Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Setpermissions cannot fail on the v2 deployments #157

Open
Rotonen opened this issue Jun 11, 2019 · 0 comments
Open

Setpermissions cannot fail on the v2 deployments #157

Rotonen opened this issue Jun 11, 2019 · 0 comments

Comments

@Rotonen
Copy link
Contributor

Rotonen commented Jun 11, 2019

[setpermissions]
# Make sure that the var directory is owned by the "zope" group in order to
# let the service user "zope" have write access.
recipe = plone.recipe.command
command =
chgrp --silent -R ${buildout:os-user} ${buildout:directory}/var
find ${buildout:directory}/var -maxdepth 1 -type d -exec chmod --silent 2770 {} \;
# Make sure supervisord is always started as "zope" user using sudo.
chmod --silent u-x,g-x ${buildout:directory}/bin/supervisord
# Make sure that other users can access the egg infos later.
chmod -R --silent g+rw,o+r /apps/eggs/*
# Make sure that other users can access the extends-cache later.
chmod -R --silent g+rw,o+r /apps/extends-cache/*
# Make sure that other users can access the downloads later.
chmod -R --silent g+rw,o+r /apps/downloads/*
chgrp -R --silent deploy /apps/downloads/*
# Make sure other deployers can change bin scripts.
chmod --silent g+rw ${buildout:directory}/bin/*
# Make sure other deployers can change parts.
chmod -R --silent g+rw ${buildout:directory}/parts/*
chgrp -R --silent deploy ${buildout:directory}/parts/*
# Make sure that "zope" have write access to solr-specific folders.
chgrp --silent -R ${buildout:os-user} ${buildout:directory}/parts/solr-instance/logs
chgrp --silent -R ${buildout:os-user} ${buildout:directory}/parts/solr-instance/solr-webapp

If any of those commands fail, IMO the buildout should fail. This does not currently happen.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant