[geo]: crowdsec permissions

[LaurenceJJones]

time="2025-12-24T19:22:29Z" level=error msg="failed to open databases: failed to open ASN database: open /var/lib/crowdsec/data/GeoLite2-ASN.mmdb: permission denied"
time="2025-12-24T19:22:29Z" level=error msg="failed to open databases: failed to open ASN database: open /var/lib/crowdsec/data/GeoLite2-ASN.mmdb: permission denied"

[github-actions]

@LaurenceJJones: Thanks for opening an issue, it is currently awaiting triage.

In the meantime, you can:

1. Check Documentation to see if your issue can be self resolved.
2. You can also join our Discord

Details

I am a bot created to help the crowdsecurity developers manage community feedback and contributions. You can check out my manifest file to understand my behavior and what I can do. If you want to use this for your project, you can check out the BirthdayResearch/oss-governance-bot repository.

[github-actions]

@LaurenceJJones: There are no 'kind' label on this issue. You need a 'kind' label to start the triage process.

• /kind feature
• /kind enhancement
• /kind bug
• /kind packaging

Details

I am a bot created to help the crowdsecurity developers manage community feedback and contributions. You can check out my manifest file to understand my behavior and what I can do. If you want to use this for your project, you can check out the BirthdayResearch/oss-governance-bot repository.

[roedie]

/kind bug

[roedie]

Can confirm, the database is only readable for root. I'm not sure if this is related to the spoa-bouncer or to crowdsec as whole since all files in that folder are permission 0600

[LaurenceJJones]

Can confirm, the database is only readable for root. I'm not sure if this is related to the spoa-bouncer or to crowdsec as whole since all files in that folder are permission 0600

CrowdSec keeps the chmod permissions but not chown. We are going to update crowdsec to keep permissions if modified by user.

For now adding a post reload hook on crowdsec is the only way to heal atm. However, we currently don't handle the error properly in the geo module.