Skip to content
Unverified Commit 5e974362 authored by Silvan Mosberger's avatar Silvan Mosberger
Browse files

nixos/couchdb: Prevent it from chowning /var/log to couchdb:couchdb

The default for logFile is /var/log/couchdb.log, and the tmpfile rules chown
${dirOf cfg.logFile}, which is just /var/log, to couchdb:couchdb.

This was found by Edes' report on IRC, which looked like

    Detected unsafe path transition /var/log → /var/log/journal during canonicalization of /var/log/journal

While this bug has been present since the initial couchdb module in
62438c09 by @garbas, this wasn't a
problem, because the initial module only created and chowned /var/log
if it didn't exist yet, which can't occur because this gets created in
the initial phases of NixOS startup.

However with the recent move from manual preStart chown scripts to
systemd.tmpfiles.rules in 062efe01 (#59389),
this chown is suddenly running unconditionally at every system
activation, therefore triggering the above error.
parent 4ec8edaa
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment