Unable to install on docker compose

[fireheadman]

Using this very basic docker compose from documenation...

name: immichframe
services:
  immichframe:
    container_name: immichframe
    image: ghcr.io/immichframe/immichframe:latest
    restart: on-failure
    volumes:
      - /volume2/immich/immich-frame/config/:/app/Config
    ports:
      - "2284:8080"
    environment:
      TZ: "America/Denver"

I have immich server running perfectly fine.
Something with this docker container doesn't like permissions...
Verified the volume location exists

Any suggestions are welcome... was looking forward to using this.

Getting this in the logs:

[fireheadman@merlin ~ 3444]$ sudo docker logs -f immichframe

 _                     _      _    ______
(_)                   (_)    | |   |  ___|
 _ _ __ ___  _ __ ___  _  ___| |__ | |_ _ __ __ _ _ __ ___   ___
| | '_ ` _ \| '_ ` _ \| |/ __| '_ \|  _| '__/ _` | '_ ` _ \ / _ \
| | | | | | | | | | | | | (__| | | | | | | | (_| | | | | | |  __/
|_|_| |_| |_|_| |_| |_|_|\___|_| |_\_| |_|  \__,_|_| |_| |_|\___| Version 1.0.31.0

LogLevel: Information
26-02-09 20:17:39 warn: Microsoft.AspNetCore.DataProtection.Repositories.EphemeralXmlRepository[50] Using an in-memory repository. Keys will not be persisted to storage.
26-02-09 20:17:39 warn: Microsoft.AspNetCore.DataProtection.KeyManagement.XmlKeyManager[59] Neither user profile nor HKLM registry available. Using an ephemeral key repository. Protected data will be unavailable when application exits.
26-02-09 20:17:39 warn: Microsoft.AspNetCore.DataProtection.KeyManagement.XmlKeyManager[35] No XML encryptor configured. Key {26252104-725d-43f1-85e9-389ad2fd9006} may be persisted to storage in unencrypted form.
26-02-09 20:17:39 info: Microsoft.Hosting.Lifetime[14] Now listening on: http://[::]:8080
26-02-09 20:17:39 info: Microsoft.Hosting.Lifetime[0] Application started. Press Ctrl+C to shut down.
26-02-09 20:17:39 info: Microsoft.Hosting.Lifetime[0] Hosting environment: Production
26-02-09 20:17:39 info: Microsoft.Hosting.Lifetime[0] Content root path: /app
26-02-09 20:17:59 fail: Microsoft.AspNetCore.Server.Kestrel[13] Connection id "0HNJ8318R7ND0", Request id "0HNJ8318R7ND0:00000001": An unhandled exception was thrown by the application. System.UnauthorizedAccessException: Access to the path '/app/Config' is denied.  ---> System.IO.IOException: Permission denied    --- End of inner exception stack trace ---    at System.IO.Enumeration.FileSystemEnumerator`1.CreateDirectoryHandle(String path, Boolean ignoreNotFound)    at System.IO.Enumeration.FileSystemEnumerator`1.Init()    at System.IO.Enumeration.FileSystemEnumerable`1..ctor(String directory, FindTransform transform, EnumerationOptions options, Boolean isNormalized)    at System.IO.Enumeration.FileSystemEnumerableFactory.UserFiles(String directory, String expression, EnumerationOptions options)    at System.IO.Directory.InternalEnumeratePaths(String path, String searchPattern, SearchTarget searchTarget, EnumerationOptions options)    at ImmichFrame.WebApi.Helpers.Config.ConfigLoader.FindConfigFile(String dir, String[] fileNames) in /source/ImmichFrame.WebApi/Helpers/Config/ConfigLoader.cs:line 19    at ImmichFrame.WebApi.Helpers.Config.ConfigLoader.LoadConfigRaw(String configPath) in /source/ImmichFrame.WebApi/Helpers/Config/ConfigLoader.cs:line 31    at ImmichFrame.WebApi.Helpers.Config.ConfigLoader.LoadConfig(String configPath) in /source/ImmichFrame.WebApi/Helpers/Config/ConfigLoader.cs:line 25    at Program.<>c__DisplayClass0_0.<<Main>$>b__2(IServiceProvider srv) in /source/ImmichFrame.WebApi/Program.cs:line 54    at Microsoft.Extensions.DependencyInjection.ServiceLookup.CallSiteRuntimeResolver.VisitFactory(FactoryCallSite factoryCallSite, RuntimeResolverContext context)    at Microsoft.Extensions.DependencyInjection.ServiceLookup.CallSiteRuntimeResolver.VisitRootCache(ServiceCallSite callSite, RuntimeResolverContext context)    at Microsoft.Extensions.DependencyInjection.ServiceLookup.CallSiteVisitor`2.VisitCallSite(ServiceCallSite callSite, TArgument argument)    at Microsoft.Extensions.DependencyInjection.ServiceLookup.CallSiteRuntimeResolver.VisitConstructor(ConstructorCallSite constructorCallSite, RuntimeResolverContext context)    at Microsoft.Extensions.DependencyInjection.ServiceLookup.CallSiteRuntimeResolver.VisitDisposeCache(ServiceCallSite transientCallSite, RuntimeResolverContext context)    at Microsoft.Extensions.DependencyInjection.ServiceLookup.CallSiteVisitor`2.VisitCallSite(ServiceCallSite callSite, TArgument argument)    at Microsoft.Extensions.DependencyInjection.ServiceLookup.CallSiteRuntimeResolver.Resolve(ServiceCallSite callSite, ServiceProviderEngineScope scope)    at Microsoft.Extensions.DependencyInjection.ServiceLookup.DynamicServiceProviderEngine.<>c__DisplayClass2_0.<RealizeService>b__0(ServiceProviderEngineScope scope)    at Microsoft.Extensions.DependencyInjection.ServiceProvider.GetService(ServiceIdentifier serviceIdentifier, ServiceProviderEngineScope serviceProviderEngineScope)    at Microsoft.Extensions.DependencyInjection.ServiceLookup.ServiceProviderEngineScope.GetService(Type serviceType)    at Microsoft.AspNetCore.Authentication.AuthenticationHandlerProvider.GetHandlerAsync(HttpContext context, String authenticationScheme)    at Microsoft.AspNetCore.Authentication.AuthenticationService.AuthenticateAsync(HttpContext context, String scheme)    at CustomAuthenticationMiddleware.InvokeAsync(HttpContext context) in /source/ImmichFrame.WebApi/Helpers/CustomAuthenticationMiddleware.cs:line 14    at Microsoft.AspNetCore.Server.Kestrel.Core.Internal.Http.HttpProtocol.ProcessRequests[TContext](IHttpApplication`1 application)

[fireheadman]

When I attempt to enter the container I get this...

[fireheadman@merlin immich-frame 3474]$ sudo docker exec -it immichframe bash
I have no name!@06849b1eb898:/app$ id
uid=1000 gid=0(root) groups=0(root)
I have no name!@06849b1eb898:/app$

I also do not see any container files being created under the volume location (config) on initial startup

[JW-CH]

You have to create the config yourself and put it into that folder. See the orange warning here: https://immichframe.dev/docs/getting-started/installation/docker

[fireheadman]

yes, I have a Settings.yml present

[fireheadman@merlin config 3479]$ pwd
/volume2/immich/immich-frame/config

[fireheadman@merlin config 3480]$ ls -la
total 4
drwxrwxrwx+ 1 fireheadman   24 Feb  9 15:30 ./
drwxrwxrwx+ 1 fireheadman   12 Feb  9 13:08 ../
-rwxrwxrwx+ 1 fireheadman 1482 Feb  9 15:30 Settings.yml

[fireheadman@merlin config 3481]$ cat Settings.yml
General:
  AuthenticationSecret: null
  DownloadImages: false
  RenewImagesDuration: 30
  Webcalendars:
    - calendarurl
  RefreshAlbumPeopleInterval: 12
  PhotoDateFormat: MM/dd/yyyy
  ImageLocationFormat: 'City,State,Country'
  WeatherApiKey: 'REDACTED'
  UnitSystem: imperial
  WeatherLatLong: 'REDACTED,-REDACTED'
  Webhook: null
  Language: en
  Interval: 45
  TransitionDuration: 2
  ShowClock: true
  ClockFormat: 'hh:mm'
  ClockDateFormat: 'eee, MMM d'
  ShowProgressBar: true
  ShowPhotoDate: true
  ShowImageDesc: true
  ShowPeopleDesc: true
  ShowAlbumName: true
  ShowImageLocation: true
  PrimaryColor: '#f5deb3'
  SecondaryColor: '#000000'
  Style: none
  BaseFontSize: 17px
  ShowWeatherDescription: true
  WeatherIconUrl: 'https://openweathermap.org/img/wn/{IconId}.png'
  ImageZoom: true
  ImagePan: false
  ImageFill: false
  PlayAudio: false
  Layout: splitview
Accounts:
  - ImmichServerUrl: http://192.168.1.237:2283
    # Exactly one of ApiKey or ApiKeyFile must be set.
    ApiKey: "REDACTED"
    # ApiKeyFile: "/path/to/api.key"

    ImagesFromDate: null
    ShowMemories: false
    ShowFavorites: false
    ShowArchived: false
    ShowVideos: false
    ImagesFromDays: null
    ImagesUntilDate: '2020-01-02'
    Rating: null
    Albums:
      - REDACTED
    #ExcludedAlbums:
    #  - UUID
    #People:
    #  - UUID
    #Tags:
    #  - Vacation
    #  - Travel/Europe

[fireheadman]

Specifically... this part of the error I am concerned about. "Access Denied"
It looks like the process is unable to gain access to the configuration directory.

26-02-09 15:31:39 fail: Microsoft.AspNetCore.Server.Kestrel[13] Connection id "0HNJ85BV1L5CB", Request id "0HNJ85BV1L5CB:00000001": An unhandled exception was thrown by the application. System.UnauthorizedAccessException: **Access to the path '/app/Config' is denied.**

[fireheadman]

something more to add....
when entering the container, it looks like a user is not defined and the Config dir has no permissions assigned.

[fireheadman@merlin config 3485]$ sudo docker exec -it immichframe bash
Password:
I have no name!@e81f56b81ffe:/app$ ls -la
total 9104
drwxr-xr-x 1 root root     2024 Feb  9 16:17 .
drwxr-xr-x 1 root root      180 Feb  9 16:17 ..
-rwxr--r-- 1 root root    93184 Aug 18 01:36 BloomFilter.dll
d--------- 1 1026 users      24 Feb  9 16:16 Config

[3rob3]

Probably an incorrect path to your settings or permissions. What OS are you on? You can also put your yaml settings into the compose itself if you are sick of trying to get this to work.

name: immichframe
services:
  immichframe:
    container_name: immichframe
    environment:
      ApiKey:
      BaseFontSize: 17px
      ClockFormat: h:mm
      ImageLocationFormat: City,State
      ImmichServerUrl: http://192.168.0.101:2283
      Interval: 8
      PhotoDateFormat: LLL dd yyyy
      ShowImageDesc: False
      ShowProgressBar: False
      ShowVideos: True
      ShowWeatherDescription: False
      TZ: America/New_York
      TransitionDuration: 2
      WeatherApiKey: 
      WeatherLatLong:   
    image: ghcr.io/immichframe/immichframe:latest
    ports:
      - '8080:8080'
    restart: unless-stopped

Add any other settings you want.

[fireheadman]

I've tried that method also... that was actually my first attempt.
I will review it once more.

OS is on Synology and I am deploying this using Portainer.
I have 3 docker servers with 38 containers running. Immich-server (stack) being in those... but immich-frame seems to be a different beast.

if there some other suggestions to try, I am game to entertain them!

[fireheadman]

BTW: using your code with minor edits to TZ and URL, it came up.
will have to see where it is storing the container at.... then will attempt to use a different volume path.

However, this is all I get

[fireheadman]

...dang it...
couple seconds later, that turned into this

I will see if this can be used from a different server

LogLevel: Information
26-02-09 18:34:10 warn: Microsoft.AspNetCore.DataProtection.Repositories.EphemeralXmlRepository[50] Using an in-memory repository. Keys will not be persisted to storage.
26-02-09 18:34:10 warn: Microsoft.AspNetCore.DataProtection.KeyManagement.XmlKeyManager[59] Neither user profile nor HKLM registry available. Using an ephemeral key repository. Protected data will be unavailable when application exits.
26-02-09 18:34:11 warn: Microsoft.AspNetCore.DataProtection.KeyManagement.XmlKeyManager[35] No XML encryptor configured. Key {fa224e46-8b90-4064-81d0-742b5552bdd6} may be persisted to storage in unencrypted form.
26-02-09 18:34:11 info: Microsoft.Hosting.Lifetime[14] Now listening on: http://[::]:8080
26-02-09 18:34:11 info: Microsoft.Hosting.Lifetime[0] Application started. Press Ctrl+C to shut down.
26-02-09 18:34:11 info: Microsoft.Hosting.Lifetime[0] Hosting environment: Production
26-02-09 18:34:11 info: Microsoft.Hosting.Lifetime[0] Content root path: /app
26-02-09 18:34:18 info: System.Net.Http.HttpClient.ImmichApiAccountClient.LogicalHandler[100] Start processing HTTP request GET http://192.168.0.238:2283/api/assets/statistics?isTrashed=false
26-02-09 18:34:18 info: System.Net.Http.HttpClient.ImmichApiAccountClient.ClientHandler[100] Sending HTTP request GET http://192.168.0.238:2283/api/assets/statistics?isTrashed=false
26-02-09 18:35:58 fail: Microsoft.AspNetCore.Server.Kestrel[13] Connection id "0HNJ88I0PORVG", Request id "0HNJ88I0PORVG:00000004": An unhandled exception was thrown by the application. System.Threading.Tasks.TaskCanceledException: The request was canceled due to the configured HttpClient.Timeout of 100 seconds elapsing.  ---> System.TimeoutException: A task was canceled.  ---> System.Threading.Tasks.TaskCanceledException: A task was canceled.    at System.Threading.Tasks.TaskCompletionSourceWithCancellation`1.WaitWithCancellationAsync(CancellationToken cancellationToken)    at System.Net.Http.HttpConnectionPool.SendWithVersionDetectionAndRetryAsync(HttpRequestMessage request, Boolean async, Boolean doRequestAuth, CancellationToken cancellationToken)    at System.Net.Http.DiagnosticsHandler.SendAsyncCore(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)    at System.Net.Http.RedirectHandler.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)    at Microsoft.Extensions.Http.Logging.LoggingHttpMessageHandler.<SendCoreAsync>g__Core|5_0(HttpRequestMessage request, Boolean useAsync, CancellationToken cancellationToken)    at Microsoft.Extensions.Http.Logging.LoggingScopeHttpMessageHandler.<SendCoreAsync>g__Core|5_0(HttpRequestMessage request, Boolean useAsync, CancellationToken cancellationToken)    at System.Net.Http.HttpClient.<SendAsync>g__Core|83_0(HttpRequestMessage request, HttpCompletionOption completionOption, CancellationTokenSource cts, Boolean disposeCts, CancellationTokenSource pendingRequestsCts, CancellationToken originalCancellationToken)    --- End of inner exception stack trace ---    --- End of inner exception stack trace ---    at System.Net.Http.HttpClient.HandleFailure(Exception e, Boolean telemetryStarted, HttpResponseMessage response, CancellationTokenSource cts, CancellationToken cancellationToken, CancellationTokenSource pendingRequestsCts)    at System.Net.Http.HttpClient.<SendAsync>g__Core|83_0(HttpRequestMessage request, HttpCompletionOption completionOption, CancellationTokenSource cts, Boolean disposeCts, CancellationTokenSource pendingRequestsCts, CancellationToken originalCancellationToken)    at ImmichFrame.Core.Api.ImmichApi.GetAssetStatisticsAsync(Nullable`1 isFavorite, Nullable`1 isTrashed, Nullable`1 visibility, CancellationToken cancellationToken) in /source/ImmichFrame.Core/obj/immich-openapi-specsClient.cs:line 3591    at Microsoft.Extensions.Caching.Memory.CacheExtensions.GetOrCreateAsync[TItem](IMemoryCache cache, Object key, Func`2 factory, MemoryCacheEntryOptions createOptions)    at ImmichFrame.Core.Logic.Pool.AllAssetsPool.GetAssetCount(CancellationToken ct) in /source/ImmichFrame.Core/Logic/Pool/AllAssetsPool.cs:line 11    at ImmichFrame.Core.Logic.AccountSelection.TotalAccountImagesSelectionStrategy.GetWeights(IList`1 accounts) in /source/ImmichFrame.Core/Logic/AccountSelection/TotalAccountImagesSelectionStrategy.cs:line 34    at ImmichFrame.Core.Logic.AccountSelection.TotalAccountImagesSelectionStrategy.GetProportions(IList`1 accounts) in /source/ImmichFrame.Core/Logic/AccountSelection/TotalAccountImagesSelectionStrategy.cs:line 40    at ImmichFrame.Core.Logic.AccountSelection.TotalAccountImagesSelectionStrategy.GetAssets() in /source/ImmichFrame.Core/Logic/AccountSelection/TotalAccountImagesSelectionStrategy.cs:line 51    at ImmichFrame.Core.Logic.MultiImmichFrameLogicDelegate.GetAssets() in /source/ImmichFrame.Core/Logic/MultiImmichFrameLogicDelegate.cs:line 34    at ImmichFrame.WebApi.Controllers.AssetController.GetAsset(String clientIdentifier) in /source/ImmichFrame.WebApi/Controllers/AssetController.cs:line 41    at lambda_method6(Closure, Object)    at Microsoft.AspNetCore.Mvc.Infrastructure.ActionMethodExecutor.AwaitableObjectResultExecutor.Execute(ActionContext actionContext, IActionResultTypeMapper mapper, ObjectMethodExecutor executor, Object controller, Object[] arguments)    at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.<InvokeActionMethodAsync>g__Awaited|12_0(ControllerActionInvoker invoker, ValueTask`1 actionResultValueTask)    at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.<InvokeNextActionFilterAsync>g__Awaited|10_0(ControllerActionInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted)    at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.Rethrow(ActionExecutedContextSealed context)    at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.Next(State& next, Scope& scope, Object& state, Boolean& isCompleted)    at Microsoft.AspNetCore.Mvc.Infrastructure.ControllerActionInvoker.<InvokeInnerFilterAsync>g__Awaited|13_0(ControllerActionInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted)    at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.<InvokeFilterPipelineAsync>g__Awaited|20_0(ResourceInvoker invoker, Task lastTask, State next, Scope scope, Object state, Boolean isCompleted)    at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.<InvokeAsync>g__Awaited|17_0(ResourceInvoker invoker, Task task, IDisposable scope)    at Microsoft.AspNetCore.Mvc.Infrastructure.ResourceInvoker.<InvokeAsync>g__Awaited|17_0(ResourceInvoker invoker, Task task, IDisposable scope)    at Microsoft.AspNetCore.Authorization.AuthorizationMiddleware.Invoke(HttpContext context)    at Microsoft.AspNetCore.Authentication.AuthenticationMiddleware.Invoke(HttpContext context)    at CustomAuthenticationMiddleware.InvokeAsync(HttpContext context) in /source/ImmichFrame.WebApi/Helpers/CustomAuthenticationMiddleware.cs:line 23    at Microsoft.AspNetCore.Server.Kestrel.Core.Internal.Http.HttpProtocol.ProcessRequests[TContext](IHttpApplication`1 application)

[fireheadman]

scratch last post....
I had a bad API key, now I see it.

Need to try this all over again and use a volume location (my preferred method so I can backup configs nightly)

[3rob3]

cool. Yeah try again with settings file.

[fireheadman]

think I have this going now... just needs to be fine tuned.
only catch is, I could not make it work if I specified a volume/path.
I verified my path existed, even did this on another docker server and had the same issue.
have never encountered this type of issue before.

look like immich-frame hold most everything in memory anyways since it is not processing to the extent like immich.

[3rob3]

I still think you have a permissions issue on that folder.
It doesn’t have to be a separate folder. If you have one already you know docker has access to you can use that. Or run this:
sudo chmod -R 755 /volume2/immich/immich-frame/config/