Examples: query, "exact match", wildcard*, wild?ard, wild*rd
Fuzzy search: cake~ (finds cakes, bake)
Term boost: "red velvet"^4, chocolate^2
Field grouping: tags:(+work -"fun-stuff")
Escaping: Escape characters +-&|!(){}[]^"~*?:\ with \, e.g. \+
Range search: properties.timestamp:[1587729413488 TO *] (inclusive), properties.title:{A TO Z}(excluding A and Z)
Combinations: chocolate AND vanilla, chocolate OR vanilla, (chocolate OR vanilla) NOT "vanilla pudding"
Field search: properties.title:"The Title" AND text
Answered
Hi, Currently It Seems That Trains-Agent Writes Files With The User "Nobody", Group "Nogroup" And Permissions 777 To Created Files. How Can I Change That? To The Very Least, Change The User Group It Uses? Running On Linux Ubuntu

Hi, Currently it seems that trains-agent writes files with the user "nobody", group "nogroup" and permissions 777 to created files. How can I change that? to the very least, change the user group it uses? Running on linux ubuntu

  
  
Posted 3 years ago
Votes Newest

Answers 30


If I'd be exact that's a trains agent task that creates in a new subprocess another trains agent task

  
  
Posted 3 years ago

They all "inherit" the same user / environment from one another

  
  
Posted 3 years ago

Well the original task is run with my user

  
  
Posted 3 years ago

So I'd guess they would inherit my user as well

  
  
Posted 3 years ago

correct

  
  
Posted 3 years ago

But that's not the case

  
  
Posted 3 years ago

Could you maybe check this?

  
  
Posted 3 years ago

Run a remote task with trains agent that would create inside another task that would again run remotely as well and check the permissions of the second task created file?

  
  
Posted 3 years ago

The agent cannot use another user (it literally has no way of getting credentials). I suspect this is all a by product of the actual mount point)

  
  
Posted 3 years ago

So what can I do?

  
  
Posted 3 years ago

create inside another task that would again run remotely

This Task will be run on another node, user / permissions will be dealt with by the agent on the other node running the Task

  
  
Posted 3 years ago

Changing the mountpoint for the agent is not possible

  
  
Posted 3 years ago

For me

  
  
Posted 3 years ago

You cannot change the user once you have mount the shared folder with wither CIFS or NFS

  
  
Posted 3 years ago

This is an OS restriction 😞

  
  
Posted 3 years ago

SmarmySeaurchin8 what's the mount command you are using?

  
  
Posted 3 years ago

mountpoint -q A && echo "" || mount B A

  
  
Posted 3 years ago

what does mount -a return ?

  
  
Posted 3 years ago

Well nothing special, asks for password for some mounts, but not the one discussed, I am also required to run mount -a via root.

  
  
Posted 3 years ago

My bad I meant the output of mount

  
  
Posted 3 years ago

Well nothing special, only says it's nfs version 3

  
  
Posted 3 years ago

nfs version 3

That's the thing, NFS will automatically set file access and flags based on the mount options you cannot change them post mount.
How about creating a new user just for the agent, it makes sense from security / credentials perspective

  
  
Posted 3 years ago

Sounds interesting. In that case, how could I configure the agent to use such user?

  
  
Posted 3 years ago

You actually have to login/ssh under said user, have another dedicated mountpoint and spin the agent from that user.

  
  
Posted 3 years ago

Hmm, could this happen because I bring the agent up through crontab on reboot then? (with sudo crontab -e)

  
  
Posted 3 years ago

Yes, it could, crontab uses the user it is running from (root if used with sudo)

  
  
Posted 3 years ago

If that's so, why would root cause the user to become nobody with group nogroup?

  
  
Posted 3 years ago

I'm not sure I fully follow

  
  
Posted 3 years ago

why would root cause the user to become nobody with group nogroup?

It is exactly the case, they inherit the cron service user (uid/gid) which would look like nobody/nogroup

  
  
Posted 3 years ago

I see. Let me try that and get back to you

  
  
Posted 3 years ago
964 Views
30 Answers
3 years ago
one year ago
Tags