EST. 2026 — Notes from real server work SYSADMIN · SECURITY · AI · DIRECTADMIN Issue 01
THE SYSADMIN ALMANAC
Home / Tags / POSIX ACL
POSIX ACL

#POSIX ACL

3 articles
Backup / DR
Web vs. Worker — mkdir 0700 Disables Inherited ACL Permissions
Linux

Web vs. Worker — mkdir 0700 Disables Inherited ACL Permissions

One app runs as two users, with php-fpm handling web requests and a separate account running the queue. Even with default ACLs fully configured, they still cannot write to each other's directories. The cause is mkdir with mode 0700, which sets a mask that wipes out the effective ACL permissions, plus a deletion trap that requires permissions on the directory, not the file.

#linux#permissions#posix-acl#php-fpm
9 min read·9 Oct
Rebuilding DirectAdmin Backups with NFS and POSIX ACL in Production
Backup

Rebuilding DirectAdmin Backups with NFS and POSIX ACL in Production

A record of rebuilding backups on a DirectAdmin server after migrating to a new machine — from FTP push that broke at three layers to an NFSv4 hard mount + POSIX ACL, with kernel-level lessons learned along the way.

#backup#nfs#posix-acl#directadmin
13 min read·28 May
Moving DA to Debian 12, Part 2 — Switching Storage to a ZFS Mirror
Linux

Moving DA to Debian 12, Part 2 — Switching Storage to a ZFS Mirror

Replace the three storage layers of mdadm RAID1 + ext4 + qcow2 with a single layer of ZFS mirror + raw zvol while the old VM stays online, by degrading RAID to a single disk.

#zfs#raid#storage#snapshot
11 min read·20 May