Maintenance Commands

vorsicht

Some maintenance commands can delete or modify data. Create a backup before running cleanup or purge commands. Use dry-run options where available and check the output before running destructive commands.

Run commands in Docker Compose

If OpenCloud runs with Docker Compose, run maintenance commands inside the OpenCloud container:

docker compose exec opencloud opencloud <command>

For one-off commands, you can also use:

docker compose run --rm opencloud opencloud <command>

Storage path

The --basePath (-p) option is required by storage, revision, and trash commands. It must point to the storage provider path as seen from inside the OpenCloud container.

For Docker Compose deployments, the default path is usually:

/var/lib/opencloud/storage/users

Example:

docker compose exec opencloud opencloud backup consistency -p /var/lib/opencloud/storage/users

If your deployment uses a custom storage path, replace /var/lib/opencloud/storage/users with the path configured for your storage backend.

General

Check the OpenCloud version

opencloud version

Storage

Check storage consistency

Checks the storage for inconsistencies such as orphaned blobs, missing blobs, missing nodes, missing links, missing files, missing or malformed metadata, and invalid parent-child relationships.

opencloud backup consistency -p /var/lib/opencloud/storage/users

To return a non-zero exit code when inconsistencies are found:

opencloud backup consistency -p /var/lib/opencloud/storage/users --fail

Run this command after storage-related incidents, manual file-system changes, migrations, restores, or when users report missing or misplaced files.

Purge expired trash-bin items

opencloud storage-users trash-bin purge-expired

The purge behavior can be configured with these environment variables:

STORAGE_USERS_PURGE_TRASH_BIN_USER_ID
STORAGE_USERS_PURGE_TRASH_BIN_PERSONAL_DELETE_BEFORE
STORAGE_USERS_PURGE_TRASH_BIN_PROJECT_DELETE_BEFORE

By default, the delete-before values are 720h, which equals 30 days.

List trash-bin items of a space

opencloud storage-users trash-bin list <space-id>

Restore trash-bin items

Restore all trash-bin items for a space:

opencloud storage-users trash-bin restore-all <space-id>

Restoring is only possible to the original location. The behavior when the target name already exists can be configured with the available restore options: skipping, replacing, or keeping both items.

Uploads

The opencloud storage-users uploads sessions command lists and manages upload sessions. Flags can be combined to filter sessions by state.

List upload sessions

List all sessions:

opencloud storage-users uploads sessions

List sessions that are not expired and not currently processing:

opencloud storage-users uploads sessions --expired=false --processing=false

To print output as JSON:

opencloud storage-users uploads sessions --expired=false --processing=false --json

Clean expired uploads

Expired uploads are not removed automatically and accumulate storage over time.

First, review which sessions would be removed:

opencloud storage-users uploads sessions --expired=true

Then remove them:

opencloud storage-users uploads sessions --expired=true --clean

Resume failed upload processing

Resume uploads that are not currently processing and are not marked as virus infected:

opencloud storage-users uploads sessions --processing=false --has-virus=false --resume

Use --restart instead of --resume if processing should restart from the beginning rather than continue from the last completed step:

opencloud storage-users uploads sessions --processing=false --has-virus=false --restart

Roles

List unified roles

Lists unified roles and their IDs. Useful when a configuration or documentation step requires a role ID.

opencloud graph list-unified-roles

Search

Rebuild the search index

Re-index a specific space:

opencloud search index --space <space-id>

Re-index all spaces:

opencloud search index --all-spaces

A reindex only picks up new or changed files; content that has already been indexed is not scanned again, even if the configuration or extractor changed. To force a full rescan, add --force-rescan:

opencloud search index --all-spaces --force-rescan

Run this after an upgrade, a restore, or when search results are missing or outdated.

Authentication

Reset the admin password

Resetting the password requires stopping the OpenCloud container first, since idm resetpassword needs exclusive access to the user store. Run it in a temporary container instead of docker compose exec:

docker compose stop opencloud

sudo docker run -it --rm -v <opencloud-data-path>:/var/lib/opencloud -v <opencloud-config-path>:/etc/opencloud opencloudeu/opencloud:<opencloud-version> idm resetpassword

See Common Issues for the full walkthrough, including how to find the volume names.

Create an app token

Creates an app-specific authentication token for a user, for example for clients that do not support the primary login method.

opencloud auth-app create --user-name=<user-name> --expiration=<token-expiration>