I’m running into permission issues with the Immich app. Not really getting help from their discord, so I’m trying here.
I’m running my Immich image library off a host path that’s shared via SMB and also synced via Syncthing. So there are multiple ways an image can end up there.
- If a SMB user puts an image in the folder, it gets owner “username” and group “users” with permissions -rw-rw-r–
- If syncthing stores an image in the folder, it gets owner “apps” and group “users” with permissions -rw-rw-r–
- If Immich stores an image in the folder, it gets owner “root” and group “users” with permissions -rw-r–r–
The folder itself has owner “apps”, group “users” with permissions drwxrwxrwx
“username”, “apps”, and for testing purposes also “root” are all members of the group “users”.
Syncthing and the SMB user can delete each other’s files, but neither Syncthing nor the SMB user can delete an image stored by Immich. They do have only read access to the file, and I don’t know how to change that automatically, but what really confuses me is that Immich is unable to delete any files not created by itself. I thought it was running as “root”, or at the very least as “apps”.