samba-dc : invalid permissions on directory '/var/run/samba/nmbd': has 0750 should be 0755

[Xenoxis]

Hello, i've tried to install your image samba-dc using the example docker-compose file, but after provisionning the dc, samba keep a issue with permissions in /var/run/samba, and keep failing.

The full report :

samba version 4.21.4 started.

Copyright Andrew Tridgell and the Samba Team 1992-2024

invalid permissions on directory '/var/run/samba/nmbd': has 0750 should be 0755

task_server_terminate: task_server_terminate: [nbtd failed to start unexpected_server]

samba_terminate: samba_terminate of samba 1: nbtd failed to start unexpected_server

I've tried image version 4.21.4-r4 and the latest one (4.22.6-r0)
Obviously, i haven't bind any volumes on /var/run/samba

My docker-compose file :

addc:
    image: instantlinux/samba-dc:4.21.4-r4
    container_name: samba_addc
    network_mode: host
    restart: unless-stopped
    hostname: dc.example.local"
    environment: 
      DOMAIN_ACTION: "provision"
      REALM: "example.local"
    cap_add:
      - CAP_SYS_ADMIN
    ports:
      - 53:53
      - 53:53/udp
      - 88:88
      - 88:88/udp
      - 135:135
      - 137-138:137-138/udp
      - 139:139
      - 389:389
      - 389:389/udp
      - 445:445
      - 464:464
      - 464:464/udp
      - 636:636
      - 3268-3269:3268-3269
      - 49152-65535
    volumes:
      - addc_etc:/etc/samba
      - addc_lib:/var/lib/samba
      - ./samba-cache:/var/cache/samba
    #command: "samba --configfile=/etc/samba/smb.conf --foreground --debug-stdout -d 1 --no-process-group"
    #entrypoint: "sh"
    tty: true
    stdin_open: true
    secrets:
      - samba-admin-password

volumes:
  addc_etc:
  addc_lib:
secrets:
  samba-admin-password:
    file: "/media/password"

Tried with priviledged: true, but not working either

[instantlinux]

This is what I see; there's nothing in the Dockerfile or entrypoint script here that directly touches anything in /var/run.

# umask
0022
# ls -l /var/run
total 16
drwxr-xr-x    2 root     root          4096 Dec 16 23:03 lock
drwxrwx---    2 root     named         4096 Jan 21 08:45 named
drwxr-xr-x    1 root     root          4096 Jan 25 15:05 samba
drwxr-xr-x    3 root     root          4096 Jan 25 15:05 secrets
/var/run # cd samba
/var/run/samba # ls -l
total 28
drwxr-xr-x    3 root     root          4096 Jan 25 15:05 ncalrpc
drwxr-xr-x    2 root     root          4096 Jan 25 15:05 nmbd
-rw-r--r--    1 root     root             3 Jan 25 15:05 nmbd.pid
-rw-r--r--    1 root     root             2 Jan 25 15:05 samba.pid
-rw-r--r--    1 root     root             3 Jan 25 15:05 smbd.pid
drwxr-xr-x    2 root     root          4096 Jan 25 15:05 winbindd
-rw-r--r--    1 root     root             3 Jan 25 15:05 winbindd.pid

Perhaps your container environment somehow affects this directory? I spotted a typo in your docker-compose but don't think it would be related.

hostname: dc.example.local"    # <== extraneous quote