search

owncloud / ocis

:atom_symbol: ownCloud Infinite Scale Stack
https://doc.owncloud.com/ocis/next/
Apache License 2.0
1.37k stars 181 forks source link

Don't store config files or resources in the home directory #2485

Closed C0rby closed 3 months ago

C0rby commented 3 years ago

Describe the bug

The default location for PROXY_TRANSPORT_TLS_CERT, PROXY_TRANSPORT_TLS_KEY, GLAUTH_LDAPS_CERT and GLAUTH_LDAPS_KEY is in the home directory of the user running ocis.

Usually services are run by a service user without a home directory. If that is the case then the default locations won't work and startup fails.

Steps to reproduce

Steps to reproduce the behavior:

  1. Create a system user useradd -r ocis
  2. Run oCIS with that user sudo -u ocis bin/ocis
  3. See that oCIS fails to start

Expected behavior

A sensible location should be used. Preferably all configuration files and resources should be stored in the same location.

pascalwengerter commented 3 years ago

Starting oCIS via docker or systemd makes it a hard requirement to set either STORAGE_LDAP_CACERT or STORAGE_LDAP_INSECURE env variable for users without home directory. We should prioritize fixing this issue since it causes problems, e.g. in the web CI and all the deployment examples

wkloucek commented 2 years ago

Usually services are run by a service user without a home directory. If that is the case then the default locations won't work and startup fails.

Steps to reproduce

Steps to reproduce the behavior:

  1. Create a system user useradd -r ocis
  2. Run oCIS with that user sudo -u ocis bin/ocis
  3. See that oCIS fails to start #

This is still an issue for our binary releases. Right now we document in the systemd documentation how to change the storage and configuration paths -> https://owncloud.dev/ocis/deployment/systemd/

Expected behavior

A sensible location should be used. Preferably all configuration files and resources should be stored in the same location.

This is the case now. Everything will be stored to the same directory.

Starting oCIS via docker or systemd makes it a hard requirement to set either STORAGE_LDAP_CACERT or STORAGE_LDAP_INSECURE env variable for users without home directory. We should prioritize fixing this issue since it causes problems, e.g. in the web CI and all the deployment examples

Is resolved

kobergj commented 3 months ago

Supposedly fixed.