Dataone

I'm encountering issues which I believe might be due to the docker image provided (no open issues on github) "Access to the path '/var/lib/jellyfin/root/default/Movies/options.xml' is denied." The path past /var/lib/jellyfin doesn't seem to exist. I thought this would've been controlled by JELLYFIN_DATA_DIR but that is reported correctly as /config/data. I tried mounting /mnt/user/Docker/appdata/jellyfin/data/root to the path inside the docker container it looks for but that doesn't seem to change anything. The path of root/default/Movies/options.xml that Jellyfin seems to be looking for does exist as /config/data/root/default/Movies/options.xml [03-09 15:43:47] [ERR] MediaBrowser.Controller.Entities.BaseItem: Error loading library options System.UnauthorizedAccessException: Access to the path '/var/lib/jellyfin/root/default/Movies/options.xml' is denied. ---> System.IO.IOException: Permission denied --- End of inner exception stack trace --- at Interop.ThrowExceptionForIoErrno(ErrorInfo errorInfo, String path, Boolean isDirectory, Func`2 errorRewriter) at Microsoft.Win32.SafeHandles.SafeFileHandle.Open(String path, OpenFlags flags, Int32 mode) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share) at System.IO.File.OpenRead(String path) at Emby.Server.Implementations.Serialization.MyXmlSerializer.DeserializeFromFile(Type type, String file) at MediaBrowser.Controller.Entities.CollectionFolder.LoadLibraryOptions(String path) [03-09 15:43:47] [ERR] MediaBrowser.Controller.Entities.BaseItem: Error loading library options System.UnauthorizedAccessException: Access to the path '/var/lib/jellyfin/root/default/TV Shows/options.xml' is denied. ---> System.IO.IOException: Permission denied --- End of inner exception stack trace --- at Interop.ThrowExceptionForIoErrno(ErrorInfo errorInfo, String path, Boolean isDirectory, Func`2 errorRewriter) at Microsoft.Win32.SafeHandles.SafeFileHandle.Open(String path, OpenFlags flags, Int32 mode) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share) at System.IO.File.OpenRead(String path) at Emby.Server.Implementations.Serialization.MyXmlSerializer.DeserializeFromFile(Type type, String file) at MediaBrowser.Controller.Entities.CollectionFolder.LoadLibraryOptions(String path) [03-09 15:43:47] [ERR] MediaBrowser.Controller.Entities.BaseItem: Error loading library options System.UnauthorizedAccessException: Access to the path '/var/lib/jellyfin/root/default/Music/options.xml' is denied. ---> System.IO.IOException: Permission denied --- End of inner exception stack trace --- at Interop.ThrowExceptionForIoErrno(ErrorInfo errorInfo, String path, Boolean isDirectory, Func`2 errorRewriter) at Microsoft.Win32.SafeHandles.SafeFileHandle.Open(String path, OpenFlags flags, Int32 mode) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share) at System.IO.File.OpenRead(String path) at Emby.Server.Implementations.Serialization.MyXmlSerializer.DeserializeFromFile(Type type, String file) at MediaBrowser.Controller.Entities.CollectionFolder.LoadLibraryOptions(String path) [03-09 15:43:47] [ERR] MediaBrowser.Controller.Entities.BaseItem: Error loading library options System.UnauthorizedAccessException: Access to the path '/var/lib/jellyfin/root/default/Books/options.xml' is denied. ---> System.IO.IOException: Permission denied --- End of inner exception stack trace --- at Interop.ThrowExceptionForIoErrno(ErrorInfo errorInfo, String path, Boolean isDirectory, Func`2 errorRewriter) at Microsoft.Win32.SafeHandles.SafeFileHandle.Open(String path, OpenFlags flags, Int32 mode) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share) at System.IO.File.OpenRead(String path) at Emby.Server.Implementations.Serialization.MyXmlSerializer.DeserializeFromFile(Type type, String file) at MediaBrowser.Controller.Entities.CollectionFolder.LoadLibraryOptions(String path) This only affects manually requesting a library scan, Jellyfin still adds media from watching changes to directories. This has occured on 10.6.4, and still on 10.7.0. Thanks

I'm not comfortable running potentially unstable (more so than an rc release) builds where there may be daily changes that break compatability with external clients and plugins, as was seen during the time waiting for 10.7.0-rc1. Regardless it's your decision so no worries

It would be great if you could push a 10.7.0-rc tag. Thanks

Might be easier to determine what's wrong if you post a censored config file

Changed Status to Solved

Anyone know how to fix this in the meantime? Not entirely sure how to figure out what's going wrong with my server when I can't see any log output without this.

Still preset with beta30 This isn't really a minor bug as suggetive by the priority tag - it completely prevents diagnosing when the server crashes ( I have no idea how to figure out what goes wrong with my server, and I don't know how to fix this)

Am I the only person having problems with this plugin resetting "PostUp" & "PostDown" rules within imported configuration files? If the tunnels aren't modified after importing everything remains, but even updating IP or DNS entries results in any Post rules being cleared. If not, it would be great if there's an option to modify those rules within the GUI or at least an option to preverse any that are imported. In my opinion it's a pretty big issue as I require them to modify iptables entries. Cheers

Bump. I always thought the code 43 error was just present with Nvidia passthroughs, but aparently not. I can't find any info about how to fix this for an iGPU. Anyone have any ideas?

You'll need to manually edit the config file after importing it (but make sure it isn't active), as I assume that the plugin ignores everything but the keys etc and generates a config on it's own

What was the workaround that you got previous versions to work with?

At least by default I assume so, yes. My containers using bridged all go through the vpn and all containers using br0 use my home network. I'm sure you can set some iptable/routing rules to modify this if you liked though

WireGuard support hasn't been merged into the 5.x kernel yet anyway, so that means limetech would be building it into the kernel themselves. So I assume they will keep doing the same with the latest 4.x kernels. If you check the release notes for rc8 you'll see it does mention a wireguard update too, so I assume it's still there and will be in the upcoming stable version

I know that this is the trick for Plex, but you may be able to do the same with the jellyfin ports. PostUp = iptables -t nat -I PREROUTING -p tcp --dport *external port* -j REDIRECT --to-ports 32400 (internal plex port) PreDown = iptables -t nat -D PREROUTING -p tcp --dport *external port* -j REDIRECT --to-ports 32400 (internal plex port)

Bug report submitted here: https://forums.unraid.net/bug-reports/stable-releases/672-ipv6-internet-access-despite-ipv4-only-r754/

Alright, will do. Thanks

Thanks for the info, do you know if the routes showing with "IPv4 only" is a bug/unintended behaviour? It still doesn't seem like IPv6 should be doing anything with that network setting presumably disabled. Cheers

Assuming Firefox, does it look like this? If so, you need to disable "privacy.resistFingerprinting" in your about:config, or just use ssh or something similar instead

Hi, My modem does support IPv6, and Unraid appears to be using it to access certain domains. (Notably google) I suppose my issue here is that I believe Unraid should not be assigning IPv6 adresses to interfaces nor even have the routes available when set to "IPv4 only". However, ideally yes, I should be setting up my network to be compatible with IPv6 but for the moment I'd prefer if everything was disabled rather than left in a default state until I decide to manually configure it. (I believe it's using DHCPv6?) Cheers

Bump

As long as your docker containers are using the bridged network option, they will be routed through the vpn. You can verify this by going into a docker container's shell and typing the below text. (Assuming that the docker has curl) curl https://ipinfo.io/ip

"IPv4 + IPv6": root@tower:~# ip route show table all default dev wg0 table 51820 scope link default via 192.168.1.1 dev br0 192.168.1.0/24 dev br0 proto kernel scope link src 192.168.1.101 local 10.64.16.210 dev wg0 table local proto kernel scope host src 10.64.16.210 broadcast 127.0.0.0 dev lo table local proto kernel scope link src 127.0.0.1 local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1 local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1 broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1 broadcast 192.168.1.0 dev br0 table local proto kernel scope link src 192.168.1.101 local 192.168.1.101 dev br0 table local proto kernel scope host src 192.168.1.101 broadcast 192.168.1.255 dev br0 table local proto kernel scope link src 192.168.1.101 local ::1 dev lo proto kernel metric 0 pref medium ::1 dev lo proto kernel metric 256 pref medium local 2404:4408:2375:d500:bdb9:e06b:cd34:24bd dev br0 proto kernel metric 0 pref medium 2404:4408:2375:d500::/64 dev br0 proto ra metric 225 pref medium local fe80::4216:7eff:fe63:b6ba dev eth0 proto kernel metric 0 pref medium local fe80::f083:abff:fe7d:721a dev br0 proto kernel metric 0 pref medium fe80::/64 dev br0 proto kernel metric 256 pref medium fe80::/64 dev eth0 proto kernel metric 256 pref medium ff00::/8 dev wg0 metric 256 pref medium ff00::/8 dev br0 metric 256 pref medium ff00::/8 dev eth0 metric 256 pref medium default via fe80::1af1:45ff:fea4:9ff0 dev br0 proto ra metric 225 pref medium "IPv4 only": root@tower:~# ip route show table all default dev wg0 table 51820 scope link default via 192.168.1.1 dev br0 192.168.1.0/24 dev br0 proto kernel scope link src 192.168.1.101 local 10.64.16.210 dev wg0 table local proto kernel scope host src 10.64.16.210 broadcast 127.0.0.0 dev lo table local proto kernel scope link src 127.0.0.1 local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1 local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1 broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1 broadcast 192.168.1.0 dev br0 table local proto kernel scope link src 192.168.1.101 local 192.168.1.101 dev br0 table local proto kernel scope host src 192.168.1.101 broadcast 192.168.1.255 dev br0 table local proto kernel scope link src 192.168.1.101 local ::1 dev lo proto kernel metric 0 pref medium ::1 dev lo proto kernel metric 256 pref medium local 2404:4408:2375:d500:4216:7eff:fe63:b6ba dev br0 proto kernel metric 0 pref medium 2404:4408:2375:d500::/64 dev br0 proto kernel metric 256 expires 691200sec pref medium local fe80::1c3a:dcff:fede:bb53 dev br0 proto kernel metric 0 pref medium local fe80::4216:7eff:fe63:b6ba dev eth0 proto kernel metric 0 pref medium fe80::/64 dev br0 proto kernel metric 256 pref medium fe80::/64 dev eth0 proto kernel metric 256 pref medium ff00::/8 dev wg0 metric 256 pref medium ff00::/8 dev br0 metric 256 pref medium ff00::/8 dev eth0 metric 256 pref medium default via fe80::1af1:45ff:fea4:9ff0 dev br0 proto ra metric 1024 expires 298sec hoplimit 64 pref medium The only difference I see between the two is a different IPv6 IP for the br0 interface.

Bump. Would someone with 6.8.0-rc7 be able to verify that with "IPv4 only" all IPv6 access is disabled?