Project

General

Profile

Actions
Copy link

Bug #19697

open

Development arvbox Docker image builds with bad permissions if run with umask 077

Added by Brett Smith over 1 year ago. Updated 2 months ago.

Status:
New
Priority:
Low
Assigned To:
-
Category:
-
Target version:
Future
Story points:
-
Release:
Postponed
Release relationship:
Auto

Description

Steps to reproduce:

umask 077
git clone https://git.arvados.org/arvados.git
arvados/tools/arvbox/bin/arvbox rebuild dev
arvados/tools/arvbox/bin/arvbox start dev

The Dockerfile will copy a bunch of files from tools/arvbox/lib/arvbox/docker into the image, and will build fine. However, when you actually start the container, runit is expecting some of those scripts to have world-execute permission, and will fail when they don't:

Arvados-in-a-box starting

chpst: fatal: unable to run: ./run-service: access denied

You'll get spammed with a bunch of those access denied errors in a tight loop.

Actions
Copy link

Also available in: Atom PDF