toolshed/organising
7
1
Fork 0
Code Issues 100 Pull Requests Releases Activity

Abra installer fails with some security setups #552

New Issue
Closed
opened 2024-01-16 16:48:45 +00:00 by basebuilder · 2 comments
basebuilder commented 2024-01-16 16:48:45 +00:00
Copy Link

Upon trying to install abra with the recommended script install.abra.coopcloud.tech on one machine it erred out with a permissions error:

downloading 0.8.1-beta linux_x86_64 binary release for abra...
/home/user/.local/bin/.abra-download: Read-only file system
...

After debugging that machine, the reason was wget was executed through a firejail which by default mounts ~/.local/bin/ as read-only. The following simple patch which writes to /tmp addresses machines with similar setups. This might (I am not a security expert) be safer place to write unverified binaries to anyway.

If you like I would send a pull-request 😄

Upon trying to install `abra` with the recommended script `install.abra.coopcloud.tech` on one machine it erred out with a permissions error: ``` downloading 0.8.1-beta linux_x86_64 binary release for abra... /home/user/.local/bin/.abra-download: Read-only file system ... ``` After debugging that machine, the reason was `wget` was executed through a [firejail](https://firejail.wordpress.com) which by default mounts `~/.local/bin/` as read-only. The following [simple patch](https://git.coopcloud.tech/basebuilder/abra/commit/12a55518791d1bbf5ee427768e8c704ff874ed18) which writes to `/tmp` addresses machines with similar setups. This might (I am not a security expert) be safer place to write unverified binaries to anyway. If you like I would send a pull-request 😄
❤️ 1
basebuilder added the
bug
 label 2024-01-16 16:48:45 +00:00
decentral1se commented 2024-01-17 22:51:51 +00:00
Owner
Copy Link

LGTM @basebuilder 🫶

LGTM @basebuilder 🫶
👍 1
decentral1se commented 2024-01-24 15:13:11 +00:00
Owner
Copy Link

coop-cloud/abra#402

https://git.coopcloud.tech/coop-cloud/abra/pulls/402
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
abra
Everything to do with abra
abra-gandi
Abra Gandi plugin
awaiting-feedback
Ping/pong on comms
backups
bug
Something is not working
build
Go build related issues
ci/cd
Getting the robots into the mix
community organising
Opening this thing up
contributing
Contributors stuff
coopcloud.tech
Our main website
democracy
Democratic decision making
design
Design thinking required
documentation
Let's write things together
duplicate
This issue or pull request already exists
enhancement
New feature
finance
Money things
funding
Anything related to grant funding
good first issue
Easy start with development
help wanted
Need some help
installer
Installation related issues
kadabra
performance
Performance related
proposal
Large change which requires feedback & decisin making
question
More information is needed
recipes.coopcloud.tech
Our recipes catalogue
security
Securing our shit
test
Unit or integration test suite
wontfix
This won't be fixed
No Label
bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
3wordchant aadil abra-bot ammaratef45 Apfelwurm carla cas coopcloud cyrnel decentral1se fauno iexos jade jmakdah2 joe-irving kawaiipunk knoflook kolaente lambdabundesverband linnealovespie moritz notplants p4u1 pharaohgraphy renovate-bot ripclap simon sixsmith trav val yksflip
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: toolshed/organising#552
No description provided.
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?