Skip to content

CI: set Cacti fixture ownership to runner:www-data in Setup Permissions - #50

Merged
TheWitness merged 1 commit into
mainfrom
ci/setup-permissions-ownership
Nov 3, 2026
Merged

TheWitness merged 1 commit into
mainfrom
ci/setup-permissions-ownership

Conversation

@TheWitness

Copy link
Copy Markdown
Member

Summary

Aligns the Setup Permissions step of the plugin CI workflow with the fix from Cacti/plugin_evidence#63.

The step previously chowned the Cacti fixture tree to www-data:runner. Composer runs as the runner user in a later step and calls touch() while generating the fixture autoloader; utime() only succeeds for the file owner, so the runner user must own the tree. This changes ownership to runner:www-data (www-data retained as the group), with an explanatory comment.

Change

-        sudo chown -R www-data:runner ${{ github.workspace }}/cacti
+        sudo chown -R runner:www-data ${{ github.workspace }}/cacti

Fleet-wide consistency update across plugin_* repositories.

Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com

Composer runs as the runner user in a later CI step and calls touch()
while generating the fixture autoloader; utime() only succeeds for the
file owner, so the runner user must own the tree. www-data is retained
as group and ownership is handed back before polling. Mirrors the fix
in Cacti/plugin_evidence#63.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot AI balanced review requested due to automatic review settings November 2, 2026 20:09
@sonarqubecloud

sonarqubecloud Bot commented Nov 2, 2026

Copy link
Copy Markdown

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The CI fixture ownership change has no active review issues.

No open issues 🎉

What changed in this PR

Updates CI fixture ownership so Composer runs as the file owner when generating the Cacti autoloader, while retaining www-data group access.

Changes:

  • Changes fixture ownership from www-data:runner to runner:www-data.
  • Adds a comment explaining the ownership requirement and later handoff to www-data.
File Description
.github/​workflows/​plugin-ci-workflow.yml Adjusts fixture ownership in Setup Permissions and documents why.

Review effort: Balanced

@somethingwithproof somethingwithproof left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No blockers found.

@TheWitness
TheWitness merged commit 9a2c999 into main Nov 3, 2026
8 checks passed
@TheWitness
TheWitness deleted the ci/setup-permissions-ownership branch November 3, 2026 14:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants