Re: Permission denied error when unpacking droplet


Kyle Havlovitz (kyhavlov)
 

Looking into this more, it seems like the cause is that the /home/vcap directory is owned by root instead of vcap. I can't figure out what would cause this, though.

From: Rohit Kelapure <rkelapure(a)pivotal.io<mailto:rkelapure(a)pivotal.io>>
Reply-To: "Discussions about Cloud Foundry projects and the system overall." <cf-dev(a)lists.cloudfoundry.org<mailto:cf-dev(a)lists.cloudfoundry.org>>
Date: Tuesday, September 29, 2015 at 10:12 AM
To: "Discussions about Cloud Foundry projects and the system overall." <cf-dev(a)lists.cloudfoundry.org<mailto:cf-dev(a)lists.cloudfoundry.org>>
Subject: [cf-dev] Re: Re: Permission denied error when unpacking droplet

How to login into a warden container :
http://cloud.rohitkelapure.com/2015/09/debugging-dea-issues-on-cloud-foundry.html

On Mon, Sep 28, 2015 at 7:03 PM, Amit Gupta <amitkgupta84(a)gmail.com<mailto:amitkgupta84(a)gmail.com>> wrote:
The DEA is trying to run a script in the warden container to untar the droplet. For some reason, the user executing the script and the file system permissions in the container in the /home/vcap directory are not what they're supposed to be. I believe you are deploying and running all the Cloud Foundry components in a non-standard way. You may wish to try a more standard deployment, and look at the differences in users and file system permissions between the standard deployment and your deployment, and reverse-engineer what would need to be fixed in your deployment to get things to work. Here's a blog post, at the end it talks about how you can get a session into a warden container (http://andypiper.co.uk/2014/02/17/getting-inside-cloud-foundry-for-debug-and-profit/). Alternatively you can look at the startup scripts used in the standard deployments, e.g. (https://github.com/cloudfoundry/cf-release/blob/master/jobs/dea_next/templates/dea_ctl.erb).

Since you've configured all your components in a very idiosyncratic manner, it's hard to say generally what you need to fix to get all the permissions right.



--
Pivotal CF Architect
rkelapure(a)pivotal.io<mailto:rkelapure(a)pivotal.io>
cell: 9197242524

Join cf-dev@lists.cloudfoundry.org to automatically receive all group messages.