[QUESTION] SMB in LXC deployment

[rysmdp]

Question

Hi!

Has anyone been able to create a Volume from a SMB share, with credentials?
I can add volumes if the share has guest access enable, but only then.

Context / what you've tried

So, I've deployed Zerobyte using the HelperScript on Proxmox VE (8 and 9), but I can't seem to be able to add Volumes from a SMB share when using credentials. (With or without special characters).

The LXC is Privileged, FUSE is enabled, and, as mentioned, if the share has guest access I can mount it just fine.
Also, from the LXC command line I can, in fact, mount the share without any issues, using the corresponding credentials, even when the user comes from an Active Directory.

The error i get, when trying to mount from the Zerobyte web is:

Mount command failed with exit code 32: mount: /var/lib/zerobyte/volumes/test/_data: cannot mount //10.0.254.250/test read-only. dmesg(1) may have more information after failed mount system call.

dmesg output:

CIFS: enabling forceuid mount option implicitly because uid= option is specified
CIFS: enabling forcegid mount option implicitly because gid= option is specified
CIFS: Attempting to mount //10.0.254.250/test
CIFS: Status code returned 0xc0000022 STATUS_ACCESS_DENIED
CIFS: VFS: \10.0.254.250 Send error in SessSetup = -13
CIFS: VFS: cifs_mount failed w/return code = -1

I've tried some of the options mentioned here, but I wasn't really able to do some of them, as this is a Proxmox LXC...

Does anyone have any idea that could help me?

Thanks!

[ingoratsdorf]

Looking at the go source code and your output, my assumption is that the issue lies with uid= and gid=.
Source code is

const { uid, gid } = os.userInfo();
const options = [`port=${config.port}`, `uid=${uid}`, `gid=${gid}`];

Do you have debug output enabled in zerobyte? Cause that would help and would log what it is using to actually mount the share.

logger.debug(`Mounting SMB volume ${path}...`);
logger.info(`Executing mount: mount ${args.join(" ")}`);
logger.error(`SMB mount failed: ${toMessage(error)}`);
logger.info(`SMB volume at ${path} mounted successfully.`);

Looking for that info.

[rysmdp]

Hi!
i had enabled debug, but i hadn't actually checked it... my bad!

Ok, i found a problem, thanks to that i could see the exact command that is failing:

mount -v -t cifs -o port=445,uid=0,gid=0,user=administrador,pass=,domain=,vers=3.0 //10.0.254.250/test /root/test
mount: /root/test: cannot mount //10.0.254.250/test read-only.

what was crazy was that i knew that manually, it worked. but with this command:

mount -v -t cifs -o port=445,uid=0,gid=0,username=administrador,pass=,domain=,vers=3.0 //10.0.254.250/test /root/test
mount: //10.0.254.250/test mounted on /root/test.

The one that works uses username instead of user

...

cifs version compatibility? i haven't yet gone looking for an explanation to this...