#5289 grant mirrormanager umdl access to pre-bitflip content
Closed: Fixed None Opened 7 years ago by kevin.

When we stage an alpha/beta/final release, we should make sure that the umdl process on mm-backend01 can access this pre-bitflip content and crawl it so it's ready for release day.

This is likely just a group or permissions issue on mm-backend01.


The mirrormanager user needs to be added to the group 263, which seems to own all the files under /srv/pub/fedora:

{{{
$ find . ! -gid 263
./core/updates
./core/updates/README
./releases/7
./releases/7/README
./releases/8
./releases/8/README
}}}

The find is still running, but it seems that really most of the files are owned by the group 263.

Is it enough to do add the user mirrormanager to the group 263 locally? I can do the necessary ansible changes. Or should this be handled somehow via FAS?

The full output of find, kind of interesting. Only a few packages under ./releases/23/Everything/x86_64/os/packages/ are not owned by the group 263. Looking closer at that directory, that directory seems totally wrong. The 'packages' directory has only a few files and the actual packages are in the 'Packages' directory.

{{{

$ ls -la ./releases/23/Everything/x86_64/os/
total 32
drwxr-xr-x. 5 263 263 4096 Mar 30 22:19 .
drwxr-xr-x. 4 263 263 4096 Oct 31 2015 ..
drwxr-xr-x. 2 nobody nobody 16384 Mar 30 22:19 packages
drwxr-xr-x. 35 263 263 4096 Oct 31 2015 Packages
drwxr-xr-x. 2 263 263 4096 Oct 31 2015 repodata
}}}

{{{
$ find . ! -gid 263
./core/updates
./core/updates/README
./releases/7
./releases/7/README
./releases/8
./releases/8/README
./releases/23/Everything/x86_64/os/packages
./releases/23/Everything/x86_64/os/packages/cronie-anacron-1.5.0-3.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/fedora-logos-22.0.0-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libyaml-0.1.6-7.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libpipeline-1.4.0-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/python3-chardet-2.2.1-3.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/libpwquality-1.3.0-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/pkgconfig-0.28-9.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/shared-mime-info-1.5-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libsecret-0.18.3-1.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libtasn1-4.5-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libunistring-0.9.4-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libcroco-0.6.8-7.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libverto-tevent-0.2.6-5.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libmodman-2.0.1-11.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libproxy-0.4.11-12.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/glib-networking-2.46.1-1.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libaio-0.3.110-5.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/ppp-2.4.7-8.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libdaemon-0.14-9.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/tcp_wrappers-7.6-81.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libpath_utils-0.2.1-27.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libref_array-0.1.5-27.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libini_config-1.2.0-27.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libcollection-0.7.0-27.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libbasicobjects-0.1.1-27.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/make-4.0-5.1.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libpciaccess-0.13.4-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libcgroup-0.41-7.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/python-chardet-2.2.1-3.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/python3-pip-7.1.0-1.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/python3-3.4.3-5.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libverto-0.2.6-5.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libtommath-0.42.0-6.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libtomcrypt-1.17-25.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/fuse-libs-2.9.4-3.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/gpgme-1.4.3-6.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/python-IPy-python3-0.81-13.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/libsemanage-python3-2.4-4.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libffi-3.1-8.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/gdbm-1.11-6.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/ustr-1.0.4-18.fc22.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/fipscheck-1.4.1-9.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/socat-1.7.2.4-5.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libnfnetlink-1.0.1-7.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libnetfilter_conntrack-1.0.4-5.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/freetype-2.6.0-3.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/cyrus-sasl-lib-2.1.26-25.2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/cracklib-dicts-2.9.1-6.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/cracklib-2.9.1-6.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/python3-crypto-2.6.1-7.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/python3-markupsafe-0.23-7.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/cronie-1.5.0-3.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/ncurses-base-5.9-21.20150214.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/slang-2.3.0-4.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/python3-libs-3.4.3-5.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/newt-0.52.18-3.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/polkit-pkla-compat-0.1-6.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/expat-2.1.0-12.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libcap-ng-0.7.7-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/qrencode-libs-3.4.2-5.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libxkbcommon-0.5.0-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/acl-2.2.52-10.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/mokutil-0.2.0-3.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libutempter-1.1.6-7.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/librepo-1.7.16-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libgsystem-2015.2-1.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/xz-libs-5.2.1-3.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libdb-utils-5.3.28-13.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/python-websocket-client-0.32.0-1.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/python-six-1.9.0-3.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/python-setuptools-18.0.1-2.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/python-pip-7.1.0-1.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/python-libs-2.7.10-8.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/python-IPy-0.81-13.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/libsemanage-python-2.4-4.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libselinux-python-2.4-4.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/checkpolicy-2.4-1.fc23.1.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libsepol-2.4-1.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libsemanage-2.4-4.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libselinux-utils-2.4-4.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/diffutils-3.3-12.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libuser-0.62-1.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libedit-3.1-13.20150325cvs.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/fipscheck-lib-1.4.1-9.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/psmisc-22.21-7.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/oddjob-0.34.3-1.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libpcap-1.7.4-1.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libnfsidmap-0.26-3.1.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libevent-2.0.21-7.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/keyutils-1.5.9-7.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/groff-base-1.22.3-6.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libidn-1.32-1.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/linux-atm-libs-2.5.1-13.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libmnl-1.0.3-10.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libdb-5.3.28-13.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/iptables-1.4.21-15.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/sed-4.2.2-11.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/cpio-2.11-36.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/openldap-2.4.40-14.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/npth-1.2-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libksba-1.3.3-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libgcrypt-1.6.4-1.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/fedora-repos-23-1.noarch.rpm
./releases/23/Everything/x86_64/os/packages/libss-1.42.13-3.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libmetalink-0.1.2-8.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/popt-1.16-6.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/cryptsetup-libs-1.6.8-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/ncurses-5.9-21.20150214.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libselinux-2.4-4.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libcap-2.24-8.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libattr-2.4.47-14.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libacl-2.2.52-10.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/gmp-6.0.0-12.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/pam-1.2.1-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/keyutils-libs-1.5.9-7.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/json-glib-1.0.4-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/gawk-4.1.3-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/python3-pyserial-2.7-2.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/python3-prettytable-0.7.2-5.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/python3-oauthlib-0.7.2-3.20150520git514cad7.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/python3-jsonpatch-1.2-6.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/python3-jinja2-2.8-2.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/net-tools-2.0-0.35.20150915git.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libselinux-python3-2.4-4.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/crontabs-1.11-11.20150630git.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/zlib-1.2.8-9.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/lzo-2.08-5.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libcom_err-1.42.13-3.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/e2fsprogs-libs-1.42.13-3.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/ncurses-libs-5.9-21.20150214.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/filesystem-3.2-35.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/newt-python3-0.52.18-3.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/tcp_wrappers-libs-7.6-81.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/python3-websocket-client-0.32.0-1.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/python3-six-1.9.0-3.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/python3-setuptools-18.0.1-2.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/polkit-0.113-4.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/readline-6.3-6.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/polkit-libs-0.113-4.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libndp-1.5-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/libgudev-230-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/xz-5.2.1-3.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/which-2.20-12.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/vim-minimal-7.4.827-1.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/tcpdump-4.7.4-3.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/tar-1.28-6.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/shim-0.8-8.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/screen-4.3.1-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/rootfiles-8.1-18.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/python-2.7.10-8.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/procps-ng-3.3.10-9.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/passwd-0.79-6.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/oddjob-mkhomedir-0.34.3-1.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/nss-altfiles-2.18.1-6.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/lsof-4.88-3.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/less-481-1.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/iptables-services-1.4.21-15.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/hostname-3.15-6.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/gzip-1.6-9.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/fedora-release-23-1.noarch.rpm
./releases/23/Everything/x86_64/os/packages/efibootmgr-0.12-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/e2fsprogs-1.42.13-3.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/cryptsetup-1.6.8-2.fc23.x86_64.rpm
./releases/23/Everything/x86_64/os/packages/cloud-utils-growpart-0.27-14.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/cloud-init-0.7.6-5.20140218bzr1060.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/bash-completion-2.1-8.20150513git1950590.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/basesystem-11-1.fc23.noarch.rpm
./releases/23/Everything/x86_64/os/packages/authconfig-6.2.10-10.fc23.x86_64.rpm
./updates/testing/7/README.txt
./updates/testing/8/README.txt
./development
./development/rawhide
}}}

Is it enough to do add the user mirrormanager to the group 263 locally? I can do the necessary ansible changes. Or should this be handled somehow via FAS?

Yep. I think it's fine to just do it in ansible. I can make a test dir if you like to make sure thats all we need, but I think it is.

That other dir is due to a bug in the atomic tree compose a while back. I thought we cleaned it all up, but perhaps not. Will sort it out.

What is the group name of group id 263?

'ftpsync'

(and uid 263 is the ftpsync user)

Login to comment on this ticket.

Metadata