Create thumbnails fails (Access denied) but artwork, etc is successful

[muckngrind 0]

Thank you in advance for any help you can provide.

Some time ago thumbnail creation started failing.  I'm not sure why.  The error is:

2022-02-06 15:59:01.516 Info App: ProcessRun 'quick-extract-imageseries' Process exited with code 0
2022-02-06 15:59:01.585 Error ChapterImagesTask: Error creating thumbnails for /mnt/media/ARM/emby/movies/Guess Who's Coming to Dinner (1967)/Guess Who's Coming To Dinner (1967).mkv
	*** Error Report ***
	Version: 4.6.7.0
	Command line: /opt/emby-server/system/EmbyServer.dll -programdata /var/lib/emby -ffdetect /opt/emby-server/bin/ffdetect -ffmpeg /opt/emby-server/bin/ffmpeg -ffprobe /opt/emby-server/bin/ffprobe -restartexitcode 3 -updatepackage emby-server-deb_{version}_amd64.deb
	Operating system: Linux version 4.15.0-167-generic (buildd@lcy02-amd64-045) (gcc version 7.5.0 (Ubuntu 7.5.0-3ubuntu1~18.04)) #175-Ubuntu SMP Wed Jan 5 01:56:07 UTC 202
	Framework: .NET Core 3.1.21
	OS/Process: x64/x64
	Runtime: opt/emby-server/system/System.Private.CoreLib.dll
	Processor count: 4
	Data path: /var/lib/emby
	Application path: /opt/emby-server/system
	System.UnauthorizedAccessException: System.UnauthorizedAccessException: Access to the path is denied.
	 ---> System.IO.IOException: Operation not permitted
	   --- End of inner exception stack trace ---
	   at System.IO.FileSystem.CopyFile(String sourceFullPath, String destFullPath, Boolean overwrite)
	   at System.IO.File.Copy(String sourceFileName, String destFileName, Boolean overwrite)
	   at Emby.Server.Implementations.IO.ManagedFileSystem.CopyFile(String source, String target, Boolean overwrite)
	   at MediaBrowser.Providers.MediaInfo.ThumbnailGenerator.CreateThumbnailSet(Video item, LibraryOptions libraryOptions, Int32 width, CancellationToken cancellationToken)
	   at MediaBrowser.Providers.MediaInfo.ThumbnailGenerator.CreateThumbnailSets(Video item, LibraryOptions libraryOptions, CancellationToken cancellationToken)
	   at MediaBrowser.Providers.MediaInfo.ThumbnailGenerator.RefreshThumbnailImages(Video item, LibraryOptions libraryOptions, IDirectoryService directoryService, List`1 chapters, Boolean extractImages, Boolean saveChapters, CancellationToken cancellationToken)
	Source: System.IO.FileSystem
	TargetSite: Void CopyFile(System.String, System.String, Boolean)
	InnerException: System.IO.IOException: Operation not permitted
	Source: 
	TargetSite: 

 

Full log is attached.

 

I have thumbnails saving to the media folder:

 

The error is a Access Denied error, however Emby is able to write to the media folder for all other tasks (artwork, nfo, etc.).

I've check all the library folders and permissions look correct.  I'm lost as to what to check next.

I'm running on ubuntu 18.04.  The media folders are on a NAS mounted via a CIFS share.

Any help is much appreciated.

Thanks,

Derek

 

embyserver.txt

[Luke 42078]

Hi, that sounds a lot like this: 

 

[muckngrind 0]

Thanks for the reply Luke.

That was a very informative thread.  If I understand correctly, a quick workaround is to add the nbrl parameter to the mount point in my /etc/fstab file, which I did but still get the same problem (rebooted just to make sure). 

Also, I've thoroughly reviewed permissions both locally and on the file share and all looks good.  If I change the library setting to not store the thumbnails in the media folders, thunbnails are created successfully.  Only when I'm storing them in the media folders does it cause a problem.  So that seems to suggest a failure to write the .bif files (as opposed to failure to read an executable or library file).  However, all other write processes (poster art and nfo files) write successfully to the same directory.  I'm really baffled.  

Two questions:

1) I'm assuming the quick-extract-imageseries process runs under the same user as everything else, right?

2) Can you think of any reason why the poster and nfo files can be written but the bif files cannot?  

Thanks again for any assistance.  This is driving me a little nuts....

[Luke 42078]

Quote

1) I'm assuming the quick-extract-imageseries process runs under the same user as everything else, right?

Correct.

Quote

2) Can you think of any reason why the poster and nfo files can be written but the bif files cannot?  

I can't, but as the thread mentions, it's an issue in the netcore runtime which means that its a little out of our hands. The upcoming 4.7 release is using a newer version that is said to resolve that.

[muckngrind 0]

Totally understand it being out of your control. 

I think I'm going to build another emby vm to see if the problem persists.  If it does I'll try the beta and see if that fixes it.

Thanks again for your help.  I'll post back with my results.

[Q-Droid 989]

Can you post the mount entry from your fstab?

 

[muckngrind 0]

Sure...  Here it is:

//10.10.1.6/media       /mnt/media/ cifs   username=****,password=****,iocharset=utf8,file_mode=0777,dir_mode=0777,uid=1000,gid=999,nobrl

 

[Q-Droid 989]

I'm guessing UID 1000 is the emby user on your host and if so then this should work. If emby isn't 1000 then you should change the value in fstab. 

Have you changed ownership or permissions anywhere under the emby home, /var/lib/emby? 

[muckngrind 0]

Yes, UID 1000 is the emby user on the host.

Here are permission on /var/lib/emby

Let me know if there is anything else you'd like to see.  Thanks for helping...

 

[Q-Droid 989]

So far it checks out. What level of access does the SMB user with the credentials in fstab have on the NAS server? Does it own the shares or have full control?

[muckngrind 0]

The SMB user has full access and owns the shares.  In addition I opened it up (0777) all the way when I started troubleshooting this issue.

[muckngrind 0]

OK.  I think I figured it out (or really @Q-Droid did).  I went back and looked at the user and group permissions.  In short, the emby user on the host has full access to the CIFS share through the group membership (777 or 775) but not as the user.  I really didn't really think of this since all other write processes (poster art and nfo) files were successful.  I went back and changed the fstab to assign the emby user both user and group access and it now seems to be working.  I'm still not sure why the other processes were successful while the thumbnail creation process would fail, but am very relieved to have this resolved.

Thank you very much @Luke and @Q-Droid.  

[Q-Droid 989]

Certain file and directory operations in .Net seem to be more sensitive to access levels, ownership and permissions. Glad to hear it's working now.