You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@james.apache.org by bt...@apache.org on 2025/11/12 14:02:31 UTC

(james-project) 02/02: [BUILD] Fix tmpfs permission mode

This is an automated email from the ASF dual-hosted git repository.

btellier pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/james-project.git

commit 5a1079c4cb74ac2a222f2b55ee88e05ec2e2c327
Author: Quan Tran <hq...@linagora.com>
AuthorDate: Wed Nov 12 16:07:30 2025 +0700

    [BUILD] Fix tmpfs permission mode
    
    cf https://github.com/opencontainers/runc/issues/4971
    
    runc update recently has resulted in the default permissions on docker tmpfs being 0755 rather than the expected 1777, which makes OpenSearch tests failed to acquire the lock on file system.
---
 .../java/org/apache/james/backends/opensearch/DockerOpenSearch.java   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/backends-common/opensearch/src/test/java/org/apache/james/backends/opensearch/DockerOpenSearch.java b/backends-common/opensearch/src/test/java/org/apache/james/backends/opensearch/DockerOpenSearch.java
index 48c71eb202..e0f8717887 100644
--- a/backends-common/opensearch/src/test/java/org/apache/james/backends/opensearch/DockerOpenSearch.java
+++ b/backends-common/opensearch/src/test/java/org/apache/james/backends/opensearch/DockerOpenSearch.java
@@ -143,7 +143,7 @@ public interface DockerOpenSearch {
 
         static DockerContainer defaultContainer(String imageName) {
             return DockerContainer.fromName(imageName)
-                .withTmpFs(ImmutableMap.of("/usr/share/opensearch/data/nodes/0", "rw,size=200m"))
+                .withTmpFs(ImmutableMap.of("/usr/share/opensearch/data/nodes/0", "rw,size=200m,mode=1777"))
                 .withExposedPorts(OS_HTTP_PORT)
                 .withEnv("discovery.type", "single-node")
                 .withEnv("DISABLE_INSTALL_DEMO_CONFIG", "true")
@@ -239,7 +239,7 @@ public interface DockerOpenSearch {
                         .withFileFromClasspath("conf/default.key", "auth-es/default.key")
                         .withFileFromClasspath("Dockerfile", "auth-es/NginxDockerfile")))
                 .withExposedPorts(OS_HTTP_PORT)
-                .withTmpFs(ImmutableMap.of("/usr/share/opensearch/data/nodes/0", "rw,size=200m"))
+                .withTmpFs(ImmutableMap.of("/usr/share/opensearch/data/nodes/0", "rw,size=200m,mode=1777"))
                 .withLogConsumer(frame -> LOGGER.debug("[NGINX] " + frame.getUtf8String()))
                 .withNetwork(network)
                 .withName("james-testing-nginx-" + UUID.randomUUID());


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@james.apache.org
For additional commands, e-mail: notifications-help@james.apache.org