Last modified: 2012-05-23 12:59:37 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T39007, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 37007 - verify /mnt/upload6 user rights
verify /mnt/upload6 user rights
Status: RESOLVED FIXED
Product: Wikimedia Labs
Classification: Unclassified
deployment-prep (beta) (Other open bugs)
unspecified
All All
: Normal minor
: ---
Assigned To: Antoine "hashar" Musso (WMF)
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2012-05-21 20:35 UTC by Antoine "hashar" Musso (WMF)
Modified: 2012-05-23 12:59 UTC (History)
5 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Antoine "hashar" Musso (WMF) 2012-05-21 20:35:55 UTC
Last week I noticed in the errors log a lot of issues when attempting to creates files under the /mnt/upload6 hierarchy.  I might have fixed it Sunday by running:

02:02 hashar: on -nfs-memc, running 'chown -R 48 /mnt/export/upload6' so file get owned by user apache on apaches and job runner boxes

It was previously using www-data as user, 48 is the uid of 'apache' on ubuntu.


So this is merely a bug about verifying the fix actually worked.
Comment 1 Platonides 2012-05-21 20:38:56 UTC
That will break the apache users for which we changed its uid to 33
Comment 2 Antoine "hashar" Musso (WMF) 2012-05-21 21:06:06 UTC
The deployment-web* instances are going to be deleted: bug 36870
Comment 3 Peter Bena 2012-05-23 11:14:46 UTC
We definitely need to make this accessible to users which apache run on (default www-data or apache) and mwdeploy, but there is no simple way to do this on unix. Especially because we use ldap, but we can't manage it (having all 3 users in same default group would solve the issue).
Comment 4 Peter Bena 2012-05-23 11:15:37 UTC
Inserted Ryan because he can update ldap if needed
Comment 5 Antoine "hashar" Musso (WMF) 2012-05-23 12:59:37 UTC
Here is the current situation:

/mnt/upload6 
 Access: (0775/drwxrwxr-x)  Uid: (   48/  apache)   Gid: ( 1075/ UNKNOWN)

Files below are usually 0777 and sometime 0775. The later should probably be preferred.


Anyway, regardless of the situation, as long as the file is owned by user apache id 48, we are fine. mwdeploy does not need access.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links