[{"_1":2,"_156":-5,"_157":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_135":136},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_85":-5,"_86":87,"_126":-5,"_127":11,"_128":17,"_129":11,"_130":-5,"_131":11,"_132":-5,"_133":134},"canonicalUrl","https://hub.docker.com/r/stanback/alpine-samba/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","stanback","reponame","alpine-samba","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":65,"_66":67,"_68":11,"_69":29,"_70":71,"_76":17,"_77":78,"_82":29,"_83":84},"categories",[],"content_types",[40],"image","date_registered","2017-01-22T22:06:40.968358Z","description","Alpine Linux + Samba 4","is_private","last_updated","2020-04-28T01:05:58.28442Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[52],"application/vnd.docker.container.image.v1+json","name","pull_count",1251440,"repository_type","star_count",19,"status",1,"status_description","active","source","collaborator_count",0,"full_description","# Samba 4 + Alpine Linux Docker Image\n\nThis repository contains a basic Dockerfile for installing Samba 4\non Alpine Linux.\n\nThis is a solution for network filesharing. I use it on my self-built,\nzfs-based NAS server and connect up OSX, Linux, and Windows clients.\n\nI was previously running Netatalk for Apple AFP support, however\nI've found that Samba works reasonably well for me and it appears\nthat [Apple may start prefering Samba over AFP](http://appleinsider.com/articles/13/06/11/apple-shifts-from-afp-file-sharing-to-smb2-in-os-x-109-mavericks).\n\n## Create Samba Configuration\n\nCreate the `smb.conf` configuration file. The following is an example:\n\n```\n[global]\n workgroup = WORKGROUP\n server string = %h server (Samba, Alpine)\n security = user\n map to guest = Bad User\n encrypt passwords = yes\n load printers = no\n printing = bsd\n printcap name = /dev/null\n disable spoolss = yes\n disable netbios = yes\n server role = standalone\n server services = -dns, -nbt\n smb ports = 445\n ;name resolve order = hosts\n ;log level = 3\n\n[Dozer]\n path = /dozer\n comment = ZFS\n browseable = yes\n writable = yes\n valid users = carol\n\n[Shared]\n path = /share\n comment = Shared Folder\n browseable = yes\n read only = yes\n write list = carol\n guest ok = yes\n```\n\nFor added security, you can control which interfaces Samba binds to and\nwhich networks are allowed access. This is important if you're using\n`--net=host` because Samba will bind to all interfaces by default and may\nbind to an interface you hadn't intended. Add to the `[global]` section:\n\n```\n hosts allow = 192.168.11.0/24 10.0.0.0/24\n hosts deny = 0.0.0.0/0\n interfaces = 192.168.11.0/24 10.0.0.0/24\n bind interfaces only = yes\n```\n\nI'm experimenting with the following settings (in the `[global]` section)\nto add default permissions for windows clients, to enable extended features\nfor OSX clients, to enable recycle bins, and to be able to use ZFS's\nposix-style ACLs.:\n\n```\n create mask = 0664\n directory mask = 0775\n veto files = /.DS_Store/\n nt acl support = no\n inherit acls = yes\n ea support = yes\n vfs objects = catia fruit streams_xattr recycle\n acl_xattr:ignore system acls = yes\n recycle:repository = .recycle\n recycle:keeptree = yes\n recycle:versions = yes\n```\n\n## Running\n\nAdd/update the `-v` volumes below to match the shares defiend in your\n`smb.conf` file and run:\n\n```\ndocker run -dt \\\n -v $PWD/smb.conf:/etc/samba/smb.conf \\\n -v $PWD/dozer:/dozer \\\n -v $PWD/share:/share \\\n -p 445:445 \\\n --name samba \\\n --restart=always \\\n stanback/alpine-samba\n```\n\nYou can replace `-p 445:445` with `--net=host` above if you want to use your\nhost's networking stack instead of Docker's proxy but it's not necessary. You\ncan append additional arguments for `smbd` or append `--help` for a list of\noptions.\n\n## Add Users\n\nOnce the server is running, you can add your users using the following:\n\n```\ndocker exec -it samba adduser -s /sbin/nologin -h /home/samba -H -D carol\ndocker exec -it samba smbpasswd -a carol\n```\n\n## Check Status\n\nCheck the logs for startup errors (adjust log level in `smb.conf` if needed),\nthen connect a client and check the status:\n\n```\ndocker logs -f --tail=100 samba\ndocker exec -it samba smbstatus\n```\n\n## SSDP / ZeroConf Service Discovery\n\nFor auto-discovery on Linux and OSX machines, we can use the\nmulticast-based mDNS and DNS-SD protocls (also known as Bonjour) using\nAvahi daemon.\n\nThe main use-case for this project is for a standalone, personal or small\nworkgroup file server with a majority of clients on OSX or Linux. I've\nmade a choice to not support legacy protocols, including NetBIOS, WINS,\nand the old Samba port `139`. Some of the issues with NetBIOS include\nexcessive broadcast packets, lack of IPV6 support, and easy spoofing.\n\nBecause of this, it means:\n\n* For Windows clients, your Samba server won't be shown under network\n browsing. Microsoft has been adding support for DNS-SD functionality\n recently, so it's possible they will eventually support finding Samba\n shares using mDNS and DNS-SD. In the meantime, you can still connect\n directly to the IP or hostname to use the shares.\n\n* Samba can act as a domain controller or join an NT domain but that is not\n supported with this configuration. I may put together a separate\n project that supports NetBIOS/WINS and can either join or act as a domain\n controller.\n\n### Configuring Avahi Services\n\nTo announce Samba on your network, setup a file called `smb.services`\n(below) in a new folder `services/`. You can announce more services\nhere, such as SSH or SFTP.\n\n```\n\n\n\n %h\n \n _smb._tcp\n 445\n \n \n _device-info._tcp\n 0\n model=RackMac\n \n\n```\n\n### Running\n\n```\ndocker run -d \\\n -v $PWD/services:/etc/avahi/services \\\n --net=host \\\n --name=avahi \\\n --restart=always \\\n stanback/alpine-avahi\n```\n\nIt's possible to not use `--net=host`, and instead specify the port mapping\n`-p 5353:5353/udp` and optionally giving your Docker container a hostname\nwith `--hostname=myhostname` but I haven't gotten it to work correctly.\n\n## Client Configuration\n\nNothing special should need to happen on your clients, below are some\nsettings that may be tweaked.\n\n### OSX\n\nDisable writing .DS_Store files on network shares:\n\n defaults write com.apple.desktopservices DSDontWriteNetworkStores true\n\nDisable netbios (be careful with this one):\n\n sudo launchctl disable system/netbiosd\n\n\n","has_starred","hub_user","immutable_tags_settings",{"_72":11,"_73":74},"enabled","rules",[75],".*","is_automated","permissions",{"_79":17,"_80":11,"_81":11},"read","write","admin","user","storage_size",139208884,"orgData","recentTags",[88],{"_89":40,"_90":91,"_92":93,"_94":95,"_96":97,"_46":115,"_116":91,"_117":29,"_118":52,"_53":119,"_120":121,"_122":106,"_123":115,"_124":62,"_125":17},"content_type","creator",202367,"full_size",17357946,"id",7598459,"images",[98],{"_99":100,"_101":102,"_103":104,"_105":106,"_107":108,"_109":110,"_111":104,"_112":-5,"_113":93,"_59":62,"_114":-5},"architecture","amd64","digest","sha256:e9c376e4db384078501b5f8912049c5685d0ed166b19bc88bb991e1a1f7e98e7","features","","last_pulled","2026-09-22T13:18:24.931932089Z","last_pushed","2020-04-28T01:05:58Z","os","linux","os_features","os_version","size","variant","2020-04-28T01:05:57.713138Z","last_updater","last_updater_username","media_type","latest","repository",1192413,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":137,"_144":145,"_133":154,"_155":11},{"_36":138,"_38":139,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":140,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":65,"_66":67,"_68":11,"_69":29,"_70":141,"_76":17,"_77":143,"_82":29,"_83":84},[],[40],[52],{"_72":11,"_73":142},[75],{"_79":17,"_80":11,"_81":11},"tags",{"_146":60,"_147":-5,"_148":-5,"_149":150},"count","next","previous","results",[151],{"_89":40,"_90":91,"_92":93,"_94":95,"_96":152,"_46":115,"_116":91,"_117":29,"_118":52,"_53":119,"_120":121,"_122":106,"_123":115,"_124":62,"_125":17},[153],{"_99":100,"_101":102,"_103":104,"_105":106,"_107":108,"_109":110,"_111":104,"_112":-5,"_113":93,"_59":62,"_114":-5},[],"canDeleteTags","actionData","errors"]

stanback/alpine-samba

Tags for stanback/alpine-samba