- Type: string

- Required: false

Skip requesting Microsoft Entra instance metadata

This should be set true only by applications authenticating in

disconnected clouds, or private clouds such as Azure Stack.

It determines whether rclone requests Microsoft Entra instance

metadata from`https://login.microsoft.com/` before

authenticating.

Setting this to true will skip this request, making you responsible

for ensuring the configured authority is valid and trustworthy.

Properties:

- Config: disable_instance_discovery

- Env Var: RCLONE_AZUREBLOB_DISABLE_INSTANCE_DISCOVERY

- Type: bool

- Default: false

Use a managed service identity to authenticate (only works in Azure).

- Type: bool

- Default: false

Use Azure CLI tool az for authentication

Set to use the[Azure CLI tool az](https://learn.microsoft.com/en-us/cli/azure/)

as the sole means of authentication.

Setting this can be useful if you wish to use the az CLI on a host with

a System Managed Identity that you do not want to use.

Don't set env_auth at the same time.

Properties:

- Config: use_az

- Env Var: RCLONE_AZUREBLOB_USE_AZ

- Type: bool

- Default: false

Endpoint for the service.

Options:

- "daysFromHidingToDeleting": After a file has been hidden for this many days it is deleted. 0 is off.

- "daysFromStartingToCancelingUnfinishedLargeFiles": Cancels any unfinished large file versions after this many days

- "daysFromUploadingToHiding": This many days after uploading a file is hidden

- Type: string

- Required: false

Use client credentials OAuth flow.

This will use the OAUTH2 client Credentials Flow as described in RFC 6749.

Properties:

- Config: client_credentials

- Env Var: RCLONE_BOX_CLIENT_CREDENTIALS

- Type: bool

- Default: false

Fill in for rclone to use a non root folder as its starting point.

[See commits](https://github.com/rclone/rclone/compare/v1.68.0...v1.69.0)

* New backends

*[ICloud Drive](/iclouddrive/) (lostb1t)

*[Cloudinary](/cloudinary/) (yuval-cloudinary)

* New S3 providers:

*[Outscale](/s3/#outscale) (Matthias Gatto)

*[Selectel](/s3/#selectel) (Nick Craig-Wood)

* Security fixes

* serve sftp: ResolveCVE-2024-45337 - Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass (dependabot)

* Rclone was**not** vulnerable to this.

* Seehttps://github.com/advisories/GHSA-v778-237x-gjrc

* build: Update golang.org/x/net to v0.33.0 to fixCVE-2024-45338 - Non-linear parsing of case-insensitive content (Nick Craig-Wood)

* Rclone was**not** vulnerable to this.

* Seehttps://github.com/advisories/GHSA-w32m-9786-jp63

* New Features

* accounting: Write the current bwlimit to the log on SIGUSR2 (Nick Craig-Wood)

* bisync: Change exit code from 2 to 7 for critically aborted run (albertony)

* build

* Update all dependencies (Nick Craig-Wood)

* Replace Windows-specific`NewLazyDLL` with`NewLazySystemDLL` (albertony)

* cmd: Change exit code from 1 to 2 for syntax and usage errors (albertony)

* docker serve: make sure all mount and VFS options are parsed (Nick Craig-Wood)

* doc fixes (albertony, Alexandre Hamez, Anthony Metzidis, buengese, Dan McArdle, David Seifert, Francesco Frassinelli, Michael R. Davis, Nick Craig-Wood, Pawel Palucha, Randy Bush, remygrandin, Sam Harrison, shenpengfeng, tgfisher, Thomas ten Cate, ToM, Tony Metzidis, vintagefuture, Yxxx)

* fs: Make`--links` flag global and add new`--local-links` and`--vfs-links` flags (Nick Craig-Wood)

* http servers: Disable automatic authentication skipping for unix sockets in http servers (Moises Lima)

* This was making it impossible to use unix sockets with an proxy

* This might now cause rclone to need authenticaton where it didn't before

* oauthutil: add support for OAuth client credential flow (Martin Hassack, Nick Craig-Wood)

* operations: make log messages consistent for mkdir/rmdir at INFO level (Nick Craig-Wood)

* rc: Add`relative` to[vfs/queue-set-expiry](/rc/#vfs-queue-set-expiry) (Nick Craig-Wood)

* serve dlna: Sort the directory entries by directories first then alphabetically by name (Nick Craig-Wood)

* serve nfs

* Introduce symlink support (Nick Craig-Wood)

* Implement`--nfs-cache-type` symlink (Nick Craig-Wood)

* size: Make output compatible with`-P` (Nick Craig-Wood)

* test makefiles: Add`--flat` flag for making directories with many entries (Nick Craig-Wood)

* Bug Fixes

* accounting

* Fix global error acounting (Benjamin Legrand)

* Fix debug printing when debug wasn't set (Nick Craig-Wood)

* Fix race stopping/starting the stats counter (Nick Craig-Wood)

* rc/job: Use mutex for adding listeners thread safety (hayden.pan)

* serve docker: Fix incorrect GID assignment (TAKEI Yuya)

* serve nfs: Fix missing inode numbers which was messing up`ls -laR` (Nick Craig-Wood)

* serve s3: Fix`Last-Modified` timestamp (Nick Craig-Wood)

* serve sftp: Fix loading of authorized keys file with comment on last line (albertony)

* Mount

* Introduce symlink support (Filipe Azevedo, Nick Craig-Wood)

* Better snap mount error message (divinity76)

* mount2: Fix missing`.` and`..` entries (Filipe Azevedo)

* VFS

* With`--vfs-used-is-size` value is calculated and then thrown away (Ilias Ozgur Can Leonard)

* Add symlink support to VFS (Filipe Azevedo, Nick Craig-Wood)

* This can be enabled with the specific`--vfs-links` flag or the global`--links` flag

* Fix open files disappearing from directory listings (Nick Craig-Wood)

* Add remote name to vfs cache log messages (Nick Craig-Wood)

* Cache

* Fix parent not getting pinned when remote is a file (nielash)

* Azure Blob

* Add`--azureblob-disable-instance-discovery` (Nick Craig-Wood)

* Add`--azureblob-use-az` to force the use of the Azure CLI for auth (Nick Craig-Wood)

* Quit multipart uploads if the context is cancelled (Nick Craig-Wood)

* Azurefiles

* Fix missing x-ms-file-request-intent header (Nick Craig-Wood)

* B2

* Add`daysFromStartingToCancelingUnfinishedLargeFiles` to`backend lifecycle` command (Louis Laureys)

* Box

* Fix server-side copying a file over existing dst (nielash)

* Fix panic when decoding corrupted PEM from JWT file (Nick Craig-Wood)

* Drive

* Add support for markdown format (Noam Ross)

* Implement`rclone backend rescue` to rescue orphaned files (Nick Craig-Wood)

* Dropbox

* Fix server side copying over existing object (Nick Craig-Wood)

* Fix return status when full to be fatal error (Nick Craig-Wood)

* FTP

* Implement`--ftp-no-check-upload` to allow upload to write only dirs (Nick Craig-Wood)

* Fix ls commands returning empty on "Microsoft FTP Service" servers (Francesco Frassinelli)

* Gofile

* Fix server side copying over existing object (Nick Craig-Wood)

* Google Cloud Storage

* Add access token auth with`--gcs-access-token` (Leandro Piccilli)

* Update docs on service account access tokens (Anthony Metzidis)

* Googlephotos

* Implement`--gphotos-proxy` to allow download of full resolution media (Nick Craig-Wood)

* Fix nil pointer crash on upload (Nick Craig-Wood)

* HTTP

* Fix incorrect URLs with initial slash (Oleg Kunitsyn)

* Onedrive

* Add support for OAuth client credential flow (Martin Hassack, Nick Craig-Wood)

* Fix time precision for OneDrive personal (Nick Craig-Wood)

* Fix server side copying over existing object (Nick Craig-Wood)

* Opendrive

* Add`rclone about` support to backend (quiescens)

* Oracle Object Storage

* Make specifying`compartmentid` optional (Manoj Ghosh)

* Quit multipart uploads if the context is cancelled (Nick Craig-Wood)

* Pikpak

* Add option to use original file links (wiserain)

* Protondrive

* Improve performance of Proton Drive backend (Lawrence Murray)

* Putio

* Fix server side copying over existing object (Nick Craig-Wood)

* S3

* Add initial`--s3-directory-bucket` to support AWS Directory Buckets (Nick Craig-Wood)

* Add Wasabi`eu-south-1` region (Diego Monti)

* Fix download of compressed files from Cloudflare R2 (Nick Craig-Wood)

* Rename glacier storage class to flexible retrieval (Henry Lee)

* Quit multipart uploads if the context is cancelled (Nick Craig-Wood)

* SFTP

* Allow inline ssh public certificate for sftp (Dimitar Ivanov)

* Fix nil check when using auth proxy (Nick Craig-Wood)

* Smb

* Add initial support for Kerberos authentication (more work needed). (Francesco Frassinelli)

* Fix panic if stat fails (Nick Craig-Wood)

* Sugarsync

* Fix server side copying over existing object (Nick Craig-Wood)

* WebDAV

* Nextcloud: implement backoff and retry for 423 LOCKED errors (Nick Craig-Wood)

* Make`--webdav-auth-redirect` to fix 401 unauthorized on redirect (Nick Craig-Wood)

* Yandex

* Fix server side copying over existing object (Nick Craig-Wood)

* Zoho

* Use download server to accelerate downloads (buengese)

* Switch to large file upload API for larger files, fix missing URL encoding of filenames for the upload API (buengese)

* Print clear error message when missing oauth scope (buengese)

* Try to handle rate limits a bit better (buengese)

* Add support for private spaces (buengese)

* Make upload cutoff configurable (buengese)

[See commits](https://github.com/rclone/rclone/compare/v1.68.1...v1.68.2)

* Pcloud

* Implement`SetModTime` (Georg Welzel)

* Implement`OpenWriterAt` feature to enable multipart uploads (Georg Welzel)

* Fix failing large file uploads (Georg Welzel)

* Pikpak

* Improve data consistency by ensuring async tasks complete (wiserain)

* Implement custom hash to replace wrong sha1 (wiserain)

Cloudinary API Secret

**NB** Input to this must be obscured - see[rclone obscure](/commands/rclone_obscure/).

Properties:

- Config: api_secret