Got Apple Time Machine working with Samba.

I've been waiting for https://bugzilla.samba.org/show_bug.cgi?id=12380 to be resolved for a few months. It linked to samba-team/samba#64. It's gonna be a while before that's merged. Adding steps on patching, building, and installing custom Samba RPMs. Time Machine now works from my MacPro and MacBook to my server.
Robpol86 · Apr 8, 2017 · 93307a2 · 93307a2
1 parent d1043ec
commit 93307a2
Show file tree

Hide file tree

Showing 3 changed files with 69 additions and 17 deletions.
diff --git a/docs/_static/smb.conf b/docs/_static/smb.conf
@@ -2,6 +2,8 @@
     access based share enum = yes
     dfree command = /usr/local/bin/dfree_btrfs
     disable spoolss = yes
+    durable handles = yes
+    fruit:advertise_fullsync = true
     load printers = no
     passdb backend = tdbsam
     security = user
@@ -39,3 +41,11 @@
 
 [Temporary]
     copy = Main
+
+[TimeMachine]
+    copy = Main
+    fruit:aapl = yes
+    kernel oplocks = no
+    kernel share modes = no
+    posix locking = no
+    vfs objects = catia fruit streams_xattr
diff --git a/docs/_static/timemachine.service b/docs/_static/timemachine.service
@@ -0,0 +1,19 @@
+<?xml version="1.0" standalone='no'?>
+<!DOCTYPE service-group SYSTEM "avahi-service.dtd">
+<service-group>
+ <name replace-wildcards="yes">%h</name>
+ <service>
+   <type>_smb._tcp</type>
+   <port>445</port>
+ </service>
+ <service>
+   <type>_device-info._tcp</type>
+   <port>0</port>
+   <txt-record>model=RackMac</txt-record>
+ </service>
+ <service>
+   <type>_adisk._tcp</type>
+   <txt-record>sys=waMa=0,adVF=0x100</txt-record>
+   <txt-record>dk0=adVN=TimeMachine,adVF=0x82</txt-record>
+ </service>
+</service-group>
diff --git a/docs/my_awesome_server.rst b/docs/my_awesome_server.rst
@@ -13,12 +13,12 @@ I've had home servers since I was in high school in 2002. However I've never doc
 I'll be outlining the steps I took in setting up my current home Linux server. It's a general purpose server, acting as:
 
 1. A file server for all of my media/backups/etc.
-2. `Docker <https://www.docker.com/>`_ server.
-3. `Metrics <https://robpol86.github.io/influxdb/>`_ collecting and email alerting.
-4. `Plex <https://www.plex.tv/>`_ media server.
-5. Automated Bluray/DVD ripping (backups) station.
-6. Automated video file transcoder.
-7. Apple Time Machine backup server.
+2. Apple Time Machine backup server.
+3. `Docker <https://www.docker.com/>`_ server.
+4. `Metrics <https://robpol86.github.io/influxdb/>`_ collecting and email alerting.
+5. `Plex <https://www.plex.tv/>`_ media server.
+6. Automated Bluray/DVD ripping (backups) station.
+7. Automated video file transcoder.
 8. Tape backup server.
 9. Audio/video file ID3/metadata validator.
 
@@ -232,32 +232,54 @@ subvolumes (basically just directories from Samba's point of view).
     sudo useradd -p "$(openssl rand 32 |openssl passwd -1 -stdin)" -M -s /sbin/nologin stuff
     sudo useradd -p "$(openssl rand 32 |openssl passwd -1 -stdin)" -M -s /sbin/nologin printer
     sudo usermod -a -G printer robpol86
-    sudo chown robpol86:robpol86 /storage/{Main,Media,Old,Temporary}
+    sudo chown robpol86:robpol86 /storage/{Main,Media,Old,Temporary,TimeMachine}
     sudo chown stuff:stuff /storage/Stuff
-    sudo chmod 0750 /storage/{Main,Media,Old,Stuff}
+    sudo chmod 0750 /storage/{Main,Media,Old,Stuff,TimeMachine}
     sudo chmod 0751 /storage/Temporary
-    sudo setfacl -d -m u::rwx -m g::rx -m o::- /storage/{Main,Media,Old,Stuff,Temporary}
+    sudo setfacl -d -m u::rwx -m g::rx -m o::- /storage/{Main,Media,Old,Stuff,Temporary,TimeMachine}
     mkdir -m 0770 /storage/Temporary/Printer; sudo chgrp printer $_  # Run as robpol86.
     sudo setfacl -d -m u::rwx -m g::rwx -m o::- /storage/Temporary/Printer
 
-Next I'll install Samba, set Samba-specific passwords used by remote clients, and configure SELinux (other Samba guides
-love to disable SELinux or set ``samba_export_all_rw`` which is basically the same as disabling SELinux).
+Normally I'd then install Samba the usual way with dnf. However at this time support for Apple's Time Machine `isn't`_
+yet `available`_. My workaround is to build a custom RPM with the ``F_FULLSYNC`` feature patched in until Samba
+officially supports it.
 
 .. code-block:: bash
 
-    sudo dnf install samba policycoreutils-python-utils
+    sudo dnf install @development-tools fedora-packager
+    fedpkg co -ab f25 samba && cd $_
+    fedpkg sources
+    curl -L https://github.com/samba-team/samba/pull/64.patch -o samba-fullsync.patch
+    # Edit samba.spec to add: Patch1: samba-fullsync.patch
+    fedpkg prep
+    sudo dnf builddep --spec samba.spec
+    fedpkg local
+    sudo dnf install noarch/samba-common-4.5.8* \
+        x86_64/{libwbclient,libsmbclient,samba{,-libs,-client,-client-libs,-common{-libs,-tools}}}-4.5.8*
+
+Next I'll install set Samba-specific passwords used by remote clients and configure SELinux (other Samba guides love to
+disable SELinux or set ``samba_export_all_rw`` which is basically the same as disabling SELinux).
+
+.. code-block:: bash
+
+    sudo dnf install avahi policycoreutils-python-utils
     sudo smbpasswd -a stuff && sudo smbpasswd -e $_
     sudo smbpasswd -a printer && sudo smbpasswd -e $_
     sudo smbpasswd -a robpol86 && sudo smbpasswd -e $_
     sudo semanage fcontext -a -t samba_share_t /storage
-    sudo semanage fcontext -a -t samba_share_t "/storage/(Main|Media|Old|Stuff|Temporary)(/.*)?"
+    sudo semanage fcontext -a -t samba_share_t "/storage/(Main|Media|Old|Stuff|Temporary|TimeMachine)(/.*)?"
     sudo restorecon -R -v /storage
 
 Then write the following to ``/usr/local/bin/dfree_btrfs``:
 
 .. literalinclude:: _static/dfree_btrfs.sh
     :language: bash
 
+And write the following to ``/etc/avahi/services/timemachine.service``:
+
+.. literalinclude:: _static/timemachine.service
+    :language: bash
+
 Now replace ``/etc/samba/smb.conf`` with:
 
 .. literalinclude:: _static/smb.conf
@@ -271,10 +293,11 @@ Finally run the following. Add firewall rules to force my OS X host to use the N
     sudo firewall-cmd --permanent --add-service=samba
     sudo firewall-cmd --permanent --add-rich-rule="rule family=ipv4 source address=10.192.168.20 service name=samba drop"
     sudo systemctl restart firewalld.service
-    sudo systemctl start smb.service
-    sudo systemctl enable smb.service
-    sudo systemctl start nmb.service
-    sudo systemctl enable nmb.service
+    sudo systemctl start smb.service nmb.service avahi-daemon.service
+    sudo systemctl enable smb.service nmb.service avahi-daemon.service
+
+.. _isn't: https://bugzilla.samba.org/show_bug.cgi?id=12380
+.. _available: https://github.com/samba-team/samba/pull/64
 
 Monitoring/Graphing/Alerting
 ============================