repos is a samba share where I download new rpm packages. I have checked the permission of /Volume1/repos and it is 755, but apache server still cannot access the files in this directory.
However, when I mount to a non-samba share directory, such as /Volume1/yum, the apache server can access the files in that directory without any problem.
Code: Select all
xxxxxxxx@f6-424:~# ls -lhd /Volume1/{yum,repos}
drwxr-xr-x+ 2 xxxxxxxx xxxxxxxx 4.0K Aug 30 17:30 /Volume1/repos
drwxr-xr-x 17 xxxxxxxx xxxxxxxx 4.0K Aug 30 20:57 /Volume1/yum
xxxxxxxx@f6-424:~# getfacl /Volume1/{repos,yum}
getfacl: Removing leading '/' from absolute path names
# file: Volume1/repos
# owner: xxxxxxxx
# group: xxxxxxxx
user::rwx
group::rwx #effective:r-x
mask::r-x
other::r-x
# file: Volume1/yum
# owner: xxxxxxxx
# group: xxxxxxxx
user::rwx
group::r-x
other::r-x
Code: Select all
#!/bin/bash
docker run -dit --name repos --rm -p 8080:80 \
-v /Volume1/repos/:/usr/local/apache2/htdocs/ \
-v ${HOME}/httpd.conf:/usr/local/apache2/conf/httpd.conf \
httpd
Code: Select all
xxxxxxxx@f6-424:~# ./start_repo_server.sh
0d6a06c4f44ab4895c91ddaa0ce3a30c067e2ff35b98e17d68e4a7dbb76dad7d
xxxxxxxx@f6-424:~# curl f6-424:8080/
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access this resource.</p>
</body></html>
Code: Select all
xxxxxxxx@f6-424:~# docker logs repos
[Mon Aug 31 00:59:29.709014 2026] [mpm_event:notice] [pid 1:tid 1] AH00489: Apache/2.4.68 (Unix) configured -- resuming normal operations
[Mon Aug 31 00:59:29.709183 2026] [core:notice] [pid 1:tid 1] AH00094: Command line: 'httpd -D FOREGROUND'
[Mon Aug 31 00:59:34.359496 2026] [core:error] [pid 8:tid 12] (13)Permission denied: [client 172.17.0.1:49910] AH00035: access to /index.html denied (filesystem path '/usr/local/apache2/htdocs/index.html') because search permissions are missing on a component of the path
172.17.0.1 - - [31/Aug/2026:00:59:34 +0000] "GET / HTTP/1.1" 403 239

