Skip to content

CI: set Cacti fixture ownership to runner:www-data in Setup Permissions - #328

Merged
TheWitness merged 1 commit into
developfrom
ci/setup-permissions-ownership
Nov 3, 2026
Merged

TheWitness merged 1 commit into
developfrom
ci/setup-permissions-ownership

Conversation

@TheWitness

Copy link
Copy Markdown
Member

Summary

Aligns the Setup Permissions step of the plugin CI workflow with the fix from Cacti/plugin_evidence#63.

The step previously chowned the Cacti fixture tree to www-data:runner. Composer runs as the runner user in a later step and calls touch() while generating the fixture autoloader; utime() only succeeds for the file owner, so the runner user must own the tree. This changes ownership to runner:www-data (www-data retained as the group), with an explanatory comment.

Change

-        sudo chown -R www-data:runner ${{ github.workspace }}/cacti
+        sudo chown -R runner:www-data ${{ github.workspace }}/cacti

Fleet-wide consistency update across plugin_* repositories.

Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com

Composer runs as the runner user in a later CI step and calls touch()
while generating the fixture autoloader; utime() only succeeds for the
file owner, so the runner user must own the tree. www-data is retained
as group and ownership is handed back before polling. Mirrors the fix
in Cacti/plugin_evidence#63.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot AI balanced review requested due to automatic review settings November 2, 2026 20:11
@sonarqubecloud

sonarqubecloud Bot commented Nov 2, 2026

Copy link
Copy Markdown

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No active review issues are identified for the CI fixture ownership adjustment.

No open issues 🎉

What changed in this PR

Updates CI fixture ownership so Composer runs as the owning runner user, while retaining www-data group access.

Changes:

  • Changes Cacti fixture ownership from www-data:runner to runner:www-data.
  • Adds a comment explaining Composer’s ownership requirement and the later handoff before polling.
File Description
.github/​workflows/​plugin-ci-workflow.yml Adjusts fixture ownership in Setup Permissions and documents the rationale.

Review effort: Balanced

@somethingwithproof somethingwithproof left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No blockers found.

@TheWitness
TheWitness merged commit 64d09be into develop Nov 3, 2026
8 checks passed
@TheWitness
TheWitness deleted the ci/setup-permissions-ownership branch November 3, 2026 14:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants