Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

FIx permissions /var/lib/awx/projects when projects_persistence is true. #1654

Open
wants to merge 2 commits into
base: devel
Choose a base branch
from
Open

FIx permissions /var/lib/awx/projects when projects_persistence is true. #1654

wants to merge 2 commits into from

Conversation

paytroff
Copy link

@paytroff paytroff commented Dec 1, 2023 •
edited
Loading

SUMMARY

When 'projects_persistence' is false, permissions /var/lib/awx/projects are 777 with root:root.
When 'projects_persistence' is true, permissions /var/lib/awx/projects are 775 with root:1000.
But the problem is : group id 1000 does not exist in ansible/awx container, so user 'awx' cannot write into /var/lib/awx/projects directory when you sync project in AWX UI.

ISSUE TYPE
  • Bug, Docs Fix or other nominal change
ADDITIONAL INFORMATION
Before:
chgrp 1000 /var/lib/awx/projects
After:
chgrp 0 /var/lib/awx/projects

@TheRealHaoLiu
Copy link
Member

can you provide more detail on how you tested your PR

@paytroff
Copy link
Author

paytroff commented Dec 6, 2023 •
edited
Loading

I have rebuilt docker image awx-operator, create an awx instance (with new image operator) with projects_persistence = true, then see which permisions on folder /var/lib/awx/projects were set in awx-task and awx-web pod.
Then in AWX UI, launch a project synchronisation, result was ok.

Do you need more details ?

@dbrennand
Copy link

dbrennand commented Jul 5, 2024 •
edited
Loading

Hi @TheRealHaoLiu @paytroff

I've been experiencing issues related to permissions on /var/lib/awx/projects.

This is on a fresh deployment of AWX. However, in my testing, only the awx-web pod is affected.

For awx-task, the AWX user in the container has group 1000 assigned so it can write at the directory just fine whereas, in the awx-web pod the user doesn't have group 1000, and AWX is crashing as a result.

I'm on mobile at the moment and can post further details later today, but I think the issue is potentially with the upstream AWX image rather than the operator deployment.

@dbrennand
Copy link

https://forum.ansible.com/t/awx-web-permissionerror-errno-13-permission-denied-var-lib-awx-projects/7074

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
community
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@paytroff @TheRealHaoLiu @dbrennand