatak closed 1 day ago

yodatak commented 1 day ago

Chart Name

van-dam

Operating System

other

Deployment Method

FluxCD

Chart Version

0.8.0

Kubernetes Events

No events all clear !

Chart Logs

23:25:16 rails.1              | W, [2024-10-06T23:25:16.312410 #224]  WARN -- : [7b881b39-7fe0-410c-a907-b7c0530d64e0] Scoped order is ignored, it's forced to be batch order.
23:25:16 rails.1              | I, [2024-10-06T23:25:16.343614 #224]  INFO -- : [7b881b39-7fe0-410c-a907-b7c0530d64e0] {"method":"POST","path":"/libraries","format":"html","controller":"LibrariesController","action":"create","status":200,"allocations":14729,"duration":80.31,"view":47.5,"db":10.21,"@timestamp":"2024-10-06T21:25:16.343Z","@version":"1","message":"[200] POST /libraries (LibrariesController#create)"}
23:25:22 rails.1              | I, [2024-10-06T23:25:22.313118 #224]  INFO -- : [a5bcf6b6-3192-422f-bb6b-00eeb5cbb735] {"method":"GET","path":"/health","format":"*/*","controller":"HealthController","action":"index","status":200,"allocations":515,"duration":2.37,"view":0.13,"db":0.43,"@timestamp":"2024-10-06T21:25:22.313Z","@version":"1","message":"[200] GET /health (HealthController#index)"}
23:25:25 rails.1              | I, [2024-10-06T23:25:25.311459 #224]  INFO -- : [37d52d61-de06-49f3-a84f-207f6f24d0a8] {"method":"GET","path":"/health","format":"*/*","controller":"HealthController","action":"index","status":200,"allocations":515,"duration":1.51,"view":0.09,"db":0.36,"@timestamp":"2024-10-06T21:25:25.311Z","@version":"1","message":"[200] GET /health (HealthController#index)"}
23:25:34 rails.1              | I, [2024-10-06T23:25:34.317284 #224]  INFO -- : [d26a9676-e255-4d92-bbcc-7388d95a247a] {"method":"GET","path":"/health","format":"*/*","controller":"HealthController","action":"index","status":200,"allocations":515,"duration":4.31,"view":0.26,"db":1.1,"@timestamp":"2024-10-06T21:25:34.317Z","@version":"1","message":"[200] GET /health (HealthController#index)"}
23:25:40 rails.1              | I, [2024-10-06T23:25:40.318775 #240]  INFO -- : [a9dfca64-346f-4ff0-99f7-74cf4ea767aa] {"method":"GET","path":"/health","format":"*/*","controller":"HealthController","action":"index","status":200,"allocations":529,"duration":4.68,"view":0.28,"db":1.26,"@timestamp":"2024-10-06T21:25:40.318Z","@version":"1","message":"[200] GET /health (HealthController#index)"}
23:25:46 rails.1              | I, [2024-10-06T23:25:46.318016 #226]  INFO -- : [a920115f-e7d6-435c-abc7-14894cc3ef36] {"method":"GET","path":"/health","format":"*/*","controller":"HealthController","action":"index","status":200,"allocations":527,"duration":4.8,"view":0.32,"db":1.21,"@timestamp":"2024-10-06T21:25:46.317Z","@version":"1","message":"[200] GET /health (HealthController#index)"}
23:25:55 rails.1              | I, [2024-10-06T23:25:55.317577 #233]  INFO -- : [f2d43cff-6085-4a54-9d91-d3dbdabcbce2] {"method":"GET","path":"/health","format":"*/*","controller":"HealthController","action":"index","status":200,"allocations":529,"duration":4.73,"view":0.35,"db":1.18,"@timestamp":"2024-10-06T21:25:55.317Z","@version":"1","message":"[200] GET /health (HealthController#index)"}
23:25:58 rails.1              | I, [2024-10-06T23:25:58.313993 #240]  INFO -- : [3e42b5db-ce3f-47f0-bf17-f1a72a4644c7] {"method":"GET","path":"/health","format":"*/*","controller":"HealthController","action":"index","status":200,"allocations":515,"duration":2.7,"view":0.17,"db":0.65,"@timestamp":"2024-10-06T21:25:58.313Z","@version":"1","message":"[200] GET /health (HealthController#index)"}
23:26:10 rails.1              | I, [2024-10-06T23:26:10.314198 #224]  INFO -- : [aa7dff34-5dc9-44d2-8e05-784b0b5859cf] {"method":"GET","path":"/health","format":"*/*","controller":"HealthController","action":"index","status":200,"allocations":515,"duration":2.53,"view":0.18,"db":0.67,"@timestamp":"2024-10-06T21:26:10.314Z","@version":"1","message":"[200] GET /health (HealthController#index)"}
23:26:10 rails.1              | I, [2024-10-06T23:26:10.314413 #233]  INFO -- : [aaacac46-c69f-4993-994d-c717651f38c7] {"method":"GET","path":"/health","format":"*/*","controller":"HealthController","action":"index","status":200,"allocations":527,"duration":2.54,"view":0.17,"db":0.58,"@timestamp":"2024-10-06T21:26:10.314Z","@version":"1","message":"[200] GET /health (HealthController#index)"}
23:26:22 rails.1              | I, [2024-10-06T23:26:22.312165 #233]  INFO -- : [8ea5a970-4d5c-4685-8902-4074871cb727] {"method":"GET","path":"/health","format":"*/*","controller":"HealthController","action":"index","status":200,"allocations":515,"duration":1.63,"view":0.15,"db":0.42,"@timestamp":"2024-10-06T21:26:22.312Z","@version":"1","message":"[200] GET /health (HealthController#index)"}
23:26:25 rails.1              | I, [2024-10-06T23:26:25.312130 #233]  INFO -- : [2494d3bf-06be-4f7d-ae3f-45fe1710031b] {"method":"GET","path":"/health","format":"*/*","controller":"HealthController","action":"index","status":200,"allocations":527,"duration":1.84,"view":0.13,"db":0.53,"@timestamp":"2024-10-06T21:26:25.312Z","@version":"1","message":"[200] GET /health (HealthController#index)"}
23:26:34 rails.1              | I, [2024-10-06T23:26:34.318127 #233]  INFO -- : [6c6009be-38c2-4d9d-a9e8-7ae6b9b8aabc] {"method":"GET","path":"/health","format":"*/*","controller":"HealthController","action":"index","status":200,"allocations":515,"duration":4.82,"view":0.32,"db":1.16,"@timestamp":"2024-10-06T21:26:34.317Z","@version":"1","message":"[200] GET /health (HealthController#index)"}
23:26:40 rails.1              | I, [2024-10-06T23:26:40.318108 #240]  INFO -- : [dd2a507e-4f7c-4149-ae69-a62a0a396f17] {"method":"GET","path":"/health","format":"*/*","controller":"HealthController","action":"index","status":200,"allocations":515,"duration":4.5,"view":0.27,"db":1.08,"@timestamp":"2024-10-06T21:26:40.317Z","@version":"1","message":"[200] GET /health (HealthController#index)"}
23:26:46 rails.1              | I, [2024-10-06T23:26:46.318053 #233]  INFO -- : [05abd906-9c45-48a6-9020-cb3cbbe903d5] {"method":"GET","path":"/health","format":"*/*","controller":"HealthController","action":"index","status":200,"allocations":515,"duration":5.03,"view":0.35,"db":1.23,"@timestamp":"2024-10-06T21:26:46.317Z","@version":"1","message":"[200] GET /health (HealthController#index)"}
23:26:55 rails.1              | I, [2024-10-06T23:26:55.318209 #240]  INFO -- : [7428e177-4c04-420e-86a2-32e6c8fb5b4d] {"method":"GET","path":"/health","format":"*/*","controller":"HealthController","action":"index","status":200,"allocations":515,"duration":4.82,"view":0.33,"db":1.16,"@timestamp":"2024-10-06T21:26:55.317Z","@version":"1","message":"[200] GET /health (HealthController#index)"}
23:26:55 rails.1              | W, [2024-10-06T23:26:55.608645 #240]  WARN -- : [43b3fbe5-bec7-4de1-be59-43efbcbaaf33] Scoped order is ignored, it's forced to be batch order.
23:26:55 rails.1              | I, [2024-10-06T23:26:55.628264 #240]  INFO -- : [43b3fbe5-bec7-4de1-be59-43efbcbaaf33] {"method":"POST","path":"/libraries","format":"html","controller":"LibrariesController","action":"create","status":200,"allocations":42181,"duration":89.95,"view":29.27,"db":14.78,"@timestamp":"2024-10-06T21:26:55.628Z","@version":"1","message":"[200] POST /libraries (LibrariesController#create)"}
23:26:58 rails.1              | I, [2024-10-06T23:26:58.311953 #240]  INFO -- : [1ae6f055-dfe0-45d3-bbbf-21ff9c96a03d] {"method":"GET","path":"/health","format":"*/*","controller":"HealthController","action":"index","status":200,"allocations":515,"duration":1.67,"view":0.11,"db":0.43,"@timestamp":"2024-10-06T21:26:58.311Z","@version":"1","message":"[200] GET /health (HealthController#index)"}

Chart Configuration

---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: manyfold
  namespace: 3d
spec:
  chart:
    spec:
      chart: van-dam
      interval: 15m
      reconcileStrategy: ChartVersion
      sourceRef:
        kind: HelmRepository
        name: truecharts-oci
        namespace: flux-system
      version: 0.8.0
  test:
    enable: true
    ignoreFailures: false
  install:
    remediation:
      retries: 1
  interval: 5m
  values:
    image:
      repository: ghcr.io/manyfold3d/manyfold
      tag: 0.80.1@sha256:4060b459b0f3eb5e8dc4474a835cfe660abb429f4653db8bbac8fd67847b223e
      pullPolicy: IfNotPresent

    ingress:
      manyfold-main:
        enabled: true
        primary: true
        ingressClassName: traefik
        hosts:
          - host: XXXXXX
            paths:
              - path: /
                pathType: Prefix
        tls:
          - hosts:
              - XXXXXX # host
        integrations:
          traefik:
            enableFixedMiddlewares: false
          homepage:
            enabled: true
            group: manyfold
            widget:
              enabled: false

    TZ: Europe/Paris

    persistence:
      3dmodels:
        enabled: true
        hostPath: /mnt/XXX/3dmodels
        hostPathType: Directory
        mountPath: "/libraries/models"
        targetSelectAll: true
        type: hostPath

Describe the bug

When i add my livrary it make a permission error and when i check the folder /library the perm the owner is 1000:1000 and not 568 or root

and 1000 is the manyfold default permission i think

https://manyfold.app/get-started/docker

I dont understand why the host_mount is uder 1000:1000 and not 568 or root

/libraries # ls -all / total 20 drwxr-xr-x 1 root root 82 Oct 6 23:24 . drwxr-xr-x 1 root root 82 Oct 6 23:24 .. drwxr-xr-x 1 root root 4096 Sep 7 11:55 bin drwxr-xr-x 2 root root 112 Sep 7 11:55 command drwxr-xr-x 5 root root 360 Oct 6 23:24 dev drwxr-xr-x 1 root root 25 Oct 6 23:24 etc drwxr-xr-x 2 root root 6 Sep 6 13:34 home -rwxr-xr-x 1 root root 1012 Mar 6 2024 init drwxr-xr-x 1 root root 4096 Sep 7 11:55 lib drwxrwsrwx 3 root 568 20 Oct 6 23:24 libraries

/libraries # ls -all /libraries/ total 0 drwxrwsrwx 3 root 568 20 Oct 6 23:24 . drwxr-xr-x 1 root root 82 Oct 6 23:24 .. drwxr-xr-x 2 1000 1000 0 Oct 6 22:47 models

/libraries # ps -aux USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.0 0.0 1292 1044 ? Ss 23:24 0:00 s6-svscan -d4 -- /run/service root 17 0.0 0.0 1072 552 ? S 23:24 0:00 s6-supervise s6-linux-init-shutdownd root 19 0.0 0.0 1128 712 ? Ss 23:24 0:00 s6-linux-init-shutdownd -d3 -c /run/s6/basedir -g 3000 -C -B root 26 0.0 0.0 1072 560 ? S 23:24 0:00 s6-supervise s6rc-oneshot-runner root 27 0.0 0.0 1072 572 ? S 23:24 0:00 s6-supervise s6rc-fdholder root 28 0.0 0.0 1072 572 ? S 23:24 0:00 s6-supervise manyfold root 34 0.0 0.0 1064 656 ? Ss 23:24 0:00 s6-ipcserverd -1 -- s6-ipcserver-access -v0 -E -l0 -i data/rules -- s6-sudod -t 30000 -- /lib/s6-rc/s6-rc-oneshot-run -l ../.. -- root 54 0.0 0.0 1628 868 ? Ss 23:24 0:00 sh ./run manyfold 568 61 0.1 0.1 467080 19340 ? Sl 23:24 0:00 foreman: main 568 142 2.6 1.0 633684 173584 ? Sl 23:24 0:06 puma 6.4.3 (tcp://0.0.0.0:3214) [app] 568 143 2.8 1.0 648136 173832 ? Sl 23:24 0:06 sidekiq 7.3.2 app [0 of 4 busy] 568 144 2.7 1.0 638264 173748 ? Sl 23:24 0:06 sidekiq 7.3.2 app [0 of 1 busy] 568 224 0.4 1.0 667380 172052 ? Sl 23:24 0:00 puma: cluster worker 0: 142 [app] 568 226 0.0 0.9 657252 159524 ? Sl 23:24 0:00 puma: cluster worker 1: 142 [app] 568 233 0.0 0.9 657376 159832 ? Sl 23:24 0:00 puma: cluster worker 2: 142 [app] 568 240 0.1 1.0 659884 163184 ? Sl 23:24 0:00 puma: cluster worker 3: 142 [app] root 347 0.0 0.0 1696 904 pts/0 Ss 23:27 0:00 /bin/sh root 368 0.0 0.0 2516 1624 pts/0 R+ 23:28 0:00 ps -aux

the yaml values and correct

spec:
  automountServiceAccountToken: false
  containers:
    - env:
        - name: TZ
          value: Europe/Paris
        - name: UMASK
          value: '0022'
        - name: UMASK_SET
          value: '0022'
        - name: NVIDIA_VISIBLE_DEVICES
          value: void
        - name: PUID
          value: '568'
        - name: USER_ID
          value: '568'
        - name: UID
          value: '568'
        - name: PGID
          value: '568'
        - name: GROUP_ID
          value: '568'
        - name: GID
          value: '568'

                volumeMounts:
        - mountPath: /libraries/models
          name: 3dmodels
        - mountPath: /dev/shm
          name: devshm
        - mountPath: /libraries
          name: libraries
        - mountPath: /shared
          name: shared
        - mountPath: /tmp
          name: tmp
        - mountPath: /var/logs
          name: varlogs
        - mountPath: /var/run
          name: varrun

To Reproduce

New install and a host path and configure your first library and it goes a persmiison writing error

Expected Behavior

No permission error and no /library 1000 and 568 instead

Screenshots

image

Additional Context

K3S and smb shares

I've read and agree with the following

kqmaverick commented 1 day ago

Manyfold is an incubator chart so bug reports are not accepted.