Skip to content

Commit

Permalink
Make default recordings dir writable also for webserver
Browse files Browse the repository at this point in the history
Issue bluecherrydvr/bluecherry-apps#620
arises because the dir exists, is owned by bluecherry:bluecherry, but is
by default writable only by owning user, but not the owning group.

Fix this here in docker setup code.
bluecherry-apps code will be amended to handle this, too.

root@df79d5606903:~# sudo -u www-data php -r "echo is_writable('/var/lib/bluecherry/recordings') ? 'writable' : 'not writable';"; echo
not writable
root@df79d5606903:~# sudo -u www-data touch /var/lib/bluecherry/recordings/www-data.was.here
touch: cannot touch '/var/lib/bluecherry/recordings/www-data.was.here': Permission denied
root@df79d5606903:~# id
uid=0(root) gid=0(root) groups=0(root)
root@df79d5606903:~# id www-data
uid=33(www-data) gid=33(www-data) groups=33(www-data),4(adm),20(dialout),29(audio),44(video),999(bluecherry)
root@df79d5606903:~# ls -l /var/lib/bluecherry/recordings -d
drwxr-xr-x 2 bluecherry bluecherry 4096 Nov 24 00:36 /var/lib/bluecherry/recordings
root@df79d5606903:~# chmod g+w /var/lib/bluecherry/recordings
root@df79d5606903:~# ls -l /var/lib/bluecherry/recordings -d
drwxrwxr-x 2 bluecherry bluecherry 4096 Nov 24 00:36 /var/lib/bluecherry/recordings
root@df79d5606903:~# sudo -u www-data touch /var/lib/bluecherry/recordings/www-data.was.here
root@df79d5606903:~# sudo -u www-data php -r "echo is_writable('/var/lib/bluecherry/recordings') ? 'writable' : 'not writable';"; echo
writable
  • Loading branch information
andrey-utkin committed Nov 24, 2023
1 parent a780173 commit e116788
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions server/entrypoint.sh
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,7 @@ echo "> Writing /etc/bluecherry.conf"

echo "> chown bluecherry:bluecherry /var/lib/bluecherry/recordings"
chown bluecherry:bluecherry /var/lib/bluecherry/recordings
chmod ug+rwx /var/lib/bluecherry/recordings


# The bluecherry container's Dockerfile sets rsyslog to route the bluecherry
Expand Down

0 comments on commit e116788

Please sign in to comment.