Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Wrong permission on git project files ? #164

Closed
hdep opened this issue Dec 13, 2018 · 2 comments
Closed

Wrong permission on git project files ? #164

hdep opened this issue Dec 13, 2018 · 2 comments

Comments

@hdep
Copy link
Contributor

hdep commented Dec 13, 2018

Describe the bug
When I deploy this module with r10k, puppet failed to execute code on agent :
Error: /File[/opt/puppetlabs/puppet/cache/locales]: Failed to generate additional resources using 'eval_generate': Error 500 on SERVER: Server Error: Permission denied - /etc/puppetlabs/code/environments/production/modules/os_hardening/metadata.json
Looking on the server permissions are too restrictive :

$ ll /etc/puppetlabs/code/environments/production/modules/os_hardening/metadata.json
-rw-r----- 1 root root 1705 déc.  13 09:16 /etc/puppetlabs/code/environments/production/modules/os_hardening/metadata.json

The puppetserver is running under user puppet.

I have this issue with module in version 2.1.3

Regards,

@mcgege
Copy link
Member

mcgege commented Dec 13, 2018

@hdep When I clone this repo here, group and other have read permissions on the files. As I understand this depends on your umask setting when you clone / work with the repo (I have 0022 set for my dev user).

The root user usually has a more restrictive umask setting - so either you could change this in the profile file or you set this explicitly in the r10k service somewhere ...

@hdep
Copy link
Contributor Author

hdep commented Dec 13, 2018

this is weird... indeed git clone is with proper permissions.
I don't know I get permission broken at this point umask is 022 on my system.

Anyway Thank you.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants