You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tooling.apache.org by "sebbASF (via GitHub)" <gi...@apache.org> on 2026/01/20 17:34:14 UTC
[I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases)
sebbASF opened a new issue, #564:
URL: https://github.com/apache/tooling-trusted-releases/issues/564
Got the following error with Docker:
atr-1 | ERROR: Secrets files have incorrect permissions
atr-1 | /opt/atr/state/secrets/generated/ssh_host_key: 0o644 (expected 0o400)
atr-1 | !!!
atr-1 exited with code 0
Fixed with ```rm -rf state```
It looks like the migration process may not preserve file permissions?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@tooling.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tooling.apache.org
For additional commands, e-mail: dev-help@tooling.apache.org
Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases)
Posted by "sbp (via GitHub)" <gi...@apache.org>.
sbp commented on issue #564:
URL: https://github.com/apache/tooling-trusted-releases/issues/564#issuecomment-3774305647
Added an explicit SSH key check in 175660d20a1166a27171c9d1dcc861b27e64d87f to be extra careful.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tooling.apache.org
For additional commands, e-mail: dev-help@tooling.apache.org
Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases)
Posted by "sbp (via GitHub)" <gi...@apache.org>.
sbp commented on issue #564:
URL: https://github.com/apache/tooling-trusted-releases/issues/564#issuecomment-3774238569
This is not an issue but a deliberate new decision to only accept files with strict permissions. Some of the scripts do automatically change permissions, but if you have existing state you may have to do this manually. You can `chmod` the files instead of removing them.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tooling.apache.org
For additional commands, e-mail: dev-help@tooling.apache.org
Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases)
Posted by "sbp (via GitHub)" <gi...@apache.org>.
sbp closed issue #564: Incorrect permissions for ssh_host_key if migrated from state
URL: https://github.com/apache/tooling-trusted-releases/issues/564
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tooling.apache.org
For additional commands, e-mail: dev-help@tooling.apache.org
Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases)
Posted by "sbp (via GitHub)" <gi...@apache.org>.
sbp commented on issue #564:
URL: https://github.com/apache/tooling-trusted-releases/issues/564#issuecomment-3774633551
When I ran this on my usual development instance, after removing my SSH key to ensure that it's regenerated, the permissions were fine and the explicit check did not do anything. This confused me because I checked the `asyncssh` code just to be sure of what was happening, and could not find that it sets a umask or applies permissions. Running this in a fresh container, I see that the new explicit check is changing the permissions, so `asyncssh` is not applying the required permissions there and this may have been the reason for the original issue, except that `rm -rf state` is said to have fixed it. This may deserve further investigation, but the committed check should be sufficient.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tooling.apache.org
For additional commands, e-mail: dev-help@tooling.apache.org
Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases)
Posted by "dave2wave (via GitHub)" <gi...@apache.org>.
dave2wave commented on issue #564:
URL: https://github.com/apache/tooling-trusted-releases/issues/564#issuecomment-3774132154
I got this as well and fixed it with `chmod 400 /opt/atr/state/secrets/generated/ssh_host_key` - I think that this may be a known issue - @sbp
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tooling.apache.org
For additional commands, e-mail: dev-help@tooling.apache.org
Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases)
Posted by "sbp (via GitHub)" <gi...@apache.org>.
sbp commented on issue #564:
URL: https://github.com/apache/tooling-trusted-releases/issues/564#issuecomment-3774241335
See 4890e73bd157c12f046e89f76bdb2d76dc80c03a for the details.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tooling.apache.org
For additional commands, e-mail: dev-help@tooling.apache.org