artefactual-labs / ansible-archivematica-src

An ansible role for deploying Archivematica from from its source code repositories
GNU Affero General Public License v3.0
5 stars 21 forks source link

Problem: Permissions on archivematica_src_dir folder #405

Open rayzilt opened 1 month ago

rayzilt commented 1 month ago

On systems where umask is set not default due to stricting, task 'Synchronize requirements' fails with permission denied. This happens on a system where umask is set '0027', default umask is '0022' as root.

The user 'archiveamtica' is not allowed to change directory into archivematica_src_dir due to in this situation the folder has 0750 permissions. Owner and Group are both root.

I've created a PR which set the mode 0755 on directory creating.

rayzilt commented 1 month ago

When deployment is finnished, services do not start due to access denied at serveral places. I'll make a new comment with more information later and will update the PR

rayzilt commented 1 week ago

Updated all tasks with correct 'mode' property. Playbook runs fine and services start up correctly on a system with umask set to '0027'.

rayzilt commented 1 week ago

PR: https://github.com/artefactual-labs/ansible-archivematica-src/pull/406