[impala] branch master updated: IMPALA-11703: Set appropriate permissions on /var/tmp in Docker build

[jo...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

joemcdonnell pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/impala.git


The following commit(s) were added to refs/heads/master by this push:
     new 1899b2e34 IMPALA-11703: Set appropriate permissions on /var/tmp in Docker build
1899b2e34 is described below

commit 1899b2e34b3fd184bcd3101fb5da8ae80479ef25
Author: Joe McDonnell <jo...@cloudera.com>
AuthorDate: Mon Nov 7 16:21:43 2022 -0800

    IMPALA-11703: Set appropriate permissions on /var/tmp in Docker build
    
    Impala will fail to start if the permissions on /var/tmp do
    not have the sticky bit set (i.e. +t). Some Redhat UBI images
    do not set the sticky bit (+t) on /tmp and /var/tmp. This
    sets the sticky bit on those directories during Docker build.
    
    Testing:
     - Verified that the sticky bit is set on one of the affected
       base images and that Impala can start up
    
    Change-Id: I7ff32a035f40cb41d3a8dc80a07fd9924f41b942
    Reviewed-on: http://gerrit.cloudera.org:8080/19222
    Reviewed-by: Abhishek Rawat <ar...@cloudera.com>
    Tested-by: Impala Public Jenkins <im...@cloudera.com>
---
 docker/install_os_packages.sh | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/docker/install_os_packages.sh b/docker/install_os_packages.sh
index f11fe94b4..0a0cb6ecb 100755
--- a/docker/install_os_packages.sh
+++ b/docker/install_os_packages.sh
@@ -154,6 +154,11 @@ if ! locale -a | grep en_US.utf8 ; then
   exit 1
 fi
 
+# Impala will fail to start if the permissions on /var/tmp are not set to include
+# the sticky bit (i.e. +t). Some versions of Redhat UBI images do not have
+# this set by default, so specifically set the sticky bit for both /tmp and /var/tmp.
+chmod a=rwx,o+t /var/tmp /tmp
+
 # To minimize the size for the Docker image, clean up any unnecessary files.
 if [[ $DISTRIBUTION == Ubuntu ]]; then
   apt-get clean