| 1 Dec 2025 |
 samasaur | * when was that | 23:25:23 |
 xored | I have no idea, just looking at the samba releases since 25.05 | 23:25:39 |
| xored | there are Mac bug fixes across renaming that could affect this too (the sparse bundle stuff timemachine does) but I reckon if its working for ppl is my valid users or force users or something similar | 23:26:19 |
| samasaur | fileSystems."/timemachine" = {
device = "data/timemachine";
fsType = "zfs";
};
users.groups.timemachine.members = [ "sam" ];
services.samba = {
enable = true;
smbd.enable = true;
nmbd.enable = false;
winbindd.enable = false;
usershares.enable = false;
nsswins = false;
settings = {
global = {
"vfs objects" = "catia fruit streams_xattr";
# time machine/apple compatibility options
"fruit:aapl" = true;
"fruit:nfs_aces" = false;
"fruit:copyfile" = false;
# Run `plutil -p /System/Library/CoreServices/CoreTypes.bundle/Contents/Info.plist` and grep for RackMac3,1
# Any model like that seems to be valid?
# Icons in `/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/`
"fruit:model" = "RackMac3,1";
# assorted other samba options
"panic action" = '' ${lib.getExe pkgs.curl} cliff/send -d \"title=Samba crashed\" '';
};
timemachine = {
# time machine/apple compat
"fruit:resource" = "xattr";
"fruit:time machine" = true;
# "fruit:time machine max size" = "10T"; # impacts how many backups are kept (logic on time machine side)
"fruit:metadata" = "netatalk";
"fruit:encoding" = "native";
# samba options
path = "/timemachine";
preexec = '' ${lib.getExe pkgs.curl} cliff/send -d \"title=Samba connection initiated\" -d \"body=%u connected to %S from %m (%I)\" '';
writeable = true;
"valid users" = "sam";
};
};
};
services.avahi = {
enable = true;
extraServiceFiles.samba = ''
<?xml version="1.0" standalone='no'?>
<!DOCTYPE service-group SYSTEM "avahi-service.dtd">
<service-group>
<name replace-wildcards="yes">%h</name>
<service>
<type>_smb._tcp</type>
<port>445</port>
</service>
<service>
<type>_device-info._tcp</type>
<port>0</port>
<txt-record>model=RackMac3,1</txt-record>
</service>
<service>
<type>_adisk._tcp</type>
<txt-record>dk0=adVN=timemachine,adVF=0x82</txt-record>
<txt-record>sys=waMa=0,adVF=0x100</txt-record>
</service>
</service-group>
'';
};
| 23:26:55 |
| samasaur | this is what i have | 23:27:11 |
| xored | oh boy you have all those fruit options I tried so many times in different combinations lmao | 23:27:47 |
| xored | you do have valid users | 23:28:51 |
| xored | but no force user | 23:28:55 |
| samasaur | and my nixpkgs rev was originally from October 22. I've updated more recently than that but im only like 99% sure it's still working | 23:29:14 |
| samasaur | i know for a fact it was in October | 23:29:24 |
| samasaur | and im still on macOS 15 fwiw | 23:29:33 |
| xored | I've been resetting my Time Machine locations between tries, so its possible that if you had an initial backup it would continue working | 23:30:02 |
| samasaur | In reply to @xoredg:matrix.org
oh boy you have all those fruit options I tried so many times in different combinations lmao i read the whole manual lol | 23:30:28 |
| xored | hmm it's definitely something user related | 23:33:23 |
 Randy Eckenrode | I create users for everything. My setup is still 25.05 though.
https://github.com/reckenrode/nixos-configs/blob/85d19ca2e51254f36f04bfdf8f932c596d18f7c4/modules/by-name/sa/samba/nixos-module.nix
https://github.com/reckenrode/nixos-configs/blob/85d19ca2e51254f36f04bfdf8f932c596d18f7c4/modules/by-name/ti/time-machine/nixos-module.nix
https://github.com/reckenrode/nixos-configs/blob/85d19ca2e51254f36f04bfdf8f932c596d18f7c4/hosts/meteion/samba.nix
| 23:35:26 |
| Randy Eckenrode | I also set up Time Machine via the CLI to use a FQDN, which was hard to do with encryption because it’s pretty much undocumented. | 23:37:46 |
| Randy Eckenrode | Avahi config, but it’s just firewall rules.
https://github.com/reckenrode/nixos-configs/blob/85d19ca2e51254f36f04bfdf8f932c596d18f7c4/modules/by-name/av/avahi/nixos-module.nix
| 23:40:57 |
| xored | did you do anything to your dataset, I had only do acltype=posix and xattr=sa | 23:42:27 |
| xored | which again works on 25.05 | 23:42:35 |
| Randy Eckenrode | I have acltype=posix and xattr=on. | 23:44:39 |
| xored | same | 23:44:53 |
| xored | hmmm | 23:44:56 |
| xored | you don't have map guest | 23:45:03 |
| Randy Eckenrode | I’ve been following the upstream issue regarding NFSv4-style ACLs. Those would map better to Darwin and Windows ACLs. | 23:45:08 |
| xored | let me get rid of that | 23:45:14 |
| * xored as it proceeds to unharden the world | 23:45:27 |
| xored | should I keep "guest account" = "nobody"? | 23:46:28 |
| Randy Eckenrode | I map all my users to actual users. I have a samba-guest user on the server. | 23:46:47 |
| Randy Eckenrode | That’s the guest user. | 23:47:01 |
| Randy Eckenrode | https://github.com/reckenrode/nixos-configs/blob/85d19ca2e51254f36f04bfdf8f932c596d18f7c4/hosts/meteion/samba.nix#L51-L61 | 23:47:23 |
