permission of the data directory

[holgerkoch]

Hello,

i followed your guide and it works really good. There was only one problem. Our openshift is on AWS. So we can only use EFS storage for readwritemany access. But it seems to work.

Unfortunately after the complete installation i got a error message, that my data directory is readable for the world and i should set it to 0770.

"Ihr Datenverzeichnis kann von anderen Benutzern gelesen werden
Bitte ändern Sie die Berechtigungen auf 0770, so dass das Verzeichnis nicht von anderen Benutzern angezeigt werden kann."

But this is not so easy, because it es a mount of the persistant storage.

I have no name!@nextcloud-2-s74ff:/var/www/html$ ls -la /var/www/html/data
total 84
drwxrws--x. 4 root 40000 6144 Oct 26 09:26 .
drwxrwsrwx. 15 root 1000810000 4096 Oct 26 09:10 ..
-rw-r--r--. 1 1000810000 40000 324 Oct 26 09:16 .htaccess
-rw-r--r--. 1 1000810000 40000 0 Oct 26 09:16 .ocdata

Can you tell me, how did you solve this problem?

best regards

Holger

[tobru]

Yeah, I also faced this issue and did not yet find a solution... I guess this is something which needs to be changed in Nextcloud, but I'm unsure id this is feasible.

[holgerkoch]

Maybe this is what we need: nextcloud/server#3245

Best regards

Holger

[tobru]

That's exactly the issue I was looking for, thanks for pointing out. In the meantime I'm thinking about adding some patching mechanism to the DeploymentConfiguration by using an init container so that we have a temporary workaround. As I'm now on vacation, it will take some time. If you have time to work on it, I'm happy to accept PRs =)

[MorrisJobke]

nextcloud/server#3245 is fixed in 13 and will also get a backport to 12.0.5

[patlachance]

@holgerkoch we're running OpenShift on AWS as well and use GlusterFS for ReadWriteMany volumes and it works as expected. It can be deployed on your OpenShift cluster as a Cloud-Native Storage service or you can connect to an external GlusterFS cluster.