CSV upload fails in Phonebook Sources when `uploads/` directory is owned by `root` inside FreePBX container

[Stell0]

Description

On some NethVoice installations, uploading a CSV from Applications → Phonebook Sources fails because the directory /var/lib/nethvoice/phonebook/uploads inside the freepbx container ends up owned by root:root instead of asterisk:asterisk. Restarting the FreePBX container fixes the issue (permissions get realigned).

Steps to reproduce

1. Install a new NethVoice instance (NS8 module).

2. Open Applications → Phonebook Sources and try to upload a CSV as a source.

3. Upload fails with an error (CSV cannot be loaded).

4. Enter the FreePBX container and check ownership:

   ls -la /var/lib/nethvoice/phonebook/

5. Observe that uploads/ is owned by root:root (instead of asterisk:asterisk).

6. Restart the FreePBX container (or chown -R asterisk:asterisk /var/lib/nethvoice/phonebook/uploads) and retry the upload: it succeeds.

Expected behavior

/var/lib/nethvoice/phonebook/uploads is owned by asterisk:asterisk after installation, and CSV upload from Phonebook Sources works without requiring a container restart.

Actual behavior

/var/lib/nethvoice/phonebook/uploads is sometimes owned by root:root after installation; CSV upload fails until the FreePBX container is restarted (or permissions are manually fixed).

• See also

  • https://helpdesk.nethesis.it/a/tickets/197756
  • https://helpdesk.nethesis.it/a/tickets/192749
  • https://helpdesk.nethesis.it/a/tickets/192795
  • https://mattermost.nethesis.it/nethesis/pl/q4btq36pr7y88jh3m96yz37mqh
  • https://mattermost.nethesis.it/nethesis/pl/pmwxza9egigbmrxyfrxp6gcsfa

[Stell0]

backup breaks it

$ podman exec freepbx ls -ld /var/lib/nethvoice/phonebook/uploads
drwxr-xr-x. 2 asterisk asterisk 6 Mar  5 09:43 /var/lib/nethvoice/phonebook/uploads
$ systemctl --user start backup1
$ podman exec freepbx ls -ld /var/lib/nethvoice/phonebook/uploads
drwxr-xr-x. 2 root root 6 Mar  5 09:43 /var/lib/nethvoice/phonebook/uploads

[Stell0]

Explanation:
NS8 backup mounts module volumes in a helper container. When the phonebookcsv volume is empty, Podman can reinitialize it from a root-owned mountpoint and uploads/ becomes root:root.

This breaks CSV imports from Phonebook Sources until the FreePBX container is restarted and permissions are fixed again.

Seed the upload directory with a hidden guard file in the image and recreate it at startup before running the existing ownership fixup. This keeps the volume non-empty and prevents ownership drift after backup.