Zeroconf doesn't fully work.

[marcosvrs]

I'm having issues to have my mac to discover the netatalk server automatically trough my network.
I guess I setup everything correct, but still the network list in finder is empty:

But once I manually use the server address to connect, it connects:

My docker-compose settings:

netatalk:
    image: netatalk/netatalk
    environment:
      AFP_PASS: ${NETATALK_AFP_PASS:?NETATALK_AFP_PASS is required}
      AFP_USER: ${NETATALK_AFP_USER:-${DEFAULT_USERNAME:?DEFAULT_USERNAME is required}}
      AFP_GROUP: ${NETATALK_AFP_GROUP:-afpusers}
      ATALKD_INTERFACE: ${NETATALK_ATALKD_INTERFACE:-eno1}
      SERVER_NAME: ${NETATALK_SERVER_NAME:-$(hostname)}.local
      TZ: Europe/Dublin
    cap_add:
      - NET_ADMIN
    security_opt:
      - apparmor:unconfined
    network_mode: host
    volumes:
      - /mnt/afpbackup:/mnt/afpbackup
      - /var/run/dbus:/var/run/dbus
    restart: unless-stopped
    labels:
      traefik.enable: false

My Logs

netatalk-1  | *** Setting up users and groups
netatalk-1  | chpasswd: password for 'marcosvr' changed
netatalk-1  | afppasswd: max password length is 8.
netatalk-1  | NOTE: Use a password of 8 chars or less to authenticate with Mac OS 8 or earlier clients
netatalk-1  | *** Configuring shared volume
netatalk-1  | *** Fixing permissions
netatalk-1  | *** Removing residual lock files
netatalk-1  | *** Configuring Netatalk
netatalk-1  | *** Configuring AppleTalk
netatalk-1  | *** Starting AppleTalk services (this will take a minute)
netatalk-1  | *** Starting AFP server
netatalk-1  | Nov 25 12:52:15.777154 netatalk[31] {netatalk.c:445} (note:Default): Netatalk AFP server starting
netatalk-1  | Nov 25 12:52:15.777832 netatalk[31] {netatalk.c:493} (note:Default): Starting dbus: /usr/bin/dbus-daemon
netatalk-1  | Nov 25 12:52:15.782853 cnid_metad[33] {cnid_metad.c:503} (note:AFPDaemon): CNID Server listening on localhost:4700
netatalk-1  | Nov 25 12:52:16.286268 afpd[32] {status.c:754} (info:AFPDaemon): signature is 30FE3EEF66D6445617DD9BF0B9700EB6
netatalk-1  | No such schema “org.freedesktop.Tracker.Miner.Files”
netatalk-1  | No such schema “org.freedesktop.Tracker.Miner.Files”
netatalk-1  | Nov 25 12:52:16.787708 netatalk[31] {netatalk.c:506} (note:Default): Starting indexer: /usr/bin/tracker3 daemon -s
netatalk-1  | Starting miners…
netatalk-1  | dbus-daemon[34]: [session uid=0 pid=34] Activating service name='org.freedesktop.Tracker3.Miner.Files' requested by ':1.0' (uid=0 pid=37 comm="/usr/bin/tracker3-daemon -s" label="unconfined")
netatalk-1  | 
netatalk-1  | (tracker-miner-fs-3:42): Tracker-WARNING **: 12:52:16.883: Unable to get XDG user directory path for special directory &DOCUMENTS. Ignoring this location.
netatalk-1  | 
netatalk-1  | (tracker-miner-fs-3:42): Tracker-WARNING **: 12:52:16.883: Unable to get XDG user directory path for special directory &MUSIC. Ignoring this location.
netatalk-1  | 
netatalk-1  | (tracker-miner-fs-3:42): Tracker-WARNING **: 12:52:16.883: Unable to get XDG user directory path for special directory &PICTURES. Ignoring this location.
netatalk-1  | 
netatalk-1  | (tracker-miner-fs-3:42): Tracker-WARNING **: 12:52:16.883: Unable to get XDG user directory path for special directory &VIDEOS. Ignoring this location.
netatalk-1  | 
netatalk-1  | (tracker-miner-fs-3:42): Tracker-WARNING **: 12:52:16.883: Unable to get XDG user directory path for special directory &DOWNLOAD. Ignoring this location.
netatalk-1  | 
netatalk-1  | (tracker-miner-fs-3:42): Tracker-WARNING **: 12:52:16.883: Unable to get XDG user directory path for special directory &DOCUMENTS. Ignoring this location.
netatalk-1  | 
netatalk-1  | (tracker-miner-fs-3:42): Tracker-WARNING **: 12:52:16.883: Unable to get XDG user directory path for special directory &MUSIC. Ignoring this location.
netatalk-1  | 
netatalk-1  | (tracker-miner-fs-3:42): Tracker-WARNING **: 12:52:16.884: Unable to get XDG user directory path for special directory &PICTURES. Ignoring this location.
netatalk-1  | 
netatalk-1  | (tracker-miner-fs-3:42): Tracker-WARNING **: 12:52:16.884: Unable to get XDG user directory path for special directory &VIDEOS. Ignoring this location.
netatalk-1  | 
netatalk-1  | (tracker-miner-fs-3:42): Tracker-WARNING **: 12:52:17.111: Unable to get XDG user directory path for special directory &DOCUMENTS. Ignoring this location.
netatalk-1  | 
netatalk-1  | (tracker-miner-fs-3:42): Tracker-WARNING **: 12:52:17.111: Unable to get XDG user directory path for special directory &MUSIC. Ignoring this location.
netatalk-1  | 
netatalk-1  | (tracker-miner-fs-3:42): Tracker-WARNING **: 12:52:17.111: Unable to get XDG user directory path for special directory &PICTURES. Ignoring this location.
netatalk-1  | 
netatalk-1  | (tracker-miner-fs-3:42): Tracker-WARNING **: 12:52:17.111: Unable to get XDG user directory path for special directory &VIDEOS. Ignoring this location.
netatalk-1  | 
netatalk-1  | (tracker-miner-fs-3:42): Tracker-WARNING **: 12:52:17.112: Unable to get XDG user directory path for special directory &DOWNLOAD. Ignoring this location.
netatalk-1  | 
netatalk-1  | (tracker-miner-fs-3:42): Tracker-WARNING **: 12:52:17.112: Unable to get XDG user directory path for special directory &DOCUMENTS. Ignoring this location.
netatalk-1  | 
netatalk-1  | (tracker-miner-fs-3:42): Tracker-WARNING **: 12:52:17.112: Unable to get XDG user directory path for special directory &MUSIC. Ignoring this location.
netatalk-1  | 
netatalk-1  | (tracker-miner-fs-3:42): Tracker-WARNING **: 12:52:17.112: Unable to get XDG user directory path for special directory &PICTURES. Ignoring this location.
netatalk-1  | 
netatalk-1  | (tracker-miner-fs-3:42): Tracker-WARNING **: 12:52:17.112: Unable to get XDG user directory path for special directory &VIDEOS. Ignoring this location.
netatalk-1  | dbus-daemon[34]: [session uid=0 pid=34] Successfully activated service 'org.freedesktop.Tracker3.Miner.Files'
netatalk-1  |   ✓ File System
netatalk-1  | Nov 25 12:52:17.120911 netatalk[31] {afp_avahi.c:314} (info:AFPDaemon): Successfully started avahi loop.
netatalk-1  | Nov 25 12:52:17.120941 netatalk[31] {netatalk.c:515} (note:Default): Registered with Zeroconf
netatalk-1  | Nov 25 12:52:22.292105 afpd[32] {status.c:754} (info:AFPDaemon): signature is 30FE3EEF66D6445617DD9BF0B9700EB6
netatalk-1  | Nov 25 12:52:22.292125 afpd[32] {afp_config.c:208} (note:AFPDaemon): jarvis:AFPServer@* started on 65280.125:128 (4.0.7)
netatalk-1  | Nov 25 12:52:22.292209 afpd[32] {dsi_tcp.c:520} (info:DSI): dsi_tcp: hostname 'jarvis' resolves to loopback address
netatalk-1  | Nov 25 12:52:22.292265 afpd[32] {dsi_tcp.c:287} (info:DSI): dsi_tcp: '192.168.1.13:548' on interface 'eno1' will be used instead.
netatalk-1  | Nov 25 12:52:22.292417 afpd[32] {auth.c:116} (info:AFPDaemon): uam: "2-Way Randnum exchange" available
netatalk-1  | Nov 25 12:52:22.292433 afpd[32] {auth.c:116} (info:AFPDaemon): uam: "Randnum exchange" available
netatalk-1  | Nov 25 12:52:22.292443 afpd[32] {auth.c:116} (info:AFPDaemon): uam: "DHX2" available
netatalk-1  | Nov 25 12:52:22.292454 afpd[32] {auth.c:116} (info:AFPDaemon): uam: "DHCAST128" available
netatalk-1  | Nov 25 12:52:22.292467 afpd[32] {status.c:376} (info:AFPDaemon): servername: jarvis
netatalk-1  | Nov 25 12:52:22.292484 afpd[32] {auth.c:116} (info:AFPDaemon): uam: "2-Way Randnum exchange" available
netatalk-1  | Nov 25 12:52:22.292494 afpd[32] {auth.c:116} (info:AFPDaemon): uam: "Randnum exchange" available
netatalk-1  | Nov 25 12:52:22.292503 afpd[32] {auth.c:116} (info:AFPDaemon): uam: "DHX2" available
netatalk-1  | Nov 25 12:52:22.292512 afpd[32] {auth.c:116} (info:AFPDaemon): uam: "DHCAST128" available
netatalk-1  | Nov 25 12:52:22.292522 afpd[32] {status.c:376} (info:AFPDaemon): servername: jarvis
netatalk-1  | Nov 25 12:52:22.292535 afpd[32] {afp_config.c:319} (note:AFPDaemon): Netatalk AFP/TCP listening on 192.168.1.13:548
netatalk-1  | Nov 25 12:52:22.292552 afpd[32] {ldap_config.c:103} (info:AFPDaemon): LDAP: not used
netatalk-1  | Nov 25 12:52:22.292567 afpd[32] {cnid.c:58} (info:AFPDaemon): Registering CNID module [last]
netatalk-1  | Nov 25 12:52:22.292577 afpd[32] {cnid.c:58} (info:AFPDaemon): Registering CNID module [dbd]
netatalk-1  | 
netatalk-1  | (tracker-miner-fs-3:42): Tracker-WARNING **: 12:52:33.016: Could not launch metadata extractor: Failed to execute child process “/usr/libexec/tracker-extract-3” (Permission denied)

[rdmark]

@marcosvrs What host OS are you running this container on? The apparmor line suggests Ubuntu, but please confirm.

Have you verified that D-Bus is running on the host OS, and that the /var/run/dbus is the correct path to the D-Bus socket?

[marcosvrs]

Hi @rdmark,

Thanks for your response. Here’s the information you requested:

1. Host OS:

# lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 24.04 LTS
Release:        24.04
Codename:       noble

2. D-Bus Status:

# systemctl status dbus
● dbus-broker.service - D-Bus System Message Bus
     Loaded: loaded (/usr/lib/systemd/system/dbus-broker.service; enabled; preset: enabled)
     Active: active (running) since Sat 2024-11-23 19:58:54 UTC; 1 day 21h ago
TriggeredBy: ● dbus.socket
       Docs: man:dbus-broker-launch(1)
    Process: 3481744 ExecReload=/usr/bin/busctl call org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus ReloadConfig (code=exited, status=0/SUCCESS)
   Main PID: 679 (dbus-broker-lau)
      Tasks: 2 (limit: 18852)
     Memory: 3.7M (peak: 5.0M)
        CPU: 6min 44.212s
     CGroup: /system.slice/dbus-broker.service
             ├─679 /usr/bin/dbus-broker-launch --scope system --audit
             └─680 dbus-broker --log 4 --controller 9 --machine-id b3104ca54cdb46a3982b61bdc822f215 --max-bytes 536870912 --max-fds 4096 --max-matches 16384 --audit

Nov 25 11:16:15 jarvis dbus-broker-launch[679]: Looking up NSS group entry for 'power'...
Nov 25 11:16:15 jarvis dbus-broker-launch[679]: NSS returned no entry for 'power'
Nov 25 11:16:15 jarvis dbus-broker-launch[679]: Invalid group-name in /usr/share/dbus-1/system.d/org.freedesktop.thermald.conf +19: group="power"
Nov 25 11:16:15 jarvis systemd[1]: Reloaded dbus-broker.service - D-Bus System Message Bus.
Nov 25 12:10:32 jarvis dbus-broker[680]: A security policy denied :1.10011 to send method call /org/freedesktop/DBus:org.freedesktop.DBus.Hello to org.freedesktop.DBus.
Nov 25 12:11:16 jarvis dbus-broker[680]: A security policy denied :1.10012 to send method call /org/freedesktop/DBus:org.freedesktop.DBus.Hello to org.freedesktop.DBus.
Nov 25 12:11:18 jarvis dbus-broker[680]: A security policy denied :1.10013 to send method call /org/freedesktop/DBus:org.freedesktop.DBus.Hello to org.freedesktop.DBus.
Nov 25 12:11:18 jarvis dbus-broker[680]: A security policy denied :1.10014 to send method call /org/freedesktop/DBus:org.freedesktop.DBus.Hello to org.freedesktop.DBus.

3. D-Bus socket:

# ls -l /var/run/dbus
total 0
drwxr-xr-x 2 messagebus root 40 Nov 23 19:58 containers
srw-rw-rw- 1 root       root  0 Nov 23 19:58 system_bus_socket

4. D-Bus Services List:

# sudo busctl list
NAME                              PID PROCESS         USER             CONNECTION    UNIT                                                                          SESSION DESCRIPTION
:1.0                              668 systemd-resolve systemd-resolve  :1.0          systemd-resolved.service                                                      -       -          
:1.1                              669 systemd-timesyn systemd-timesync :1.1          systemd-timesyncd.service                                                     -       -          
:1.10                             718 unattended-upgr root             :1.10         unattended-upgrades.service                                                   -       -          
:1.10053                      3646231 cupsd           root             :1.10053      docker-3e7ac7b8925b2feac4d1f4438e5706fbeea0170d314b11803d0731a0e5b90d8b.scope -       -          
:1.10055                      3647256 tracker-miner-f root             :1.10055      docker-3e7ac7b8925b2feac4d1f4438e5706fbeea0170d314b11803d0731a0e5b90d8b.scope -       -          
:1.10056                      3647226 netatalk        root             :1.10056      docker-3e7ac7b8925b2feac4d1f4438e5706fbeea0170d314b11803d0731a0e5b90d8b.scope -       -          
:1.10062                      3964701 systemd         marcosvr         :1.10062      [email protected]                                                             -       -          
:1.10069                      3982077 busctl          root             :1.10069      session-7.scope                                                               7       -          
:1.13                             818 polkitd         polkitd          :1.13         polkit.service                                                                -       -          
:1.2                              419 systemd-network systemd-network  :1.2          systemd-networkd.service                                                      -       -          
:1.3                                1 systemd         root             :1.3          init.scope                                                                    -       -          
:1.4                              679 dbus-broker-lau root             :1.4          dbus-broker.service                                                           -       -          
:1.5                              690 wpa_supplicant  root             :1.5          wpa_supplicant.service                                                        -       -          
:1.6                              681 systemd-logind  root             :1.6          systemd-logind.service                                                        -       -          
:1.7                              682 bluetoothd      root             :1.7          bluetooth.service                                                             -       -          
:1.8                              689 thermald        root             :1.8          thermald.service                                                              -       -          
:1.9620                       3445520 upowerd         root             :1.9620       upower.service                                                                -       -          
:1.9954                       3507664 go.d.plugin     root             :1.9954       docker-d24f66d92c80ecbb5b7719126e4a80fb4f767c8c503667c54d2a7f5563ee1b6e.scope -       -          
:1.9955                       3507664 go.d.plugin     root             :1.9955       docker-d24f66d92c80ecbb5b7719126e4a80fb4f767c8c503667c54d2a7f5563ee1b6e.scope -       -          
:1.9956                       3507664 go.d.plugin     root             :1.9956       docker-d24f66d92c80ecbb5b7719126e4a80fb4f767c8c503667c54d2a7f5563ee1b6e.scope -       -          
:1.9957                       3506432 python3         root             :1.9957       docker-04ec95fa2210aa6e98b51644fb61d369163c2a30d9a2420583760d23a28c0042.scope -       -          
com.ubuntu.SoftwareProperties       - -               -                (activatable) -                                                                             -       -          
fi.w1.wpa_supplicant1             690 wpa_supplicant  root             :1.5          wpa_supplicant.service                                                        -       -          
io.netplan.Netplan                  - -               -                (activatable) -                                                                             -       -          
org.bluez                         682 bluetoothd      root             :1.7          bluetooth.service                                                             -       -          
org.freedesktop.DBus                1 systemd         root             -             init.scope                                                                    -       -          
org.freedesktop.PackageKit          - -               -                (activatable) -                                                                             -       -          
org.freedesktop.PolicyKit1        818 polkitd         polkitd          :1.13         polkit.service                                                                -       -          
org.freedesktop.UPower        3445520 upowerd         root             :1.9620       upower.service                                                                -       -          
org.freedesktop.hostname1           - -               -                (activatable) -                                                                             -       -          
org.freedesktop.locale1             - -               -                (activatable) -                                                                             -       -          
org.freedesktop.login1            681 systemd-logind  root             :1.6          systemd-logind.service                                                        -       -          
org.freedesktop.network1          419 systemd-network systemd-network  :1.2          systemd-networkd.service                                                      -       -          
org.freedesktop.resolve1          668 systemd-resolve systemd-resolve  :1.0          systemd-resolved.service                                                      -       -          
org.freedesktop.systemd1            1 systemd         root             :1.3          init.scope                                                                    -       -          
org.freedesktop.thermald          689 thermald        root             :1.8          thermald.service                                                              -       -          
org.freedesktop.timedate1           - -               -                (activatable) -                                                                             -       -          
org.freedesktop.timesync1         669 systemd-timesyn systemd-timesync :1.1          systemd-timesyncd.service                                                     -       -          

[rdmark]

Everything looks fine at a glance. I wonder if Zeroconf doesn't like the .local suffix to the SERVER_NAME... Maybe you can try a string with only alphanumerical chars as a test?

And if everything else fails, please try rebooting the macOS client system. I've observed that the Zeroconf service discovery in macOS tends to get... "stuck". A reboot can remedy such a state.

[marcosvrs]

SERVER_NAME doesn't seem to change anything. Doesn't matter what I add there, it doesn't change the name.

Regarding the client, tried rebooting, tried another MacBook, unfortunately nothing works without manually adding the IP/hostname :(

[rdmark]

I wonder if it has to do with the Ubuntu host's firewall settings... Have you attempted to run Avahi applications directly on the host OS?