Sonarr LXC running as root - permission issue

[chadnick84]

Running an unprivileged container of the most recent Sonarr LXC script. Sonarr doesn't appear to run as sonarr/media as has been suggested it should but as root. I've mounted an NFS share from the underlying host and mapped the group to a group id that root is a member of, can create and delete files when logged into the container itself but can't add the folder to Sonarr as it cites root doesn't have permission to write to it. Any ideas/suggestions?

[burgerga]

All arr apps run as root using the community scripts IIRC. What are your permissions on that folder on the proxmox host and in the sonarr LXC, and what is your id mapping?

[chadnick84]

Sorry I was basing that off the posts in this discussion - tteck/Proxmox#1738.

Proxmox

LXC Container

mp0: /mnt/lake/,mp=/lake
lxc.idmap: u 0 100000 1001
lxc.idmap: g 0 100000 1001
lxc.idmap: u 1001 1001 1
lxc.idmap: g 1001 1001 1
lxc.idmap: u 1002 101002 64534
lxc.idmap: g 1002 101002 64534

ID mapping

root is a member of group lxc_shares at both the proxmox and LXC container level.

Like I say, within the container as root I can write to the folders without issue.

[burgerga]

Hmm, nothing weird I can see. Did you check that other files in the container are also owned by 1001 and not by 101001? (https://forum.proxmox.com/threads/uid-mapping-and-permission-issue.126660/#post-553394)

And I have chmod g+s on the folders to make sure that newly created files are also owned by same group

[chadnick84]

The rest of the files in the container were owned by root. Changing the permissions to allow all users rwx sorted it, but wasn't my preference. In the end I ditched the id mapping, created new user and group on TrueNas with UID/GID of 100000 and changed the folder owner to those. Added my other users that should have access to those folders to that GID and that did the trick while not granting all users rwx. Thanks for your advice.