Skip to content

Fix log directory permissions in run-all.sh non-mountpoint branch#90

Merged
yaronkoren merged 1 commit intomasterfrom
fix-log-permissions
Feb 13, 2026
Merged

Fix log directory permissions in run-all.sh non-mountpoint branch#90
yaronkoren merged 1 commit intomasterfrom
fix-log-permissions

Conversation

@cicalese
Copy link
Contributor

Summary

  • Adds missing chgrp -R "$WWW_GROUP" to the non-mountpoint branch for the MediaWiki log directory
  • Changes chmod -R o=rwX (other only) to chmod -R g=rwX (group), matching the pattern used by every other log permission block in the file

Problem

When /var/log/mediawiki is not a bind mount, the directory is created as root:root with no group write permission. The www-data user then gets "Permission denied" when writing log files (e.g., mwjobrunner_log_*).

The bug was latent since #420 but masked by the synchronous make_dir_writable call that followed. It became visible after #81 backgrounded that call.

Fixes #89

Test plan

  • Build CanastaBase image without a log bind mount for /var/log/mediawiki
  • Start the container and verify /var/log/mediawiki has group www-data and group write permission
  • Confirm job runner log files are created without "Permission denied" errors

The non-mountpoint branch was missing chgrp and used o=rwX (other only)
instead of g=rwX (group). This left /var/log/mediawiki owned by root:root
with no group write permission, causing "Permission denied" errors when
www-data tried to write log files (e.g. mwjobrunner_log_*).

The bug was latent since #420 but masked by the synchronous
make_dir_writable call that followed. It became visible after #81
backgrounded that call.

Fixes #89
@github-actions
Copy link

🐳 The image based on c077fb39 commit has been built with 1.43.6-20260213-90 tag as ghcr.io/canastawiki/canasta-base:1.43.6-20260213-90

@yaronkoren yaronkoren merged commit cfc707f into master Feb 13, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Fix log directory permissions in run-all.sh non-mountpoint branch

2 participants