Need help with vanilla right management, plugin install & docker deployement

moneshaq

Cadet
Joined
Feb 14, 2019
Messages
2
Hello everyone, this will be long !

before heading to the problem i encounter here is a summary of my system and what i've done to it :


HARDWARE :
  • i5-4440 4 cores, 4 Threads 3.2Ghz
  • 24GB 1600Mhz DDR3 RAM
  • MSI B85-G41 PC Mate
  • 2x 3TB Seagate Barracuda 7200RPM HDD Striped
  • 2x 16GB Kingston DataTraveler 3.0 i used to install Freenas
  • LAN-Wired directly to my router
SOFTWARE :
  • FreeNAS 11.2-STABLE
  • IPV4 addr given by DHCP (static IP reservation made in router)
  • Ports 21, 22, 80, 445 and 6217 redirected to FreeNAS IP
  • Workgroup: Family
  • 1 zVol, Kingdom_Hearts :
    • Dataset : iocage (default config)
    • Dataset : Sora ( lz4, atime off) will be used to store home shares of users
    • Dataset : Riku ( lz4, atime on) will be used to store specific shares
    • Dataset : Kairi ( lz4, atime on) will be used to store guest access shares



FreeNAS has been installed 2 times already, the first time i crashed it by using chown command (WebGui wasn't accessible after the command but all other services were. i.e ssh, sftp, ftp, etc...)
on the second install, i imported the Stripe already created and filled with data on the first install.

now onto my problem :
i wanted to make use of the most of Freenas before starting using any plugin. i've setup 5 users (one for each member of my family) each one having it's own group, my account having wheel as auxilliary group and permit sudo.
clients that will access the shares are mix of Windows 10 clients, 1 PS4, several Android devices
on top of this i have created those groups :
  • Family
  • FamilyAdmin
  • Adult
and now the architecture i'm trying to get to work with permissions, nomenclature for brackets is :
( Share_Name | Only group that has access to the share | rights )
owner of Kingdom_Hearts, Sora, Riku & Kairi root:wheel

Code:
Kingdom_Hearts ( Kingdom Hearts | FamilyAdmin | 770 )

|

|___Sora

|    |____user1 ( user1 | wheel, FamilyAdmin, user1 | 770 )

|    |____user2 ( user2 | wheel, FamilyAdmin, user2 | 770 )

|    |____user3 ( user3 | wheel, FamilyAdmin, user3 | 770 )

|    |____user4 ( user4 | wheel, FamilyAdmin, user4 | 770 )

|    |____user5 ( user5 | wheel, FamilyAdmin, user5 | 770 )

|    |____guest ( guest | wheel, FamilyAdmin, guest | 770 )

|

|___Riku

|    |____Series ( Series | wheel, FamilyAdmin, Family, Transmition | 775 )

|    |____Anime ( Anime | wheel, FamilyAdmin, Family, Transmition | 775 )

|    |____Films ( Films | wheel, FamilyAdmin, Family, Transmition | 775 )

|    |____Programs ( Prog | wheel, FamilyAdmin, Family, Transmition | 775 )

|    |____ISOs ( ISO | wheel, FamilyAdmin, Family, Transmition | 775 )

|    |____Bim ( Megara | wheel, FamilyAdmin, Adult, Transmition | 775 )

|

|___Kairi

     |____Exchange ( Swap | everyone | 777 )

     |____Inbox ( Inbox | wheel, FamilyAdmin, guest | 772 )

     |____Outbox ( Outbox | wheel, FamilyAdmin, guest | 773 )



settings the basic rights and making each home chown root:<usergroup> is easy, same goes for the others. the problem i encounter here is how do i restrict share access to specific groups only ? i couldn't find a way to restrict the access like i want it using NFS or SMB (without a WServer, i'm actually trying to avoid setting up one).

Then i wanted to try with nextcloud, guess what ? the plugin seems to be broken...
when i install it via CLI or WebUI using DHCP, fail.
setting up a fixed ipv4 address via CLI or WebUI installs it but then i get http errors all the way because mysql doesn't seem to work in a jail (i really don't want to setup VMs)

finally, i wanted to self-host my BitWarden database but it seems impossible to deploy a docker app that needs docker-compose & mysql (again him)

does anyone that was brave enough to read all the way through here wants / can help ?
 
Last edited:

moneshaq

Cadet
Joined
Feb 14, 2019
Messages
2
sorry for the late response, no i haven't. i tried to start over with a fresh share but couldn't set the right permissions either as a NFS share or SMB share. when i try to change ACL's with a windows client, once i disconnect and reconnect, ACL's are just back to defaults
 
Top