Jira (PUP-9642) puppet device permissions preventing reading dirs

Change By:	David Schmitt
Key:	FM PUP - 7133 9642
Project:	Modules [Internal] Puppet

This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)

David Schmitt (JIRA)

unread,

Apr 18, 2019, 7:25:04 AM4/18/19

to puppe...@googlegroups.com

David Schmitt updated an issue

Puppet /

While I was able to reproduce this on 5.5, the effect is not reproducible on 6.4.1.

Change By:	David Schmitt
Affects Version/s:	PUP 5.5.13
Affects Version/s:	PUP 5.5.1
Fix Version/s:	PUP 6.4.1

Dimitri Tischenko (JIRA)

unread,

Apr 18, 2019, 9:17:02 AM4/18/19

to puppe...@googlegroups.com

Dimitri Tischenko commented on

Re: puppet device permissions preventing reading dirs

David Schmitt As per the docs at https://puppet.com/docs/pe/2018.1/component_versions_in_recent_pe_releases.html, the current LTS release of PE uses agent 5.5.10, so customers currently using this version (including Deutsche Telekom) have this issue. Do we have a work-around for them short of upgrading to PE 2019.0?

David Schmitt (JIRA)

unread,

Apr 23, 2019, 10:46:04 AM4/23/19

to puppe...@googlegroups.com

David Schmitt commented on

Re: puppet device permissions preventing reading dirs

Dimitri Tischenko The long-term solution is to not run puppet device as root. I'd love to hear your opinion about that. Meanwhile I've got some code changes in https://github.com/puppetlabs/puppet/pull/7483 which will likely fix the initialisation problem. I'm a bit concerned that it went away with 6.4, because that means that there is sometihng else going on that I do not fully understand yet (or I have messed up my testing).

Josh Cooper (JIRA)

unread,

Apr 30, 2019, 6:25:02 PM4/30/19

to puppe...@googlegroups.com

Josh Cooper updated an issue

Puppet /

Change By:	Josh Cooper
Fix Version/s:	PUP 6.4.1
Fix Version/s:	PUP 6.4.z

David Schmitt (JIRA)

unread,

May 22, 2019, 6:43:03 AM5/22/19

to puppe...@googlegroups.com

David Schmitt updated an issue

Puppet /

Change By:	David Schmitt
Release Notes Summary:	Under certain circumstances `puppet device` would get confused with directory permissions when initialising new device certificates. This fixes `puppet device` to always initialise the ssl directories with the correct permissions.
Release Notes:	Bug Fix

David Schmitt (JIRA)

unread,

May 23, 2019, 5:22:03 AM5/23/19

to puppe...@googlegroups.com

David Schmitt commented on

Re: puppet device permissions preventing reading dirs

https://puppet.slack.com/archives/CF466J67L/p1558546760042800

Hey, there's a really nasty looking merge conflict in `lib/puppet/application/device.rb` trying to merge 5.5.x up into 6.0.x, and it looks like it's from commits you had a hand in. Could you take a crack at resolving that? There's also some conflicts in `pip` related files that aren't 100% straight-forward, but feel free to ping @jorie or myself on that.

David Schmitt (JIRA)

unread,

May 23, 2019, 5:57:03 AM5/23/19

to puppe...@googlegroups.com

David Schmitt updated an issue

Puppet /

Change By:	David Schmitt
Fix Version/s:	PUP 6.4.z
Fix Version/s:	PUP 5.5.z

David Schmitt (JIRA)

unread,

May 23, 2019, 6:21:02 AM5/23/19

to puppe...@googlegroups.com

David Schmitt updated an issue

Puppet /

Change By:	David Schmitt
Affects Version/s:	PUP 6.0.10

David Schmitt (JIRA)

unread,

May 23, 2019, 6:23:02 AM5/23/19

to puppe...@googlegroups.com

David Schmitt commented on

Re: puppet device permissions preventing reading dirs

Checked against 6.0.10 from puppet-enterprise-2019.0.4-rc1-47-gb975b36-ubuntu-18.04-amd64 and the problem exists there too.

I could not reproduce it with 6.4.3 from puppet-enterprise-2019.1.1-rc1-77-g4687836-ubuntu-18.04-amd64.

David Schmitt (JIRA)

unread,

May 23, 2019, 11:59:03 AM5/23/19

to puppe...@googlegroups.com

David Schmitt updated an issue

Puppet /

Change By:	David Schmitt
Fix Version/s:	PUP 6.0.z

David Mallon (JIRA)

unread,

May 30, 2019, 8:46:02 AM5/30/19

to puppe...@googlegroups.com

David Mallon commented on

Re: puppet device permissions preventing reading dirs

Hey Mihai Buzgau, I think this change is still in need of a promote from 6.0.x up to 6.4.x - is that something on your radar?

Mihai Buzgau (JIRA)

unread,

May 30, 2019, 8:52:02 AM5/30/19

to puppe...@googlegroups.com

Mihai Buzgau commented on

Re: puppet device permissions preventing reading dirs

David Mallon the promotions happen automatically during merge-ups. Merge-ups are done by Jenkins once the tests pass for a specific branch.
Currently, the agent CI is still stuck because of this issue: https://tickets.puppetlabs.com/browse/QENG-7269

Oana Tanasoiu (JIRA)

unread,

Jun 10, 2019, 3:16:03 AM6/10/19

to puppe...@googlegroups.com

Oana Tanasoiu updated an issue

Puppet /

Change By:	Oana Tanasoiu
Fix Version/s:	PUP 6.5.0

Oana Tanasoiu (JIRA)

unread,

Jun 10, 2019, 3:16:04 AM6/10/19

to puppe...@googlegroups.com

Oana Tanasoiu commented on

Re: puppet device permissions preventing reading dirs

Hi David Schmitt this was merged into master and will be part of the 6.5.0 release. Can you please let us know if this is resolved by closing the ticket ?

David Schmitt (JIRA)

unread,

Jun 10, 2019, 9:58:04 AM6/10/19

to puppe...@googlegroups.com

David Schmitt commented on