Andrei Sekretenko created MESOS-10167:
-----------------------------------------
Summary: Mesos-websitebot fails due to wrong permissions of
voulmes mounted into Docker container
Key: MESOS-10167
URL: https://issues.apache.org/jira/browse/MESOS-10167
Project: Mesos
Issue Type: Bug
Components: project website
Reporter: Andrei Sekretenko
Last successful run was on Apr 7:
https://builds.apache.org/view/M-R/view/Mesos/job/Mesos-Websitebot/2464/
First failure:
https://builds.apache.org/view/M-R/view/Mesos/job/Mesos-Websitebot/2465/console
Build with added permissions dump
https://builds.apache.org/view/M-R/view/Mesos/job/Mesos-Websitebot/2525/console
shows that while the build scripts in the container are, as expected, running
under "tempuser" (with the same uid as the user outside container which pulls
the git repositories),
the directories with git repositories mounted into the container are owned by
root:
{noformat}
19:06:21 uid=910(tempuser) gid=1001(tempuser) groups=1001(tempuser)
19:06:21 total 836
19:06:21 drwxr-xr-x 12 root root 4096 Jul 3 17:02 .
19:06:21 drwxr-xr-x 1 root root 4096 Jul 3 17:04 ..
19:06:21 drwxr-xr-x 6 root root 4096 Jun 29 14:12 3rdparty
19:06:21 drwxr-xr-x 2 root root 4096 Apr 15 14:33 bin
19:06:21 -rwxr-xr-x 1 root root 1294 Jul 3 17:02 bootstrap
19:06:21 -rw-r--r-- 1 root root 536015 May 29 09:21 CHANGELOG
19:06:21 drwxr-xr-x 2 root root 4096 May 29 11:30 cmake
19:06:21 -rw-r--r-- 1 root root 3990 May 7 13:40 CMakeLists.txt
19:06:21 -rw-r--r-- 1 root root 105737 May 7 13:40 configure.ac
19:06:21 lrwxrwxrwx 1 root root 31 Apr 15 14:33 CONTRIBUTING.md ->
./docs/beginner-contribution.md
19:06:21 drwxr-xr-x 6 root root 4096 May 28 19:18 docs
19:06:21 -rw-r--r-- 1 root root 63778 Apr 15 14:33 Doxyfile
19:06:21 drwxr-xr-x 8 root root 4096 Jul 3 17:02 .git
19:06:21 -rw-r--r-- 1 root root 99 Apr 15 14:33 .gitattributes
19:06:21 drwxr-xr-x 3 root root 4096 Aug 27 2019 include
19:06:21 -rw-r--r-- 1 root root 66156 Apr 15 14:33 LICENSE
19:06:21 drwxr-xr-x 2 root root 4096 Apr 15 14:33 m4
19:06:21 -rw-r--r-- 1 root root 3842 Apr 15 14:33 Makefile.am
19:06:21 -rw-r--r-- 1 root root 426 Apr 15 14:33 mesos.pc.in
19:06:21 -rw-r--r-- 1 root root 162 Apr 15 14:33 NOTICE
19:06:21 -rw-r--r-- 1 root root 1103 Apr 15 14:33 README.md
19:06:21 drwxr-xr-x 5 root root 4096 Jul 3 17:04 site
19:06:21 drwxr-xr-x 48 root root 4096 Jun 30 19:30 src
19:06:21 drwxr-xr-x 9 root root 4096 Jul 3 17:02 support
19:06:21 autoreconf: Entering directory `.'
19:06:21 autoreconf: configure.ac: not using Gettext
19:06:22 autoreconf: running: aclocal --warnings=all -I m4
19:06:23 autom4te: cannot create autom4te.cache: No such file or directory
{noformat}
Note that the Dockerfile specifies "USER root"
https://github.com/apache/mesos/blob/master/support/mesos-website/Dockerfile
and the permissions are dropped to the "testuser" only inside the entrypoint.sh
script.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
