servercontainers/netatalk repository overview

⁠netatalk - (servercontainers/netatalk) [x86 + arm]

netatalk on alpine

⁠Changelogs

• 2020-12-22
  • added support for password hashes instead of just plaintext passwords
• 2020-11-08
  • custom avahi service name
  • specify avahi model name similar to servercontainers/samba config
• 2020-11-05
  • fixed multiarch build
• 2020-10-17
  • support for external avahi (on docker host)
• 2020-10-16
  • port from debian to alpine (debian version is available as tag)
  • way smaller now
  • no compiling
  • added timemachine and zeroconf support
• 2020-10-15
  • complete rework and multi arch builds

⁠Info

So for TimeMachine I can recommend using this container. If you want simple filesharing I'd recommend samba, webdav or other stuff.

Apple announced to deprecate afp and move to samba.

⁠Environment variables and defaults

⁠Netatalk

• NETATALK_GLOBAL_CONFIG_someuniquevalue

  • add any global netatalk config to afp.conf
  • example value: key = value

• ACCOUNT_username

  • multiple variables/accounts possible
  • adds a new user account with the given username and the env value as password or password hash
    • either you add a simple plaintext password as value (can't start with $.$ or it will be detected as hash)
    • to add a password hash e.g. $6$TBPgQoB2kmijMzsi$xdmXI1Z2zIwtuKbLDKjLLvMdWvqRf2cf6aryLJB3pVrIqaEWNH8VOglLIJMYMz6mBSJ5WsLDa5T7i86gmnPAc. (password: password) use normal linux password hash (from /etc/shadow etc.)
  • to restrict access of volumes you can add the following to your samba volume config:
    • valid users = alice; invalid users = bob;

• NETATALK_VOLUME_CONFIG_myconfigname

  • adds a new netatalk volume configuration
  • multiple variables/confgurations possible by adding unique configname to NETATALK_VOLUME_CONFIG_
  • take a look at http://netatalk.sourceforge.net/3.0/htmldocs/afp.conf.5.html⁠ -> EXPLANATION OF VOLUME PARAMETERS
  • note only one time machine = yes is supported
  • examples
    • "[My Share]; path=/shares/myshare; valid users = alice; invalid users = bob;"
    • "[TimeCapsule Bob]; path=/shares/tc-bob; valid users = bob; vol size limit = 100000; time machine = yes"

• MODEL

  • optional model value of avahi afp service (get's overwritten by global config)
  • default: TimeCapsule
  • some available options are Xserve, PowerBook, PowerMac, Macmini, iMac, MacBook, MacBookPro, MacBookAir, MacPro, MacPro6,1, TimeCapsule, AppleTV1,1 and AirPort.

• AVAHI_NAME

  • optional name of avahi afp service
  • default: hostname

⁠Volumes

• your shares

  • by default I recommend mounting all shares beneath /shares and configure them using the path property
  • the file .netatalk-volume-uuid gets created and should not be removed - especially on timemachine volumes it stores the uuid of the volume

• /external/avahi

  • mount your avahi service folder e.g. /etc/avahi/services/ to this spot
  • the container now maintains the service file afp.service for you - it will be overwritten!
  • when mounted, the internal avahi daemon will be disabled

⁠Some helpful indepth informations about TimeMachine and Avahi / Zeroconf

⁠General Infos

• https://openwrt.org/docs/guide-user/services/nas/netatalk_configuration#zeroconf_advertising⁠
• http://netatalk.sourceforge.net/wiki/index.php/Bonjour_record_adisk_adVF_values⁠
• https://linux.die.net/man/5/avahi.service⁠

You can't proxy the zeroconf inside the container to the outside, since this would need routing and forwarding to your internal docker0 interface from outside. So you need to use the network=host mode to enable zeroconf from within the container

You can just expose the needed Port 548 to the docker hosts port and install avahi. After that just add a new service which fits to your config.

⁠Configuration Examples (automatically generated inside the container)

afp.conf

[Global]
  zeroconf = yes
  log file = /dev/stdout

[Time Capsule]
  path = /timecapsule
  time machine = yes

/etc/avahi/services/afdp.service

<?xml version="1.0" standalone='no'?><!--*-nxml-*-->
<!DOCTYPE service-group SYSTEM "avahi-service.dtd">
<service-group>
    <name replace-wildcards="yes">%h</name>
    <service>
        <type>_afpovertcp._tcp</type>
        <port>548</port>
    </service>
    <service>
        <type>_adisk._tcp</type>
        <port>9</port>
        <txt-record>sys=waMa=0,adVF=0x100</txt-record>
        <txt-record>dk0=adVF=0xa1,adVN=Time Capsule</txt-record>
    </service>
    <service>
        <type>_device-info._tcp</type>
        <port>0</port>
        <txt-record>model=RackMac</txt-record>
    </service>
</service-group>