Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

controller to run as non root user #155

Open
denniswa opened this issue Oct 29, 2024 · 1 comment
Open

controller to run as non root user #155

denniswa opened this issue Oct 29, 2024 · 1 comment
Assignees
Labels
feature New feature or request

Comments

@denniswa
Copy link

Currently the controller runs as root and that should not be necessary

@olofhagsand olofhagsand added the feature New feature or request label Oct 29, 2024
@JohannesGarm
Copy link
Contributor

Currently this error is thrown when you try to run as a non-root user:

Feb 04 12:39:49 nsolab-02 clixon_backend[916711]: Feb  4 12:39:49.795227: drop_priv_perm:222: uid:1010
Feb 04 12:39:49 nsolab-02 clixon_backend[916711]: Feb  4 12:39:49.795255: drop_priv_perm: 225: UNIX error: setresuid: Operation not permitted
Feb 04 12:39:49 nsolab-02 clixon_backend[916711]: Feb  4 12:39:49.795270: clixon_event_loop: 470: Event error: select: Bad file descriptor
Feb 04 12:39:49 nsolab-02 clixon_backend[916711]: Feb  4 12:39:49.795285: clixon_backend: 916711 Terminated retval:-1
Feb 04 12:39:49 nsolab-02 clixon_backend[916711]: drop_priv_perm: 225: UNIX error: setresuid: Operation not permitted
Feb 04 12:39:49 nsolab-02 clixon_backend[916711]: clixon_event_loop: 470: Event error: select: Bad file descriptor
Feb 04 12:39:49 nsolab-02 clixon_backend[916711]: clixon_backend: 916711 Terminated retval:-1

From Olof on slack:

Its not supported. The problem is you need to access all privileged resources before you drop to a lower privileged level. But the controller opens new resources for example when accessing a new device. This needs some work and has not been done. Til then, it is not supported, you need to run as root.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants