Songkong on qnap - user and permissions

[javanna]

Hey, I read some other posts on this topic. but they are old and possibly outdated.

I installed songkong on my qnap, all working well, but I make it rename files based on metadata, and it creates files using the admin user and administrators group. I guess it runs with that user. I tend to disable the admin user on my NAS for security reasons, and use a specific user for my music library. It is rather odd that files get created under admin. It looks like I need to manually chown and chmod if I want to fix that. Is there another way? I have tried providing PUID and PGID but they seem to take no effect. Can I do anything to get files created with a different user and group, and possibly not with 777 permissions?

Thanks in advance
Luca

[jeromeip]

Hi @javanna !
I’ve been looking at http://www.jthink.net/songkong/en/install_docker_qnap.jsp to understand how qnap service is installed on the QNAP (btw, @paultaylor, mispelling "compatability there!).
So if installed by admin, it makes sense that rewriting of files are set with admin rights.
You could either:

1. reinstall the SongKong app with another user account (the one expected) – I’m not sure it’s possible.
2. install a cron task that periodically launch chown (& chmod if needed) on your music path.

[jeromeip]

hi again,
Looking at Container manual, https://www.qnap.com/en/how-to/tutorial/article/how-to-use-container-station-3
I guess it’s in runtime section that you probably can set the account for launching SongKong app.

[javanna]

Thanks for the help!

I don’t think it is possible to run Container Station from a non admin user. While it is possible to give other users permissions to run some of the multimedia apps, that does not seem possible for Container Station. The container creates files with admin as owner, even if the admin user is disabled. I’ve seen other tutorials about relying on PGID and PUID env variables to set user and group that the docker container should create files from. I am not an expert but I would think it is up to the specific image to do something with those env variables when provided. Is that perhaps a valid enhancement request for the songkong docker image? I tried providing those two variable but they take no effect.

I get anxious about container station running from an admin user, with those permissions, and songkong not even requiring a login, that sounds like a security issue (although songkong can only access the folders defined in the storage section).

[jeromeip]

I installed Container Station on my own QNAP (@paultaylor » installation guidance is now outdated; Container Station interface is now quite different from the one you used) but found no way to set an user for launching the app, indeed.
As I’m absolutely not competent is this area, I will now – sorry for not having been relevant!

[paultaylor]

Im not a docker expert either and my nas does nto support the new Container Station Gui , which is why I havent updated it especially since there is nothing too unusual about the SongKong Docker configuration so anyone fmailair with Docker should have no issue, but I will update at some point.

@javanna maybe you could ask about this on a Docker group as Im unsure how to proceed with this request at the moment.