Abra installer fails with some security setups #552

New Issue

basebuilder · 2024-01-16T16:48:45Z

basebuilder commented

2024-01-16 16:48:45 +00:00

Upon trying to install abra with the recommended script install.abra.coopcloud.tech on one machine it erred out with a permissions error:

downloading 0.8.1-beta linux_x86_64 binary release for abra...
/home/user/.local/bin/.abra-download: Read-only file system
...

After debugging that machine, the reason was wget was executed through a firejail which by default mounts ~/.local/bin/ as read-only. The following simple patch which writes to /tmp addresses machines with similar setups. This might (I am not a security expert) be safer place to write unverified binaries to anyway.

If you like I would send a pull-request 😄

Upon trying to install `abra` with the recommended script `install.abra.coopcloud.tech` on one machine it erred out with a permissions error: ``` downloading 0.8.1-beta linux_x86_64 binary release for abra... /home/user/.local/bin/.abra-download: Read-only file system ... ``` After debugging that machine, the reason was `wget` was executed through a [firejail](https://firejail.wordpress.com) which by default mounts `~/.local/bin/` as read-only. The following [simple patch](https://git.coopcloud.tech/basebuilder/abra/commit/12a55518791d1bbf5ee427768e8c704ff874ed18) which writes to `/tmp` addresses machines with similar setups. This might (I am not a security expert) be safer place to write unverified binaries to anyway. If you like I would send a pull-request 😄

❤️ 1

basebuilder added the

bug

label 2024-01-16 16:48:45 +00:00

decentral1se commented

2024-01-17 22:51:51 +00:00

LGTM @basebuilder 🫶

👍 1

decentral1se commented

2024-01-24 15:13:11 +00:00

coop-cloud/abra#402

https://git.coopcloud.tech/coop-cloud/abra/pulls/402