Skip to content

GitLab

  • Menu
Projects Groups Snippets
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • TPA team TPA team
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Issues 174
    • Issues 174
    • List
    • Boards
    • Service Desk
    • Milestones
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
  • Wiki
    • Wiki
  • Activity
  • Create a new issue
  • Issue Boards
Collapse sidebar
  • The Tor Project
  • TPA
  • TPA teamTPA team
  • Issues
  • #40572
Closed
Open
Created Jan 08, 2022 by Jim Newsome@jnewsome

acl for /srv/shadow on additional runners

I don't seem to have access to /srv/shadow on ci-runner-x86-05. I'm guessing this may also be an issue for other new shadow/shadow-small runners.

On -03 it was configured via setfacl: #40476 (comment 2759730)

On 05 there doesn't appear to be any acl set:

jnewsome@ci-runner-x86-05:~$ getfacl /srv/shadow
getfacl: Removing leading '/' from absolute path names
# file: srv/shadow
# owner: root
# group: root
user::rwx
group::r-x
other::r-x

In contrast here's the same command on -03:

jnewsome@chi-node-14:~$ getfacl /srv/shadow
getfacl: Removing leading '/' from absolute path names
# file: srv/shadow
# owner: root
# group: root
user::rwx
group::r-x
group:shadower:rwx
mask::rwx
other::r-x
default:user::rwx
default:group::r-x
default:group:shadower:rwx
default:mask::rwx
default:other::r-x
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking