TrueNAS Core 12 Plex Setup & ACL Permission Tutorial on a 144 TB Server

tom here from lauren systems and supermicro had sent me the super storage 6019p acr12l plus 1u server and i did a review of it the other day i also wanted to test it with some software so i loaded trunas on there and i wanted to set up plex and while i'm setting it up i figured it's a great opportunity for a tutorial on how to configure plex with trueness core including a very important aspect making sure you have the permissions right not just so plex can read the media files but so you can set up a share and also add media files and get the permission sorted out the new acl system is different than the previous videos i've done on this i've done a video specifically on the acl system if you just want to dive into that i'll leave a link to that video because it's on freenas acls but the acl's copied over to truenass in terms of the way they work but i'm going to show you walk you through step by step how to load the plugs plugin how to create the share or set the permissions on the share and how to make a additional user belong to the same share group there were therefore you're easily able to uh add media files to it also i am doing this on a server that has 144 terabytes or available about 96 terabytes even after we put it all into a raid we'll talk about that a little bit first about design of the system uh which is way overkill for plex but hey that makes it that much more fun because you know why not have 192 gigs of ram along with an nvme pool that we're going to run plex on and a data storage pool of uh drives as well to just you know because you've got to have a lot of videos a lot of media they're on there before we get started on that let's first if you'd like to learn more about me or my company head over to lawrences.com if you like to hire a sharp project there's a hires button right at the top if you'd like to help keep this channel sponsor free and thank you to everyone who already has there is a join button here for youtube and a patreon page your support is greatly appreciated if you're looking for deals or discounts on products and services we offer on this channel check out the affiliate links down below they're in the description of all of our videos including a link to our shirt store we have a wide variety of shirts that we sell and new designs come out well randomly so check back frequently and finally our forums forums.lawrencesystems.com is where you can have a more in-depth discussion about this video and other tech topics you've seen on this channel now back to our content now once you have freenas all loaded up when you first go to set up a plugin there's a little gear icon here and you have to choose what pool if you have more than one if you have one pole there's only one option here which pool you want the plugins to live on and i'm going to choose the nvme pool because hey why not because mvmes are nice and fast so that seems like a great place to put the actual plugins and the i o cage and the jails and where all the pools will live from there we are going to choose either plex media server or plex media server beta the beta is going to be i believe a slightly newer version but does require a plex pass subscription to do that now quick note about these plug-ins these are ones officially supported by ix systems they've separated them if you've not familiar with the way the plugins work these are community supported so they do have them in case you're wondering where the other ones are that's what that drop-down does and it's just a matter of where the support comes from we're just going to go ahead and load the basic one assuming you don't have a plex subscription but the really doesn't change things either way with it whichever one you load so we're going ahead and click install and this is our plex flex we'll just give it a silly name and plug-in name is plex media server dhcp is fine i don't usually recommend unless you have some special use case for setting up static ip and the reason i bring that up is because usually i let it be dhcp and then i go into my firewall router which hands out the dhcp addresses or in your case whichever one whatever system you have doing that and then i statically assign it that way this makes it easier of generally how i organize most things i let the firewall router or whatever the dhcp server assign all of my devices so they all have addresses that i can easily change and just restart the server and i know where everything is so i'm gonna leave it at dhcp and it's gonna go ahead and create the plugin container download the latest version and we'll just fast forward to this part while it gets set up it goes relatively fast depending on the server this server is going to go really fast all right so we have the plugin installed successfully and it gives us where we can go for the admin portal or when you go here it's going to refresh real quick you can see it little expand and then we can go to manage and i have a demo user set up as plex at lawrences.com this is actually something i created uh just so i could do testing on this video it's not a actual plex pass one but we can sign in go through the server setup please wait a moment while plex starts and we're going to skip paying it we'll call it the plex flex server i'm not worried about media outside the home that's an up to you option we're not going to add a library now we'll do that after and done now we are set up and no files in here we just have the plex server up and running and we're signed in so pretty straightforward nothing to do yet and right now we have to stop the server because now we got to get all of our libraries in there now the way a jail works is it is and we'll actually look at the jail itself so there's plugins and jails plugins are automated jails or installs you can also when i have videos on manually creating jails so let's look at the plex flex one here and we can see we have mount point stop update shell etc what i want to show is where they actually live so if we go to pools we scroll down io cage we look at the jails and we see here's that jail now technically not the best idea yes you could dump files into the jail natively but the idea of a jail and the reason for them is they're where the files live in terms of the os so the operating system or the plugins may live in there but you want to keep your data elsewhere that way if you ever had to rebuild or destroy a jail it's not a big deal you can just rebuild or destroy it and your data lives in a different share so we've already created that share right here called plex facts and we'll i'll walk you through that in a second but there's a couple little housekeeping things we need to do first and one of them is talking about how permissions work with acls this is the user we have to create user 972 now for every user that you have that runs a service service is run as a username plex runs as user 972 on both freenas and shrunas this is where the confusion sometimes can come in so what we do is and this is not part of the official ix system instructions but i think it should be that's why i'm making a video on it you can just create and throw user 972 at things and have it unnamed there's an easier way and now each plug-in has a different user so if you're using sonar radar transmission um you there's ways to look it up and there's comments on there and as you go through the plug-ins you can figure out what username each one belongs to we're going to go ahead and go over here to accounts users and alls i had to do was you add a user now normally when you add a user it starts at a higher number but we started with the plex user so we just created a user 972 i called it flex flex it's already in use that's i'm just showing you how i went through the creation you can create some random password which is probably not a bad idea to create something long in case anyone tried to hack this and guess in because they had local access to your network and want to be that user use a long random password but don't worry you never need it so you only have to remember what it is but that's all i did was create that then this is what that user looks like created so we'll go ahead and edit that users to show you it's plex username plex some password that i don't remember i mashed on the keyboard um twice at a some long high entropy password and then we have the primary group as plex pretty straightforward now what this allows you to do when you're setting up the acls is just type the word plex instead of user987 and that's what they said to do here and it does work it will work if you just call it 987. then we also have a user tom that i created in tom is user thousand one so what we did with tom is now that we created the plex user it also created the plex group id of 1000 and then the tom one so if we click on the plex group id and we look at the members we made tom plex was already a member because it's his own group and we made tom a member of the plex group these are the important steps to before we get to the acl part that you've already done this if not if you create the share and go edit acls you won't be able to add these because they won't exist yet so once you've got this part done then we're going to go over here we're going to go to storage pools now i've already got this one created called plex flex that we're going to use and we can edit the ecl and pretty much look how it works here so we have a default acl root and wheel but then we change who access controllers user plex acl type allow permission type basic permission full control and group group users just plex i mean you could type 987 in there like they mentioned but it looks nice when we type plex um acl type allow basic permission permissions are full control pretty straightforward and then we would apply them recursively and away we go now just to walk you through real quick what it is we'll create a test one right here so if we add a data set test submit and then we go here edit acl change this to user el plex it's an allow we'll just do basic you can get advanced with this but we're just covering the basics here where you can get granular with it we have the group we'll make this this group and we'll change it to user plex and remember tom is a member of this user as well and we don't care about the granular options again so we're just going to say it's an allow rule permissions are advanced full control we do want the inherent flags we don't need this everyone group we're not adding multiple groups as you could there's more options you can dive into on this watch my video on acls so inherit so now we've got user plex acl allow permission type basic full control that's important and the same thing here group is plex allow basic full control file type basic inherit apply recursively in case there's a bunch of uh sub information you have in there just make sure you have if you have a lot of data already dumped in a lot of different folders you supply all of it on there and if you ever screw up there is the strip acl option to remove all acls and start over especially if you've got really crazy ones that you've built up over time or someone else did when we're fixing things sometimes we start with strip and then start over so we do it right so hit save and that's it that's all you got to do for an acl that's how we created these ones here which we'll just look at it again you can see all the basic options please make sure that that inherit one if you're setting it up that's clicked now sharing got to be able to get data into there so how did we do that so we create a window share and it's really straightforward creating a window share we can uh edit right here we just well i'll go through a new one real quick but you can edit and see what it was but it's it's under deadpool plex flex cool default share parameters there's nothing unless you have some other things that fault share parameters are fine and uh submit it won't let me do it because this one already exists but we could do the test uh wait we the test one if we wanted to move it around or however you want so no big deal there pretty straightforward on how to do the share now of course we have to test the share and i've already dumped a bunch of data in there for it to index but let's go ahead and test it and i'm doing this in linux and if it was windows would be backslash backslash ip address in linux it's a little different it's smbcon 192.168.3.213. that is this is the right there i've already logged in with my username password that i created for tom new folder some data equal we can do that we have read write access so let's call it some data add it i don't like spaces i like underscores and uh they open this a new table let's dump some data in there we know we got permission we'll just i don't know whatever's in here so we'll copy these and paste them all right cool now we have a couple extra video files that i threw in here that we can index reflex of course now we have to get that same data moved over into plex how does that work well it's actually pretty simple so we're going to go over here jails i'm sorry plugins you can do it actually from either one but because this is technically a plug-in installed from their plugin system we're going to do it here and we need to stop the plugin now this is the design of jails they don't have permission for anything more than you grant them for permission for so the root of a jail actually is that i o cage slash jail slash name of the jail so a jail is a mini system essentially running inside there it's nested within and it only has the permissions given the reason for this is that's a security feature so if something were to happen to plex the only thing plex would be able to access is whatever's in that jail and not access to the greater system so it's kind of you know putting it in this is how containerization works that's essentially what jails are is containers you're containing it to only the tools and things it has access to that also includes file systems so if someone were to manage to do something nefarious and get into your plex server what do they have access to well only things you've granted plex access to including whatever data outside of plex you've mounted in so that's why the purpose are for these mount points so we're gonna go here and we're gonna add a mount point so source of the mount point all right deadpool and we have this plex flex great so mount deadpool plex facts destination and that's this nested route here so mount with io cage lives and the jails live and the plugins all live on the nvme pool so flex root and then where do we want to put it i'm going to stick it under mount so we put it under mount here and we'll call it flex plex it'll automatically create whatever folder you have or directory however you want to look at it from there so now we see it as this long path because we're at the system level once we're inside plex we see it as mount slash plex flag so when i start plex back up it sees its root as in root slash mount so slash being the very beginning directory this is a big difference how these containers slash jails work is they are not able to traverse further up like i said that's a security feature and that's why it's designed this way so all you do is hit submit and now we have source is here and destination is there pretty straightforward let me go back over to plugins we'll go ahead and start this plug-in now because this plug-in does have rewrite access it is possible uh that from this plug-in if you were to delete something it does have permission to delete this is why there's one of the options of exporting these as a read only option so plex could never write to there may or may not have a use case for that i did it read write um because i wanted it that way but that is something just of note if you ever wanted to set it up so each plugin can only read data but would never have permission to potentially destroy data now we'll go ahead and go to manage again now that the plugin's up and running all right so once you're logged into plex we're gonna click on the little plus right here and we want to add a library now movies tv shows music photos those are going to vary by what you're adding we're adding other videos because what i actually dumped in there was a bunch of my own videos i created so they're not technically movies or tv shows or just my youtube videos i want to in-text and we'll call this plex flex that's the name we have on there let me go to next browse for media folders as i mentioned slash is now the root of this so it doesn't see the entire greenhouse system it see slash mount though and then it sees plex flex hey look there's all that stuff that it that is in there which we go over here there's the some data added and i had this where i created and you can see it's the same list of folders but that's where we want it so mount plex flex so we go ahead and here and hit add add the library and the way it goes it starts indexing that's it now you're good to go on this in terms of being able to play the movies play stuff back uh whatever's in here is going to slowly generate thumbnails for these and hey look there's me reviewing the server that i'm now testing uh this on with all specifications there's all the drives in there so now we have our entire large massively over built plex server here able to index all these videos what if i wanted to add another library let's just go ahead and walk through the process again so hit stop and actually i have everything in here so while this is stopping over here storage pools and we have the lts video dump what i did was i dumped my entire main primary freeing ass over to this breen ass we're going to edit the acls on this one here and let's see do we have any of these set for plex nope i haven't done anything with it yet so it's just a dump of data same thing again so the user flex allow basic hold control inherit group flex make sure it's allow basic full control inherit all right apply permissions recursively confirm so i want to make sure everything in there has the right permissions and um yes that's 1.57 terabytes of videos that i dumped in there so there's our lts video dump and now go over here i want to go to the plugins plex flex and we're going to add another mount point you can have as many mount points as you want so here's the one we already have on this particular jail and we're going to go ahead and add another so it's mount the deadpool there's that one in the destination we're going to choose mount again slash lts video dump seems like a good name for it because it's just all the different videos they have in there submit now i could create a share so i can dump more videos in there but um the share permissions are going to be the same as they were on this one here so if i wanted to create another share to that no problem we're not going to bother with that though so we already have all the videos there let me go back over to the plugins and we'll fire plex back up so start you notice a little checkbox for boot that is of course if you want to start every time you restart your true nas system easy enough to do manage close the expired session we're going to add another library of other videos again we'll just call it lts video dump next browse for folders once again here mount lts video dump add add library and this may take a little while this is going to certainly push the server a lot harder because 1.5 terabytes these are a lot of videos that are in here so it's it's going to take a minute to do all the scanning and index all of this and it still is indexing all these while we're at it so pretty straightforward how it all works and then from here you're just using plex to do whatever now let's say you had some other services that you want to throw in here for example oh i don't know any other plug-ins or jails that you may want to share with it you can also do the same thing as add those users for whatever the other plugin is and we'll reference back over here to these blog permissions radar sonar or transmission um these would also you could create a user so you don't have to call them 921 but it will work as calling it 921 and then you could add them to the group and then you can share so the amount point can be in there for another one as well so you don't have to have the mount point restricted to exclusively on this but you can add more than one so that way more than one thing can dump data into that data set so you can dump it through the share you can dump it through this methodology here but you know definitely methodologies by which you can do this now as a quick demo to show you how that would look i've taken this little test for another project i'm working on and you can look at the mount points for this test and this is unrelated to not well i should say not directly related to the plex one we did but we did the same thing we mounted here we did it to here and then we can go inside of that particular jail go here go to the shell cd slash mount because i put it in the same place i just called this one test you can give it a different name because it's inside of a different jail and you can see that it has access to the same files that um the other system did so not not a problem being able to do that now the last thing i guess we could cover is what's the system actually doing now that it's spent a few minutes indexing everything right so plex is doing its thing in the background and now let's talk about the server itself now i have a full review that talks about the hardware in the server but we're going to talk about trunas and how we have it set up so this is an intel xeon gold 6240 cpu at 2.6 gigahertz and offering 72 threads and someone had commented of why would you need that many for running a free ass or true nas server as it's going to be called now from here forward i keep want to call it free nas but here's the easy answer here's plex running inside of a jail using up a little bit of processor here and that's because if you have a large media library if you think of the commercial use cases for these this might be a strong use case where you have some tool that does run in a true nas maybe as a jail and indexes all of your media as it's being dumped there maybe by multiple users and this would be the result you know you need something to go ahead and index and organize all that data and keep it going so the pools themselves what how are they configured so we go over here to storage and we go to pools and deadpool is first the big pool we have right here now i dumped over my video dump which is about 1.5 7 terabytes there and the plex has got another 33 gigs worth of data this is set up and we'll go here to status a raid z tool razi 2 pool now this raid z2 is 12 drives in it with they're all seagate 12 terabyte by 12 so 12 drives at 12 terabyte uh one big raid z2 pool now why did i do it that way not versus you know build six and six so you could get better performance but that would come at the expense of losing space i wanted to make the most space possible and i have an entire you know breakdown video and forum post i'll leave a link to to discuss all the different raid cfs pool and performance com and capacity options that come in there there's a lot to how that works in raid z that's why i have a whole you know section of my forums dedicated to the breakdown for all those works and all those options and you may watch and still not come to an easy conclusion but if you're just going hey i just want something fairly resilient but plenty of space this is the way to go now the other pool is the nvme pool this is where plex itself and the jails we told them to live on this particular pool and if we go to status on this we set it up as a really simple razi one with four nvme drives they're all 3.8 terabyte drives so it gives us plenty of storage in that particular pool for nvme so it's going to be really fast it's just not as much storage we have over here but you know there's still enough storage left over on this particular pool that we could have moved it over there but this is you know really overkill if you're going to build a plexur at home obviously you don't need this much for it but i had this over here for testing so i said hey why not do the demo and why not dive into what it would look like and how fast it would run on here and the volume of videos i have on there like i said it's a it's a decent amount of all the smaller videos which is going to cause it take a little bit longer to do the indexing on there for plex to build this database but hopefully you found this enlightening or interesting and now you hopefully have also a better understanding how the permissions and acls were so you can set up a plex server even if it's not as fast or as big as this one but be able to get it going be able to put your media in there and start sharing it and these same concepts apply if you're not using plex if you're using one of the other plugins you just have to find the username for that plugin and you know adjust this uh tutorial accordingly all right and thanks and thank you for making it to the end of the video if you like this video please give it a thumbs up if you'd like to see more content from the channel hit the subscribe button and hit the bell icon if you like youtube to notify you when new videos come out if you'd like to hire us head over to laurensystems.com fill out our contact page and let us know what we can help you with and what projects you'd like us to work together on if you want to carry on the discussion head over to forums.lawrences.com where we can carry on the discussion about this video other videos or other tech topics in general even suggestions for new videos they're accepted right there on our forums which are free also if you'd like to help the channel in other ways head over to our affiliate page we have a lot of great tech offers for you and once again thanks for watching and see you next time

Channel: Lawrence Systems

Views: 64,691

Keywords: lawrencesystems, freenas plex setup, freenas plex setup 11.3, freenas plex setup 2020, freenas plex setup guide, freenas plex server setup, freenas 11.2 plex server setup, freenas plex plugin setup, freenas, plex, nas, media server, server, tutorial, freenas 11

Id: BGinwiHPllA

Length: 27min 34sec (1654 seconds)

Published: Thu Jul 23 2020