search

agdsn / hades

AG DSN Authentication and Authorization Infrastructure
MIT License
8 stars 3 forks source link

ExecReload in unauth-http needs to be run as root #120

Open lukasjuhrich opened 1 year ago

lukasjuhrich commented 1 year ago

Symptoms

<netns:root> 19:42:57 root@hades-frink /etc/hades (git)-[next] # sc reload --no-block hades-unauth-http && journalctl --since=now -u hades-unauth-http -f
-- Journal begins at Fri 2018-08-03 18:54:48 CEST. --
Oct 17 19:43:01 hades-frink hades-unauth-http[66207]: kill: (64722): Operation not permitted
Oct 17 19:43:01 hades-frink systemd[1]: hades-unauth-http.service: Control process exited, code=exited, status=1/FAILURE
Oct 17 19:43:01 hades-frink systemd[1]: Reload failed for Hades http server (nginx).

Fix

https://github.com/agdsn/hades/blob/e5d9c9a63258957c8b4ad813f5f4ed6627729a4a/conf/hades-unauth-http.service.in#L22

ExecStart= needs to be ExecStart=+