Issue #6734 has been updated by Daniel Pittman.

The puppet master expects, if you are using the system-wide paths, to be 
invoked as root.  It will then internally drop privileges when it considers it 
appropriate.  If you intend to run the master in a totally unprivileged 
fashion, such as by way of Apache/Passenger, you need to pre-arrange ownership 
of things like these directories.

It isn't clear if this is caused by one of those circumstances being violated, 
or by our code trying to create directories without sufficient privileges.  
(...or, perhaps, that we are now failing to assert correct ownership of the 
statedir before we start.)
----------------------------------------
Bug #6734: root:root ownership on /var/lib/puppet breaks puppetmasterd
https://projects.puppetlabs.com/issues/6734

Author: Dominic Maraglia
Status: Unreviewed
Priority: Urgent
Assignee: Nigel Kersten
Category: 
Target version: 
Affected Puppet version: development
Keywords: 
Branch: 


This problem breaks hudson testing for 2.6.next
version facter=>"1.5.8-93-g469d2a2", puppet=>"2.6.4-493-gea34876"

puppetmasterd fails to start due to ownership problems.

<pre>
ll /var/lib/puppet
drwxr-xr-x 11 root root    4096 Mar 16 11:22 puppet
</pre>

Attempting to start puppetmasterd yeilds:

<pre>
Mar 16 11:22:31 cent-55-64-1 puppet-master[5546]: Starting Puppet master 
version 2.6.4
Mar 16 11:22:31 cent-55-64-1 puppet-master[5546]: 
(/File[/var/lib/puppet/rrd]/ensure) change from absent to directory failed: 
Could not set 'directory on ensure: Permission denied - /var/lib/puppet/rrd
Mar 16 11:23:24 cent-55-64-1 puppet-master[5621]: Reopening log files
Mar 16 11:23:24 cent-55-64-1 puppet-master[5621]: Starting Puppet master 
version 2.6.4
Mar 16 11:23:24 cent-55-64-1 puppet-master[5621]: 
(/File[/var/lib/puppet/rrd]/ensure) change from absent to directory failed: 
Could not set 'directory on ensure: Permission denied - /var/lib/puppet/rrd
Mar 16 11:23:36 cent-55-64-1 puppet-master[5669]: Reopening log files
Mar 16 11:23:36 cent-55-64-1 puppet-master[5669]: Starting Puppet master 
version 2.6.4
Mar 16 11:23:36 cent-55-64-1 puppet-master[5669]: 
(/File[/var/lib/puppet/rrd]/ensure) change from absent to directory failed: 
Could not set 'directory on ensure: Permission denied - /var/lib/puppet/rrd
</pre>

Changing ownership to puppet:puppet allows puppetmasterd to start.


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to