opensearch wrong permissions

[Lukas Fichtner]

The opensearch file permissions still seems to be wrong. Is this a general problem or am I the only one with this problem?
issue from the last patch: https://bugs.launchpad.net/kolla-ansible/+bug/2020152
last patch: https://opendev.org/openstack/kolla-ansible/commit/a3bbf3399bcff4e0089e189b2988c01da280650f

How to reproduce:
Install the latest Version with "pip3 install --upgrade git+https://opendev.org/openstack/kolla-ansible@stable/2023.1"
deploy/reconfigure with kolla-ansible

warning messages:
https://paste.opendev.org/show/bC7trEauLd93b9osSQQi/

current file permissions:
https://paste.opendev.org/show/b853xDI5mOLeKwRaGokf/

[Sven Kieske (s-kieske)]

that's weird, afaik this permission get set upstream here:

https://github.com/opensearch-project/OpenSearch/blob/611ecc2ad50c7e1833e7fe8ef2a6cabeb6028c57/distribution/packages/build.gradle#L216C15-L216C20

```
    from("${packagingFiles}") {
      dirMode 02750
      into('/etc')
```

dirMode should be calculated - speculating here, because I don't know much about gradles usage of the "ospackage" lib here and how that works - like chmod manpage[0] claims:

 S_ISGID (02000)
              set-group-ID (set process effective group ID on execve(2);
              mandatory locking, as described in fcntl(2); take a new
              file's group from parent directory, as described in
              chown(2) and mkdir(2))

so it set's the groupid bit then rwx bits for the user and read and execute bits for the group.

So this seems to be a failure upstream I suppose, but will investigate further.

[0]: https://man7.org/linux/man-pages/man2/chmod.2.html

[Sven Kieske (s-kieske)]

opened upstream issue:

https://github.com/opensearch-project/OpenSearch/issues/8821

[Sven Kieske (s-kieske)]

there is already another open issue upstream which might be related and which is being worked on:

https://github.com/opensearch-project/opensearch-build/issues/3815

[Sven Kieske (s-kieske)]

this should hopefully be fixed by: https://github.com/opensearch-project/opensearch-build/pull/3898 which should surface in the next upstream releases.

[Sven Kieske (s-kieske)]

marking this as "invalid" (not really sure tbh if this is the correct status), as this is fixed upstream. I wish there was a status of "fixed upstream".