Camera.snapshot: struggling to save

[Nick4 (Nick)]

I’m fighting this for multiple days
The goal: take a snapshot from a camera and display on mobile with a popup.

If I store a picture in www, I can view it in my browser with ha-ip:8123/local/pic.jpg

/local == /config/www

Taking a snapshot is another thing…
I tried with:

data:
  filename: /config/www/cam.jpg

and get:

Cannot write /config/www/cam.jpg, no access to path; allowlist_external_dirs may need to be adjusted in configuration.yaml

Tried with al kind of different ways in config

  allowlist_external_dirs:
    - '/config/www'
    - '/media'

returns

I also tried with subfolders in www: nada
Saving in media seems to work but the file doesn’t show up.

What am I missing?!?

[Ildar_Gabdullin]

Check here
Try adding permissions for the folder with “chmod”.

[Nick4 (Nick)]

Hi Ildar (is that your first name?) thanks for jumping in!

Could it be because I’m running HA Core…

I was thinking about dir permissions but also whether my config and use of this was correct.
So far, I did’t want to mess with the default dir structure and their permissions yet and don’t get the logic yet.
I have read quite some topics & docs but cannot get it right.

• now /local = /config/www but I cannot open the same test file with ha-ip:8123/config/www/pic.jpg
• I’m already using the /media dir for TTS and referencing those does work
• if I take a snapshot with the /media path, the action is executed but no file to be found + I cannot open the existing ones (cannot figure out how to address those)
• if I create a dir at the same level as www (so similar situation as the media dir) how would I use that
  → does this mean that, without jumping through hoops, I can only use www - with the correct config?

You don’t have to explain/answer everything, I’m just sharing my findings and hope to get it working and understand the process on the way.

[Ildar_Gabdullin]

@Nick4

Hi Ildar (is that your first name?)

It is “ILDAR”, not “LIDAR” (as some people here keep calling me here) which is a part of a vacuum cleaner which I hope I am not.

@Nick4

now /local = /config/www but I cannot open the same test file with ha-ip:8123/config/www/pic.jpg

Try “ha-ip:8123/local/pic.jpg” (works on my site).

@Nick4

Could it be because I’m running HA Core…

No idea, using HA Docker ))).

@Nick4

the action is executed but no file to be found

“Executed” = means “button in Services became green & no messages in Log”, right? )))
If yes - here is an issue

@Nick4

I cannot open the existing ones (cannot figure out how to address those)

Have you tried searching created files in a directory tree?

[Mikefila]

@Nick4

Tried with al kind of different ways in config

  allowlist_external_dirs:
    - '/config/www'
    - '/media'

So if I understand you have nothing in the allow list? That entry needs to be under homeassistant:

homeassistant:
  media_dirs:
    local: '/media'
  allowlist_external_dirs:
    - '/config/file_sensors'
    - '/config/www/community'
    - '/config'
    - '/media'

[mcarty (Arturo)]

Check if the file exists inside the docker container.

docker exec -it homeassistant /bin/bash

In /tmp or not sure where, try to find the file there.

[Ildar_Gabdullin]

@Mikefila

  media_dirs:
    local: '/media'

It is needed only if you wish to see a content in a Media Browser.

@Mikefila

    - '/config/www/community'
    - '/config'

One “/config” is enough.

@mcarty

exists inside the docker container.

OP uses core.

[mcarty (Arturo)]

Did you put the code inside homeassistant? Like:

homeassistant:
  name: xyz
  .
  whatever:
  .
  allowlist_external_dirs:
    - /config/www

Edit: Sorry, i didnt read one of the answers

And btw is not a good idea to include the whole config folder.

[aceindy]

Note that write and read do not take place at the same folder:
write: filename: **/config/www/tmp/**snapshot_doorcam.jpg
read:url: **/local/tmp/**snapshot_doorcam.jpg

For example, take snapshot and send to iphone:
Write action:

  - entity_id: camera.doorcam
    data:
      filename: /config/www/tmp/snapshot_doorcam.jpg
    action: camera.snapshot

Attach to notification:

  - device_id: 12345abcdef670ff959107c4b1acff6f
    domain: mobile_app
    type: notify
    title: Motion detected!
    message: Frontdoor camera detected motion
    data:
      attachment:
        content-type: jpeg
        url: /local/tmp/snapshot_doorcam.jpg

[Nick4 (Nick)]

@Ildar_Gabdullin

It is “ILDAR”, not “LIDAR”

that’s what I wrote/assumed but since I have never came across that name - just here, yours - I wasn’t sure if it would be a real name or some action hero character of which I know nothing.

@Ildar_Gabdullin

Try “ha-ip:8123/local/pic.jpg” (works on my site).

From my FIPO (so that does work fine)

@Nick4

If I store a picture in www, I can view it in my browser with ha-ip:8123/local/pic.jpg

@Ildar_Gabdullin

“Executed” = means “button in Services became green & no messages in Log”, right? )))

Uhm, now I’m looking like those cows who saw the first train pass by.
?in services?
There is nothing in the log
What I meant was that I don’t get an error message but have no clue what/if something is really happening. I just can’t find any image file.

@Ildar_Gabdullin

Have you tried searching created files in a directory tree?

Yes, I have Samba configured but also through SSH checked the contents.

@Mikefila

if I understand you have nothing in the allow list?

Yes I do. Should have posted the whole section, sorry.
I commented those entries that don’t pass the YAML check.

homeassistant:
  auth_mfa_modules:
    - type: totp

  allowlist_external_dirs:
#    - /config/www/images
#    - /local
    - '/media'

I also did a test with HAOS, with the same settings and there the file is created but displaying it returns an empty popup.

[Nick4 (Nick)]

Welcome to the party!

@aceindy

Note that write and read do not take place at the same folder:

I’m aware of that odd behavior, that’s why I wrote

@Nick4

/local == /config/www

Let’s assume I use the /tmp dir (so we all are on the same page).
Does it have to be inside /www or can I create it at the same level?
→ if at the same level: what would be the path to write into it and read from it?
→ what do I put in my allowlist_external_dirs?

[Ildar_Gabdullin]

@Nick4

some action hero character of which I know nothing.

Erm, it is me in a real life, now you know it), Actually, a typical russian name - look, tons of ildars walking on Red Square with bears & playing balalaikas.

@Nick4

  allowlist_external_dirs:
#    - /config/www/images

Add “/config/www/images” then.

[Nick4 (Nick)]

with /config/www/images

/images has FULL access to EVERYONE…

[Ildar_Gabdullin]

one more probably silly idea - add just “/config”

[aceindy]

@Nick4

Does it have to be inside /www or can I create it at the same level?

As far as I know it must be /config/www (==local); this folder is is publicly available by default (but a precise file-/folder-name must be used; if not you will get 403:forbidden / ERR_INVALID_RESPONSE).

But you are free to use any other foldername within www (this www folder is also used for lovelace to store its java scripts and/or theme data and that is why it must be generally available)

I write to
/config/www/tmp/snapshot_doorcam.jpg
and read from
/local/tmp/snapshot_doorcam.jpg

@Nick4

→ what do I put in my allowlist_external_dirs?

Nothing…at least, I didn’t set any ( i don’t even have it in my config)

[Nick4 (Nick)]

Back at it!
Of course I want this to work but I’m so curious to why it doesn’t work.

@Ildar_Gabdullin

add just “/config”

This passes the YAML check

@aceindy

I write to
/config/www/tmp/snapshot_doorcam.jpg
and read from
/local/tmp/snapshot_doorcam.jpg

That’s clear,
This works on HAOS (test setup) but not on Core (main system).

I have been holding off to switch to OS and if possible to get the things done that I want, it will stay that way.
(It must have something to do with permissions - I think…) strike that, on second thought but for the sake of the test I set full permissions to /tmp (which sits in /www)

Writing: (doesn’t seem to work)

data:
  filename: /config/www/tmp/cam.jpg

Reading: (works as expected)

  content:
    type: picture
    image: /local/tmp/pic3.jpg # a file that I copied in there manually

Could this be due to using Core (venv) and how this ‘interacts’ with the system?

[Ildar_Gabdullin]

How do you set permissions?

[Nick4 (Nick)]

chmod 777 tmp

[Mikefila]

Try the full address

http://ha-ip:8123/local/pic.jpg

Should have checked for the file first. It executes with a check mark from devtools but no image is created.

[Nick4 (Nick)]

Works for reading/displaying, not for writing/snapshot action…