[Discuss] Trying to puzzle out some access permissions

[Rich Pieri]

I'm setting up a Nextcloud instance on my home server:

* KVM host is Debian
* KVM guest is Ubuntu
* Nextcloud installed via snapd.
* Data volume is a ZFS dataset on Debian, with POSIX ACLs enabled,
  passed through to the Ubuntu guest via 9p. This is for performance
  (no disk images, no NFS).

Everything up to this point is working properly.

What I want to do is access the files on the data volume (read only is
fine) from the Debian host as my regular login.

The directory on the host needs to be owner libvirt-qemu because this
is the process running the KVM threads. Files and directories synced to
the data volume are owner libvirt-qemu mode 600/700. I've tried setting
owner ACLs (modify and default) so that my account on the host can read
files but synced files all end up permission denied.

I'm missing something subtle (I think) about POSIX ACLs but my Duck
Duck Fu isn't getting me a working solution. Any clues?

-- 
\m/ (--) \m/