Confusion over database dump -- permission denied?
Hi, I'm hoping you can help me with a permissions issue. I am trying to do a manual database dump backup , but something's wrong with my permissions. I get permission denied, even though immich_postgres is root. I don't understand permissions very well. It's possible I gave the parent folders incorrect permissions. What do I have wrong here? Here is what I am trying to do and what I see as a result:
john@raspberrypi:/mnt/ssd$ sudo docker exec -u root -t immich_postgres pg_dumpall --clean --if-exists --username=postgres | gzip > "/mnt/ssd/immich-backup/dump.sql.gz"
-bash: /mnt/ssd/immich-backup/dump.sql.gz: Permission denied
john@raspberrypi:/mnt/ssd$ ls -ld /mnt/ssd/library /mnt/ssd/postgres /mnt/ssd/immich-backup/
drwxr-xr-x 2 root root 4096 May 21 20:52 /mnt/ssd/immich-backup/
drwxr-x--- 8 root root 4096 Feb 8 05:54 /mnt/ssd/library
drwx------ 21 999 root 4096 Jun 3 02:52 /mnt/ssd/postgres
john@raspberrypi:/mnt/ssd$ sudo docker exec -it immich_postgres whoami
root
(These returned nothing):
john@raspberrypi:/mnt/ssd$ sudo dmesg | grep -i denied
john@raspberrypi:/mnt/ssd$ sudo docker exec -it immich_postgres ps aux | grep postgres
john@raspberrypi:/mnt/ssd$
Thanks very much for any pointers.
6 Replies
:wave: Hey @Jgahbs,
Thanks for reaching out to us. Please carefully read this message and follow the recommended actions. This will help us be more effective in our support effort and leave more time for building Immich :immich:.
References
- Container Logs:
docker compose logs docs
- Container Status: docker ps -a docs
- Reverse Proxy: https://immich.app/docs/administration/reverse-proxy
- Code Formatting https://support.discord.com/hc/en-us/articles/210298617-Markdown-Text-101-Chat-Formatting-Bold-Italic-Underline#h_01GY0DAKGXDEHE263BCAYEGFJA
Checklist
I have...
1. :ballot_box_with_check: verified I'm on the latest release(note that mobile app releases may take some time).
2. :ballot_box_with_check: read applicable release notes.
3. :ballot_box_with_check: reviewed the FAQs for known issues.
4. :ballot_box_with_check: reviewed Github for known issues.
5. :blue_square: tried accessing Immich via local ip (without a custom reverse proxy).
6. :blue_square: uploaded the relevant information (see below).
7. :blue_square: tried an incognito window, disabled extensions, cleared mobile app cache, logged out and back in, different browsers, etc. as applicable
(an item can be marked as "complete" by reacting with the appropriate number)
Information
In order to be able to effectively help you, we need you to provide clear information to show what the problem is. The exact details needed vary per case, but here is a list of things to consider:
- Your docker-compose.yml and .env files.
- Logs from all the containers and their status (see above).
- All the troubleshooting steps you've tried so far.
- Any recent changes you've made to Immich or your system.
- Details about your system (both software/OS and hardware).
- Details about your storage (filesystems, type of disks, output of commands like fdisk -l and df -h).
- The version of the Immich server, mobile app, and other relevant pieces.
- Any other information that you think might be relevant.
Please paste files and logs with proper code formatting, and especially avoid blurry screenshots.
Without the right information we can't work out what the problem is. Help us help you ;)
If this ticket can be closed you can use the /close command, and re-open it later if needed.The
gzip command after the pipe isn't running as rootI just tried this and still get permission denied:
john@raspberrypi:/mnt/ssd$ sudo docker exec -u root -t immich_postgres pg_dumpall --clean --if-exists --username=postgres | sudo gzip > "/mnt/ssd/immich-backup/dump.sql.gz"
-bash: /mnt/ssd/immich-backup/dump.sql.gz: Permission denied
the
>redirection doesnt happen as root, it uses the users permissions. you could try sudo bash -c 'docker exec -u root -t immich_postgres pg_dumpall --clean --if-exists --username=postgres | gzip > "/mnt/ssd/immich-backup/dump.sql.gz"'That seems to have worked! Thank you! Since this is different from the command listed on immich.app (https://immich.app/docs/administration/backup-and-restore) , I'm wondering if my permissions are problematic? Do those look ok/workable for Immich? (I might have accidentally changed them recently and don't understand permissions well enough to know.) Here they are again:
john@raspberrypi:/mnt/ssd$ ls -ld /mnt/ssd/library /mnt/ssd/postgres /mnt/ssd/immich-backup/
drwxr-xr-x 2 root root 4096 May 21 20:52 /mnt/ssd/immich-backup/
drwxr-x--- 8 root root 4096 Feb 8 05:54 /mnt/ssd/library
drwx------ 21 999 root 4096 Jun 3 02:52 /mnt/ssd/postgres
This thread has been closed. To re-open, use the button below.