Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Swarm Client Jar has incorrect owner/group #885

Open
bstopp opened this issue Aug 15, 2018 · 2 comments
Open

Swarm Client Jar has incorrect owner/group #885

bstopp opened this issue Aug 15, 2018 · 2 comments

Comments

@bstopp
Copy link

bstopp commented Aug 15, 2018

Affected Puppet, Ruby, OS and module versions/distributions

  • Puppet: 5.5.3
  • Ruby:
  • Distribution: CentOS 7
  • Module version: master branch

How to reproduce (e.g Puppet code you use)

  class { 'jenkins::slave':
    slave_name => $facts['networking.hostname'],
    install_java => false,
    version => '3.13',
    ui_user => 'user',
    ui_pass => 'password',
    masterurl => http://jenkins.mycompany.com/jenkins
  }

What are you seeing

The swarm-client-3.13.jar is owned by root with mode of 0640 (my system's umask is weird, regardless...).

What behaviour did you expect instead

The swarm client jar file should be owned by the slave_user specified in the resource definition. With this configuration the service cannot start because the file is not owned by the user who needs to execute it.

Output log

Any additional information you'd like to impart

@bstopp bstopp changed the title Warm Client Jar has incorrect owner/group Swarm Client Jar has incorrect owner/group Aug 15, 2018
@jhoblitt
Copy link
Member

I think its debatable if its a good idea for a jenkins agent to have permission to delete it's own jar files. This could also be resolved by setting the mode and/or the group on the jar.

@bstopp
Copy link
Author

bstopp commented Aug 15, 2018

It really isn't any different than the jenkins user's permissions on the master; and of all the files the swarm client is the only one on the agent that isn't owned by the jenkins-slave user.
🤷‍♂️

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants