Skip to content

CI: set Cacti fixture ownership to runner:www-data in Setup Permissions - #861

Merged
TheWitness merged 1 commit into
developfrom
ci/setup-permissions-ownership
Nov 3, 2026
Merged

TheWitness merged 1 commit into
developfrom
ci/setup-permissions-ownership

Conversation

@TheWitness

Copy link
Copy Markdown
Member

Summary

Aligns the Setup Permissions step of the plugin CI workflow with the fix from Cacti/plugin_evidence#63.

The step previously chowned the Cacti fixture tree to www-data:runner. Composer runs as the runner user in a later step and calls touch() while generating the fixture autoloader; utime() only succeeds for the file owner, so the runner user must own the tree. This changes ownership to runner:www-data (www-data retained as the group), with an explanatory comment.

Change

-        sudo chown -R www-data:runner ${{ github.workspace }}/cacti
+        sudo chown -R runner:www-data ${{ github.workspace }}/cacti

Fleet-wide consistency update across plugin_* repositories.

Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com

Composer runs as the runner user in a later CI step and calls touch()
while generating the fixture autoloader; utime() only succeeds for the
file owner, so the runner user must own the tree. www-data is retained
as group and ownership is handed back before polling. Mirrors the fix
in Cacti/plugin_evidence#63.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot AI balanced review requested due to automatic review settings November 2, 2026 20:11
@sonarqubecloud

sonarqubecloud Bot commented Nov 2, 2026

Copy link
Copy Markdown

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No active review issues are reported for the CI fixture ownership update supporting Composer autoloader generation.

No open issues 🎉

What changed in this PR

Updates the plugin CI fixture permissions so the runner user owns the Cacti tree during Composer autoloader generation, aligning with the fleet-wide ownership fix.

Changes:

  • Changes fixture ownership from www-data:runner to runner:www-data, retaining web-server group access.
  • Adds a comment explaining the ownership requirement and later handoff before polling.
File Description
.github/​workflows/​plugin-ci-workflow.yml Updates fixture ownership in Setup Permissions and documents the rationale.

Review effort: Balanced

@somethingwithproof somethingwithproof left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No blockers found.

@TheWitness
TheWitness merged commit b6b9f36 into develop Nov 3, 2026
6 checks passed
@TheWitness
TheWitness deleted the ci/setup-permissions-ownership branch November 3, 2026 14:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants