New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
MacOS 10.15 - Full Disk Access Required #3168
Comments
Sonarr has no means to ask when it's trying to access the drive and that's not something that will happen, so it not triggering anything on the desktop is completely expected behaviour. Is this something Sonarr can ask for when it's first installed or would it need to be done for every version? |
With it being a first beta, it’s unclear as to whether each upgrade would need this but previous practice for MacOS has meant that full disk access is only required on first launch of whichever app requires it. Some apps (Calibre/NZBGet specifically) are already triggering the update without an update so it seems currently that apps with a GUI will automatically trigger the check that you want to allow access. It’s possible this is actually going to be something that mono will need to patch rather than Sonarr, but currently as Sonarr can’t access any drives it can’t see/move/rename any episodes and isn’t updating any shows. Sent with GitHawk |
Create a MS git account just to comment on this specific bug. What a pain, I can confirm this is happening on Mac OS Catalina10.15 beta. I have given Sonarr "Full Disk Access" in System Preference/Security & Privacy/Full Disk Access Does anyone have a functioning work around? |
@ontologyrecapitulates the only workaround at the moment is to manually execute the Sonarr.exe file from the command line with |
@formerandroider Thanks for your help. I've tried three different guesses in the osx terminal and can't translate into a woking command. Can you give me the actual one that works? (I'm too embarrassed by my guesses to list them here). |
@ontologyrecapitulates |
Been trying to find a workaround for ages that avoids having terminal open while running Sonarr, and I finally found one! Granting full disk access to sh (/bin/sh) has completely fixed it for me. Note: I didn't need to grant disk access to any other apps/files like Sonarr or mono-sgen64.
|
Can you please verify that this is still an issue on the latest developer beta (19A546d)? I tested this with Radarr and was able to both import movies to a USB drive as well as import from the default Downloads directory without an issue. I did not grant any application full disk access and launched the Radarr app normally. |
It does seem to be working now, after killing and re-starting the Radarr process. Earlier, before re-starting, it was not importing downloads nor recognizing files that I'd moved into place manually (by recognizing I mean running "update move info and scan disk" after the file was moved to the proper directory). I would be fine with closing this ticket and re-opening if there are problems with the actual Catalina release. Thank you! |
Still getting issues on the latest Beta (19A573a) - The same issues with permissions to access the file system."Unable to parse media info from file: xxx/xxx/xxx: Access to path "xxx/xxx/xxx" is denied." System.UnauthorizedAccessException Has anyone found a permanent solution? |
@ewancluckie @narmbrister's solution of permitting full disk access to |
@formerandroider Sorry for what is probably a very basic question, but how do you do that exactly? |
@ewancluckie System Preferences->Security & Privacy->Privacy [Tab]->Full disk access [Sidenav]->[Click padlock to unlock settings]-> |
@ewancluckie Where exactly is your file located? e.g. on an external drive? I tried with the latest beta and it still works fine for me, for accessing Downloads folder and a different partition of my internal drive (haven't tested external yet). @formerandroider AFAIK, there is no way to show a permissions dialog, the only thing we can do is tell people to add |
My torrents are downloaded to my user downloads folder and moved to an external drive, which started failing when I updated to 10.15. Adding the /bin/sh file to have full disk access fixed my issue. |
@galli-leo Yep. Files are located on an external disk and I'm running the latest beta. The solution from @formerandroider and @narmbrister has worked for me. Still getting some pop-up warnings from mono occasionally, but both Radarr and Sonarr are working again. |
So my setup is kind of not working, I can open the app with terminal, and I also have sh, zsh, mono and the Sonnar app approved for read/write in privacy settings. |
@dany20mh have you tried enabling the |
@formerandroider |
One correct and complete solution: (This currently has to be redone on updates, but could be made part of the update process). On a mac, go to /Applications/Sonarr.app/Contents/MacOS run mkbundle --simple -o Sonarr nzbdrone.exe (If you are using v3, use Sonarr.exe) It should generate a standalone executable named Sonarr that can be added for full disk access and work properly. It is a real macos x64 executable that bundles all the pieces + mono into a single exe. Of course, right now you have to run it separately. |
Just a thought - As this bug also displays itself in the Production release of macOS Catalina should we update the title and elevate the label of this bug from suboptimal to Bug? Thanks |
I've tried the methods above and combinations of all suggestions and it will only work with adding sh to full disk access, which I'm not going to do due to the security implications. I currently have Sonarr running via command line using a launch agent I created:
The launch agent is formatted as follows:
No problems with the app staying open, so these work as expected. I've added combinations of the Sonarr.app, Sonarr executable file, mono-sgen64 to full disk access. Still having access errors:
Absolutely baffled. Open to suggestions, but it looks like I'll be waiting for an update. |
@cmbv the issue is that none of them are actually the process that’s running the software. In all of these scenarios, I’ve been trying to get a native macOS wrapper application created, but I haven’t been having much success. |
@formerandroider Yeah, I completely agree. I just can’t understand why some seem to have had success with other methods outside of granting full disk access to sh. |
I think the difference is those that are having media copied to external drives, vs those that are just having it copied/moved from the Downloads folder. macOS is more strict regarding access to removable stroage. That is just a guess, though. |
" that are having media copied to external drives" Agree. The files land in a subfolder of Downloads just fine. Where it falls over is the rename/move to the external RAID. |
@cmbv thanks for pointing out the security concerns. Unfortunately I know just enough about these things to make hacky fixes, but not enough to know why I shouldn't haha. I get the basic idea behind restricting disk access for applications, but would you mind telling me what I've opened myself up to by granting it to /bin/sh specifically? |
yes, sorry - just worked that out. In the meantime, I downloaded directly the latest version which put me on v3.0.3.849 immediately. I did not uninstall first. |
I had to use <cmd>open the first time (no worries) and it appears to be working perfectly just by running from the app (without any mono related script) :-) |
Hm. I'm on 3.0.3.850 - updated through the app.
- Jon
…On Fri, Jun 5, 2020 at 7:49 AM JCHH ***@***.***> wrote:
yes, sorry - just worked that out.
In the meantime, I downloaded directly the latest version which put me on
v3.0.3.849 immediately. I did not uninstall first.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
<#3168 (comment)>, or
unsubscribe
<https://github.com/notifications/unsubscribe-auth/ABSHYQKKJ55WB4FD2H5XHG3RVEAYLANCNFSM4HYNBSTQ>
.
|
849 is the current phantom-develop not the osx fix. If you install normally you have to download the zip I linked, not from via sonarr.tv website. |
OK, will try that now... |
I assume you are hoping that simply running from the app (no mono script) is going to work? I'm getting nothing that way (using the download link but did not uninstall first (do I have to uninstall?). |
OK, it's working now. Uninstalling only removed the .app itself, but I did it anyway. The first time to run, I had to use the <cmd><open> and I noticed in Activity Monitor that it started running before I OK'd it. Sonarr did not work after I OKd it - even though a process was running. I uninstalled and reinstalled. This time, when I used <cmd><open>, I killed the process that started before my OKing. Then, after I OKd, the process started again. This time it worked. Killing the process and restarting "normally" (2nd time on) was fine. It's just that first-run which is tricky. |
Should've checked No matter how you start it, you start Sonarr and will show in the activity monitor as such. After the bootstrap does it things it switches to mono in-process. This is the whole point of the exercise so that OSX still knows it's Sonarr and associates the permissions correctly. PS: Yes, you have to 'uninstall'/stop+remove the existing App because normal users won't have it installed. I'm honestly not sure what normally happens if you run Sonarr twice like that. |
Taloth, I can confirm that after upgrading to the phantom-osx-catalina branch and upgrading to it in app - I'm running Sonarr without terminal and for the first time since I've been running Catalina, Sonarr CAN see my NAS attached directories. YAY! THANKS to all of the people that made this finally happen!!!
|
That. 😄 PS: this particular test we already did ourselves, I just want to verify it with some random people in case someone has a setup that's different than what we tested with. We tested it with both admin and standard users, and some other odd combos but I felt like it was useful to do a final test before throwing it over the wall. especially since we don't have a separate phantom-master yet. |
I didn't get any popups, but I can see that Sonarr IS listed in my Security
& Privacy section of Settings, in the Files and Folders section and says
"Sonarr.app Full Disk Access"
Maybe that's what's allowing it to do what it's doing?
- Jon
…On Fri, Jun 5, 2020 at 8:49 AM Taloth ***@***.***> wrote:
What would you like for us to check after we have 3.0.3.850 running?
Sonarr CAN see my NAS attached directories.
That. 😄
I assume you got a popup to give it permission and that it shows up in
Security & Privacy? Where you should be able to withdraw permission again.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
<#3168 (comment)>, or
unsubscribe
<https://github.com/notifications/unsubscribe-auth/ABSHYQOZRZJK6JTXSFLOQ73RVEH2BANCNFSM4HYNBSTQ>
.
|
You probably did that a long time ago when fiddling with scripts and options and discovering where to do Full Disk Access. |
Hm. Apple doesn't allow you to delete anything in that list. I ALSO see
Sonarr listed with a check mark under the "Full Disk Access" area. I THINK
that the "Files and Folders" area must be populated with the apps that are
given permission in the "Full Disk Access" setting. Not sure...
- Jon
…On Fri, Jun 5, 2020 at 9:05 AM Taloth ***@***.***> wrote:
You probably did that a long time ago when fiddling with scripts and
options and discovering where to do Full Disk Access.
Remove the permission. (maybe need to restart sonarr afterwards)
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
<#3168 (comment)>, or
unsubscribe
<https://github.com/notifications/unsubscribe-auth/ABSHYQMA4K4U77HLMUQUNBLRVEJUBANCNFSM4HYNBSTQ>
.
|
I can see my NAS shares too. I did not get a pop-up , it just worked. I deleted Sonarr from "full disk access". Note that Mono has permission for network volumes and removable volumes. Should they also be removed for this test? When I restarted, Sonarr asked for Network access (I gave it) and it can see my NAS OK :-) |
Awesome! thanks for the help guys. the catalina branch just works. is there an equivalent branch for Radarr? I can't seem to find one other than develop. |
I feel like the ppl that got full disk access on Sonarr already had that due to an earlier attempt. fyi with |
Ok, I used that tccutil command, restarted Sonarr, and when I tried to
access a network share with Sonarr, got a pop up for disk access. Once
granted, I now see Sonarr listed under "Files and Folders" with "Network
Volumes" and it seems to be working fine. So no "Full Disk Access" now...
- Jon
…On Fri, Jun 5, 2020 at 10:01 AM Taloth ***@***.***> wrote:
I feel like the ppl that got full disk access on Sonarr already had that
due to an earlier attempt.
fyi with tccutil reset All com.osx.sonarr.tv you can reset the
permissions.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
<#3168 (comment)>, or
unsubscribe
<https://github.com/notifications/unsubscribe-auth/ABSHYQIO3MDVK4RAN7LW5NDRVEQHBANCNFSM4HYNBSTQ>
.
|
@brechtdebaene -> I believe that the developers for Radarr are a different group. Hope they see this progress and quickly adopt it too! I'm on the "nightly" build for Radarr - v0.2.0.1494 and I have to manually copy movies that are downloaded.
|
Radarr aphrodite is using dotnet core iirc which has it's own binary loader. I don't see them porting it to the existing v2 version (same like I'm not gonna support it for Sonarr v2) |
Ah right. I read something about Aphrodite. I need to figure out how to get onto that one. Thanks for the reminder. |
Am on Aphrodite now - worked perfectly following this guide: https://www.reddit.com/r/radarr/comments/gnrvlk/how_to_install_radarr_v3_aphrodite_on_macos/
|
The original request still stands #3168 (comment) If anyone else runs into issues let me know asap. Otherwise I'll ship it to phantom-develop tomorrow. |
Just a note that if anyone is using the Automator approach that I mentioned above, the update will most likely fail (can't write to temp folders I think). If that's the case for you, shut down Sonarr and launch the regular app instead, then initiate the update. |
No issues detected (after upgrade from Automator approach), but I'm sure you're still going to get people who have Sonarr running on an unmonitored machine freaking out that Sonarr has "stopped working" (because they haven't seen the Permissions dialogs). I'm willing to draft a short little how-to for the wiki if it's needed/wanted that can explain how to trigger the dialog manually instead of waiting for a refresh or move attempt. |
I'd appreciate that. But please also include the normal install steps (such as Ctrl+Open) and the install approval dialogs users will normally encounter. We discussed the 'suddenly stopped working' scenario earlier in this thread and concluded that, since Sonarr v3 is beta, a potentially breaking change like this is acceptable. |
Closed via 396caa5 Add wiki page here https://github.com/Sonarr/Sonarr/wiki/MacOS-Permissions TODO: Update install instructions for on the site. |
Just upgraded to Catalina and this fixes it for me as well. Thank you for sharing. Edit: using version 2.0.0.5344 - 13 Mar 2020 |
If you want it to work without Full Access then you need Sonarr v3. |
Describe the bug
The next version of MacOS (10.15) requires physical interaction by the user to allow access to the either the file system, or to any networked shares. At the moment Sonarr just accepts being refused access to the filesystem/network shares and doesn't trigger any option to allow access on the desktop.
Logs
System Information
The text was updated successfully, but these errors were encountered: