Skip to content

Installing a tool as user failed with access denied #628

@viceice

Description

@viceice

Error

> docker run -it renovate/renovate install-tool bundler 2.3.11
Installing v1 tool bundler v2.3.11
Fetching bundler-2.3.11.gem
Successfully installed bundler-2.3.11
1 gem installed
/usr/local/buildpack/utils/linking.sh: line 18: /usr/local/bin/bundler: Permission denied

Some shell wrapper have wrong group permissions:

> docker run -it renovate/renovate bash -c 'ls -la /usr/local/bin/'
total 47068
drwxrwxr-x 1 root   root       4096 Dec 20 01:50 .
drwxr-xr-x 1 root   root       4096 Dec 19 22:39 ..
-rwxr-xr-x 1 root   root        577 Dec 19 22:40 bundle
-rwxr-xr-x 1 root   root        579 Dec 19 22:40 bundler
-rwxrwxr-x 1 root   root        130 Dec 19 22:39 cargo
-rwxrwxr-x 1 root   root        136 Dec 19 22:38 composer
-rwxr-xr-x 1 ubuntu ubuntu 48045152 Dec 15 22:28 docker
-rwxr-xr-x 1 root   root        325 Dec 20 01:29 docker-entrypoint.sh
-rwxrwxr-x 1 root   root        122 Dec 19 22:40 dotnet
-rwxrwxr-x 1 root   root        133 Dec 19 22:38 elixir
-rwxrwxr-x 1 root   root        132 Dec 19 22:38 erl
-rwxr-xr-x 1 root   root        586 Dec 19 22:40 fuzzy_match
lrwxrwxrwx 1 root   root         29 Dec 19 22:39 gem -> /usr/local/ruby/3.1.3/bin/gem
-rwxrwxr-x 1 root   root        129 Dec 19 22:38 go
-rwxrwxr-x 1 root   root        168 Dec 19 22:37 gradle
-rwxrwxr-x 1 root   root        129 Dec 19 22:41 helm
-rwxr-xr-x 1 root   root        580 Dec 19 22:40 httpclient
-rwxr-xr-x 1 root   root        153 Dec 17 10:06 install-apt
-rwxr-xr-x 1 root   root       2387 Dec 17 10:06 install-buildpack
-rwxr-xr-x 1 root   root        220 Dec 17 10:06 install-gem
-rwxr-xr-x 1 root   root        668 Dec 17 10:06 install-npm
-rwxr-xr-x 1 root   root        323 Dec 17 10:06 install-pip
-rwxr-xr-x 1 root   root       1129 Dec 17 10:06 install-tool
-rwxrwxr-x 1 root   root        131 Dec 19 22:37 java
-rwxrwxr-x 1 root   root        124 Dec 19 22:41 jb
lrwxrwxrwx 1 root   root         42 Dec 19 22:40 lerna -> /opt/buildpack/tools/lerna/6.1.0/bin/lerna
-rwxrwxr-x 1 root   root        130 Dec 19 22:38 mix
lrwxrwxrwx 1 root   root         42 Dec 19 22:37 node -> /opt/buildpack/tools/node/16.19.0/bin/node
lrwxrwxrwx 1 root   root         41 Dec 19 22:37 npm -> /opt/buildpack/tools/node/16.19.0/bin/npm
lrwxrwxrwx 1 root   root         41 Dec 19 22:37 npx -> /opt/buildpack/tools/node/16.19.0/bin/npx
-rwxrwxr-x 1 root   root        126 Dec 19 22:38 php
-rwxrwxr-x 1 root   root        183 Dec 19 22:38 pip
-rwxrwxr-x 1 root   root        184 Dec 19 22:38 pip3
-rwxrwxr-x 1 root   root        187 Dec 19 22:38 pip3.11
lrwxrwxrwx 1 root   root         41 Dec 19 22:40 pnpm -> /opt/buildpack/tools/pnpm/7.18.2/bin/pnpm
-rwxr-xr-x 1 root   root        562 Dec 19 22:40 pod
lrwxrwxrwx 1 root   root         34 Dec 19 22:39 poetry -> /usr/local/poetry/1.3.1/bin/poetry
-rwxr-xr-x 1 root   root        565 Dec 17 10:06 prepare-tool
-rwxrwxr-x 1 root   root        186 Dec 19 22:38 python
-rwxrwxr-x 1 root   root        187 Dec 19 22:38 python3
-rwxrwxr-x 1 root   root        190 Dec 19 22:38 python3.11
lrwxrwxrwx 1 root   root         29 Dec 20 01:50 renovate -> /usr/src/app/dist/renovate.js
lrwxrwxrwx 1 root   root         37 Dec 20 01:50 renovate-config-validator -> /usr/src/app/dist/config-validator.js
lrwxrwxrwx 1 root   root         30 Dec 19 22:39 ruby -> /usr/local/ruby/3.1.3/bin/ruby
-rwxrwxr-x 1 root   root        130 Dec 19 22:39 rustc
-rwxr-xr-x 1 root   root        578 Dec 19 22:40 sandbox-pod
-rwxr-xr-x 1 root   root        574 Dec 19 22:40 xcodeproj
lrwxrwxrwx 1 root   root         42 Dec 19 22:37 yarn -> /opt/buildpack/tools/yarn/1.22.19/bin/yarn

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions