[ixpmanager] Users and permissions (bower upgrade problems)

[Barry O'Donovan]

Hege Trosvik wrote:
> I have modified the ubuntu install-script to work for fedora,

Cool! If you're happy to support (and maintain) it we'd love to add it 
to the list of installers. See the CLA / contributing guidelines at [1].

> and I assume the install-scripts are meant to be run as root.

Yes.

> This is working fine, until I now try to do an upgrade strictly
<snip>
> before doing:
>
> chown -R root: ${IXPROOT}
> chown -R www-data: ${IXPROOT}/storage ${IXPROOT}/var ${IXPROOT}/bootstrap/cache ${IXPROOT}/database/Proxies&>>  /tmp/ixp-manager-install.log

So the above could be amended to include:

${IXPROOT}/bower.json ${IXPROOT}/public/bower_components

(and ${IXPROOT}/vendor actually).

but you may still get permission errors depending on your www-data's 
home directory permissions.

It's not advisable to run bower as root but exactly how this will work 
in the long term really depends on your individual setup / sysadmin 
preferences.

With the above added to chown, this will work fine:

sudo -u www-data bash -c "HOME=/var/tmp && cd ${IXPROOT} && bower 
--config.interactive=false -f update"

For a more permanent store for bower cached items, this is probably better:

sudo -u www-data bash -c "HOME=${IXPROOT}/storage cd ${IXPROOT}/ && 
bower --config.interactive=false -f update"


I've updated the docs to reflect this:

https://ixp-manager.readthedocs.io/en/latest/install/upgrading/

  - Barry



> When I follow the docs to do an upgrade, I also do it as root,
> but "bower install" does not want to be run as root, and the
> "sudo -u www-data..." (or sudo -u apache for fedora) does not
> work as most of $IXPROOT is now owned by root.
>
> Any recommendations for users/permissions here?
>

[1] https://github.com/inex/IXP-Manager/blob/master/CONTRIBUTING.md

>      Hege
>
>
>
> _______________________________________________
> INEX IXP Manager mailing list
> ixpmanager at inex.ie
> https://www.inex.ie/mailman/listinfo/ixpmanager

-- 

Kind regards,
Barry O'Donovan
INEX Operations

https://www.inex.ie/support/
+353 1 531 3339