Dataone

I'm encountering issues which I believe might be due to the docker image provided (no open issues on github) "Access to the path '/var/lib/jellyfin/root/default/Movies/options.xml' is denied." The path past /var/lib/jellyfin doesn't seem to exist. I thought this would've been controlled by JELLYFIN_DATA_DIR but that is reported correctly as /config/data. I tried mounting /mnt/user/Docker/appdata/jellyfin/data/root to the path inside the docker container it looks for but that doesn't seem to change anything. The path of root/default/Movies/options.xml that Jellyfin seems to be looking for does exist as /config/data/root/default/Movies/options.xml [03-09 15:43:47] [ERR] MediaBrowser.Controller.Entities.BaseItem: Error loading library options System.UnauthorizedAccessException: Access to the path '/var/lib/jellyfin/root/default/Movies/options.xml' is denied. ---> System.IO.IOException: Permission denied --- End of inner exception stack trace --- at Interop.ThrowExceptionForIoErrno(ErrorInfo errorInfo, String path, Boolean isDirectory, Func`2 errorRewriter) at Microsoft.Win32.SafeHandles.SafeFileHandle.Open(String path, OpenFlags flags, Int32 mode) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share) at System.IO.File.OpenRead(String path) at Emby.Server.Implementations.Serialization.MyXmlSerializer.DeserializeFromFile(Type type, String file) at MediaBrowser.Controller.Entities.CollectionFolder.LoadLibraryOptions(String path) [03-09 15:43:47] [ERR] MediaBrowser.Controller.Entities.BaseItem: Error loading library options System.UnauthorizedAccessException: Access to the path '/var/lib/jellyfin/root/default/TV Shows/options.xml' is denied. ---> System.IO.IOException: Permission denied --- End of inner exception stack trace --- at Interop.ThrowExceptionForIoErrno(ErrorInfo errorInfo, String path, Boolean isDirectory, Func`2 errorRewriter) at Microsoft.Win32.SafeHandles.SafeFileHandle.Open(String path, OpenFlags flags, Int32 mode) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share) at System.IO.File.OpenRead(String path) at Emby.Server.Implementations.Serialization.MyXmlSerializer.DeserializeFromFile(Type type, String file) at MediaBrowser.Controller.Entities.CollectionFolder.LoadLibraryOptions(String path) [03-09 15:43:47] [ERR] MediaBrowser.Controller.Entities.BaseItem: Error loading library options System.UnauthorizedAccessException: Access to the path '/var/lib/jellyfin/root/default/Music/options.xml' is denied. ---> System.IO.IOException: Permission denied --- End of inner exception stack trace --- at Interop.ThrowExceptionForIoErrno(ErrorInfo errorInfo, String path, Boolean isDirectory, Func`2 errorRewriter) at Microsoft.Win32.SafeHandles.SafeFileHandle.Open(String path, OpenFlags flags, Int32 mode) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share) at System.IO.File.OpenRead(String path) at Emby.Server.Implementations.Serialization.MyXmlSerializer.DeserializeFromFile(Type type, String file) at MediaBrowser.Controller.Entities.CollectionFolder.LoadLibraryOptions(String path) [03-09 15:43:47] [ERR] MediaBrowser.Controller.Entities.BaseItem: Error loading library options System.UnauthorizedAccessException: Access to the path '/var/lib/jellyfin/root/default/Books/options.xml' is denied. ---> System.IO.IOException: Permission denied --- End of inner exception stack trace --- at Interop.ThrowExceptionForIoErrno(ErrorInfo errorInfo, String path, Boolean isDirectory, Func`2 errorRewriter) at Microsoft.Win32.SafeHandles.SafeFileHandle.Open(String path, OpenFlags flags, Int32 mode) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share) at System.IO.File.OpenRead(String path) at Emby.Server.Implementations.Serialization.MyXmlSerializer.DeserializeFromFile(Type type, String file) at MediaBrowser.Controller.Entities.CollectionFolder.LoadLibraryOptions(String path) This only affects manually requesting a library scan, Jellyfin still adds media from watching changes to directories. This has occured on 10.6.4, and still on 10.7.0. Thanks

I'm not comfortable running potentially unstable (more so than an rc release) builds where there may be daily changes that break compatability with external clients and plugins, as was seen during the time waiting for 10.7.0-rc1. Regardless it's your decision so no worries

It would be great if you could push a 10.7.0-rc tag. Thanks

Might be easier to determine what's wrong if you post a censored config file

Anyone know how to fix this in the meantime? Not entirely sure how to figure out what's going wrong with my server when I can't see any log output without this.

Am I the only person having problems with this plugin resetting "PostUp" & "PostDown" rules within imported configuration files? If the tunnels aren't modified after importing everything remains, but even updating IP or DNS entries results in any Post rules being cleared. If not, it would be great if there's an option to modify those rules within the GUI or at least an option to preverse any that are imported. In my opinion it's a pretty big issue as I require them to modify iptables entries. Cheers

Bump. I always thought the code 43 error was just present with Nvidia passthroughs, but aparently not. I can't find any info about how to fix this for an iGPU. Anyone have any ideas?

You'll need to manually edit the config file after importing it (but make sure it isn't active), as I assume that the plugin ignores everything but the keys etc and generates a config on it's own

At least by default I assume so, yes. My containers using bridged all go through the vpn and all containers using br0 use my home network. I'm sure you can set some iptable/routing rules to modify this if you liked though

I know that this is the trick for Plex, but you may be able to do the same with the jellyfin ports. PostUp = iptables -t nat -I PREROUTING -p tcp --dport *external port* -j REDIRECT --to-ports 32400 (internal plex port) PreDown = iptables -t nat -D PREROUTING -p tcp --dport *external port* -j REDIRECT --to-ports 32400 (internal plex port)

Bug report submitted here: https://forums.unraid.net/bug-reports/stable-releases/672-ipv6-internet-access-despite-ipv4-only-r754/

Alright, will do. Thanks

Thanks for the info, do you know if the routes showing with "IPv4 only" is a bug/unintended behaviour? It still doesn't seem like IPv6 should be doing anything with that network setting presumably disabled. Cheers

Assuming Firefox, does it look like this? If so, you need to disable "privacy.resistFingerprinting" in your about:config, or just use ssh or something similar instead

Hi, My modem does support IPv6, and Unraid appears to be using it to access certain domains. (Notably google) I suppose my issue here is that I believe Unraid should not be assigning IPv6 adresses to interfaces nor even have the routes available when set to "IPv4 only". However, ideally yes, I should be setting up my network to be compatible with IPv6 but for the moment I'd prefer if everything was disabled rather than left in a default state until I decide to manually configure it. (I believe it's using DHCPv6?) Cheers

Bump

As long as your docker containers are using the bridged network option, they will be routed through the vpn. You can verify this by going into a docker container's shell and typing the below text. (Assuming that the docker has curl) curl https://ipinfo.io/ip

"IPv4 + IPv6": root@tower:~# ip route show table all default dev wg0 table 51820 scope link default via 192.168.1.1 dev br0 192.168.1.0/24 dev br0 proto kernel scope link src 192.168.1.101 local 10.64.16.210 dev wg0 table local proto kernel scope host src 10.64.16.210 broadcast 127.0.0.0 dev lo table local proto kernel scope link src 127.0.0.1 local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1 local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1 broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1 broadcast 192.168.1.0 dev br0 table local proto kernel scope link src 192.168.1.101 local 192.168.1.101 dev br0 table local proto kernel scope host src 192.168.1.101 broadcast 192.168.1.255 dev br0 table local proto kernel scope link src 192.168.1.101 local ::1 dev lo proto kernel metric 0 pref medium ::1 dev lo proto kernel metric 256 pref medium local 2404:4408:2375:d500:bdb9:e06b:cd34:24bd dev br0 proto kernel metric 0 pref medium 2404:4408:2375:d500::/64 dev br0 proto ra metric 225 pref medium local fe80::4216:7eff:fe63:b6ba dev eth0 proto kernel metric 0 pref medium local fe80::f083:abff:fe7d:721a dev br0 proto kernel metric 0 pref medium fe80::/64 dev br0 proto kernel metric 256 pref medium fe80::/64 dev eth0 proto kernel metric 256 pref medium ff00::/8 dev wg0 metric 256 pref medium ff00::/8 dev br0 metric 256 pref medium ff00::/8 dev eth0 metric 256 pref medium default via fe80::1af1:45ff:fea4:9ff0 dev br0 proto ra metric 225 pref medium "IPv4 only": root@tower:~# ip route show table all default dev wg0 table 51820 scope link default via 192.168.1.1 dev br0 192.168.1.0/24 dev br0 proto kernel scope link src 192.168.1.101 local 10.64.16.210 dev wg0 table local proto kernel scope host src 10.64.16.210 broadcast 127.0.0.0 dev lo table local proto kernel scope link src 127.0.0.1 local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1 local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1 broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1 broadcast 192.168.1.0 dev br0 table local proto kernel scope link src 192.168.1.101 local 192.168.1.101 dev br0 table local proto kernel scope host src 192.168.1.101 broadcast 192.168.1.255 dev br0 table local proto kernel scope link src 192.168.1.101 local ::1 dev lo proto kernel metric 0 pref medium ::1 dev lo proto kernel metric 256 pref medium local 2404:4408:2375:d500:4216:7eff:fe63:b6ba dev br0 proto kernel metric 0 pref medium 2404:4408:2375:d500::/64 dev br0 proto kernel metric 256 expires 691200sec pref medium local fe80::1c3a:dcff:fede:bb53 dev br0 proto kernel metric 0 pref medium local fe80::4216:7eff:fe63:b6ba dev eth0 proto kernel metric 0 pref medium fe80::/64 dev br0 proto kernel metric 256 pref medium fe80::/64 dev eth0 proto kernel metric 256 pref medium ff00::/8 dev wg0 metric 256 pref medium ff00::/8 dev br0 metric 256 pref medium ff00::/8 dev eth0 metric 256 pref medium default via fe80::1af1:45ff:fea4:9ff0 dev br0 proto ra metric 1024 expires 298sec hoplimit 64 pref medium The only difference I see between the two is a different IPv6 IP for the br0 interface.

Bump. Would someone with 6.8.0-rc7 be able to verify that with "IPv4 only" all IPv6 access is disabled?

btrfs-scrub(8) recommends around once a month, but less is fine. https://github.com/kdave/btrfsmaintenance is a really nice set of scripts for other distros, but you can look at the timers and etc to figure out what a good frequency is. Follwing this, btrfs-scrub & btrfs-balance are run monthly.

If this is the SQLite DB corruption issue, wasn't there a fix for this in 6.8.0-rc5? You should try upgrading to the latest rc, but make a flash backup first.

Anything in the logs about the reboot being cancelled?

How slow are you talking? The only way I can see of improving speeds from the array would be pre-caching files you use often. Assuming you have a 1Gbit connection, the array should be saturating that, unless you have slow drives or some other array issue.

UPDATE - Bug report submitted here: https://forums.unraid.net/bug-reports/stable-releases/672-ipv6-internet-access-despite-ipv4-only-r754/ UnRaid 6.8.0-rc7. Diagnositcs attached. As the title says, I can access the internet via ipv6 even though I have set ipv4 to only. I am not skilled by any means when it comes to networking, but surely ipv6 should be disabled? br0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 192.168.1.101 netmask 255.255.255.0 broadcast 0.0.0.0 inet6 fe80::2cb5:9cff:fe94:fd69 prefixlen 64 scopeid 0x20<link> inet6 2404:4408:2375:d500:4216:7eff:fe63:b6ba prefixlen 64 scopeid 0x0<global> ether 40:16:7e:63:b6:ba txqueuelen 1000 (Ethernet) RX packets 254036 bytes 50807042 (48.4 MiB) RX errors 0 dropped 141 overruns 0 frame 0 TX packets 254523 bytes 66927758 (63.8 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 eth0: flags=4419<UP,BROADCAST,RUNNING,PROMISC,MULTICAST> mtu 1500 inet6 fe80::4216:7eff:fe63:b6ba prefixlen 64 scopeid 0x20<link> ether 40:16:7e:63:b6:ba txqueuelen 1000 (Ethernet) RX packets 258001 bytes 54625894 (52.0 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 254559 bytes 66932531 (63.8 MiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 wg0: flags=209<UP,POINTOPOINT,RUNNING,NOARP> mtu 1420 inet 10.64.16.210 netmask 255.255.255.255 destination 10.64.16.210 unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 1000 (UNSPEC) RX packets 4796 bytes 3301888 (3.1 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 5047 bytes 789600 (771.0 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 If I manually remove the ipv6 routes through the GUI, ipv6 is disabled for a minute or two before the routes re-populate. If someone could help me figure out why IPv6 is enabled, that would be great. Looks like I might need to just use ipv6.disable=1 as a kernel parameter Thanks tower-diagnostics-20191130-0037.zip

The most recent nightly (git master) build was around two months ago: https://hub.docker.com/layers/jellyfin/jellyfin/nightly/images/sha256-ba81dea478e2452226df82d7e4fc9356fce8a90d026b6a25f0f6d8846413edd2 The current builds that linuxserver and jellyfin have published are based on the latest stable by the looks of it, rather than a build from the master git branch. I think that getting a git build would be great to help test new features added before a stable release, and it's also nice for people that like to stay bleeding edge. Cheers