LXC bind mount path snapshot permissions

Apps and Virtualization
1

This has probably been asked many times before but I can’t find an answer for my use case.

I have set up an Alpine LXC container in TrueNAS Scale and mounted pool1/apps to /pool1-apps and was trying to access a datasets’ .zfs snapshots directories to use Restic (backup tool) to upload offsite.

My dataset is pool1/apps/ and I want access to the pool1/apps/.zfs and sub-directories inside the LXC.

I have created a user, restic (UID 1000) and mapped in the “Map User And Group IDs” screen 1000 > 1000.

I then went to the dataset pool1/apps and set ACL’s to allow the restic user (UID 1000) read only access to pool1/apps and set recursively.

From within the Alpine LXC I can access the snapshot dir:

estic01:~$ ll /pool1-apps/.zfs/snapshot/
total 0
drwxrwxrwx   13 nobody   nobody           2 May 30 12:05 .
drwxrwxrwx    1 nobody   nobody           0 May 30 10:21 ..
drwxrwxrwx    1 nobody   nobody           0 May 30 11:15 auto-2025-05-30_21-15
drwxrwxrwx    1 nobody   nobody           0 May 30 11:20 auto-2025-05-30_21-20
drwxrwxrwx    1 nobody   nobody           0 May 30 11:25 auto-2025-05-30_21-25
drwxrwxrwx    1 nobody   nobody           0 May 30 11:30 auto-2025-05-30_21-30
drwxrwxrwx    1 nobody   nobody           0 May 30 11:35 auto-2025-05-30_21-35
drwxrwxrwx    1 nobody   nobody           0 May 30 11:40 auto-2025-05-30_21-40
drwxrwxrwx    1 nobody   nobody           0 May 30 11:45 auto-2025-05-30_21-45
drwxrwxrwx    1 nobody   nobody           0 May 30 11:50 auto-2025-05-30_21-50
drwxrwxrwx    1 nobody   nobody           0 May 30 11:55 auto-2025-05-30_21-55
drwxrwxrwx    1 nobody   nobody           0 May 30 12:00 auto-2025-05-30_22-00
drwxrwxrwx    1 nobody   nobody           0 May 30 12:05 auto-2025-05-30_22-05

But can’t access the snapshot itself:

restic01:~$ ll /pool1-apps/.zfs/snapshot/auto-2025-05-30_21-15/
ls: can't open '/pool1-apps/.zfs/snapshot/auto-2025-05-30_21-15/': Operation not permitted

What am I doing wrong? Also… I want to use Restic and not Storj.

2

What are the permissions when viewed from the host?

3 
truenas_admin@truenas[~]$ sudo ls -la /mnt/pool1/apps
total 10
drwxrwx--- 3 root root 3 May 30 20:24 .
drwxr-xr-x 3 root root 3 May 30 20:21 ..
drwx------ 3 root root 8 May 30 20:24 tailscale

But I thought ACL’s were being used??

4

I meant in the ZFS snapdir. They are being used. They just don’t show up in ls output.