Truenas permissions for NFS storage of Frigate recordings/clips

[peteDDD]

I have followed the official Frigate directions but stumble when it comes to having the right permissions on the Truenas folder. When I try to mv or copy the frigate_tmp files to the new NFS frigate directory, I get

➜  /media mv ./frigate_tmp/* ./frigate
mv: can't create directory './frigate/clips': Permission denied
mv: can't create directory './frigate/exports': Permission denied
mv: can't create directory './frigate/recordings': Permission denied

similarly, trying to use mkdir from the homeassistant terminal. produces the same errors

I can create a file in the frigate using the filebrowser app on truenas and see it from the terminal on Homeassistant.

What is the user that a native install of Homeassistant with the Frigate add-on uses? Perhaps I need to set some ACLs for that user.

[hawkeye217]

I know @ElectronicBattle uses TrueNAS, perhaps he can help here.

[ElectronicBattle]

I can try to help (sorry for the delay, I didn't spot the notification).

@peteDDD

are you using the TrueNAS app? I can post my settings if so.

This is where to find the docker compose yaml which the app generates:

/mnt/.ix-apps/app_configs/frigate/<version>/templates/rendered/docker-compose.yaml

and perhaps posting it here might be useful.

sorry - I realised you are using Home Assistant for Frigate and I think you're trying to write from HA to an NFS remote created by / shared out by TrueNAS, is that correct?

[peteDDD]

@ElectronicBattle
Thanks for responding.

Yes, I have an NFS share on my Truenas (one one server) and my Home Assistant/Frigate on another. What I found that worked was changing the ownership of the NFS folders to "nobody". I am not sure if that is secure or not, but it did allow me to write the folders and files from the Frigate server to the Truenas server.

[ElectronicBattle]

I'm certainly baffled with the various linux permissions in general and TN in particular. I set most things to nobody and nogroup and it all seems OK to me.

I have seen people set up "apps" as a user and group for the ix-apps (and presumably for docker too) but I haven't taken the plunge, realising I am likely to cock things up and deny myself access to my own NAS!

I'm glad you have it working; I don't think I would have been able to help (but always happy to try).

[peteDDD]

Sounds like we both came to the same "solution"

…

On Mon, Jun 2, 2025, 5:30 PM ElectronicBattle ***@***.***> wrote: I'm certainly baffled with the various linux permissions in general and TN in particular. I set most things to nobody and nogroup and it all seems OK to me. I have seen people set up "apps" as a user and group for the ix-apps (and presumably for docker too) but I haven't taken the plunge, realising I am likely to cock things up and deny myself access to my own NAS! I'm glad you have it working; I don't think I would have been able to help (but always happy to try). — Reply to this email directly, view it on GitHub <#18454 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ANQI5JQV53PXJEQC3Q42RZL3BTGALAVCNFSM6AAAAAB6EFGCQ6VHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTGMZUHA4TCNY> . You are receiving this because you were mentioned.Message ID: ***@***.*** com>