Syncthing unable to replicate all of stage/composer files

Description

Due to permissions issues, Syncthing is unable to replicate the stage and composer related files.

After a quick discussion with it has been decided to move stage and composer to be running with `cfyuser` instead of `stage_user` and `composer_user`

Steps to Reproduce

Environment:
OS (CLI), HA cluster, cloud provider
------------------------------------

Steps to reproduce:
------------------
1. Start cluster with 2 managers at least
2. Run: `journalctl -u cloudify-syncthing`
3. Look for `permissions` errors

Expected result:
---------------

Actual result:
-------------

Why Propose Close?

None

Activity

Show:
Ohad Baruch
October 29, 2019, 2:43 PM

Actually some files inside the Composer and Stage directories do not replicate due to permissions issues.

If you create a cluster with 2>= nodes you will see errors in journalctl -u cloudify-syncthing regarding permissions in these directories.

Barak Azulay
October 29, 2019, 4:31 PM

can you give me one file for example ? and what is the error when you try to do the operation manually under the same credentials as synchthing ?

Ohad Baruch
November 5, 2019, 12:15 PM
Edited

I added a screenshot with the relevant folders.
(Except for the db_ca.crt files, I excluded them from Syncthing replication)

Barak Azulay
November 5, 2019, 3:13 PM
Edited

please discuss this item with

please note that the aim of the patches is to remove stage_user, stage_group , composer_user & composer_group entirely from our systems and all services are left running with cfyuser.

Barak Azulay
December 9, 2019, 9:37 AM

This is too risky at this point in time to move all services to run under cfyuser,

Hence moving this Jira to 5.1

Assignee

Łukasz Maksymczuk

Reporter

Ohad Baruch

Labels

None

Severity

Critical

Target Version

5.1

Premium Only

yes

Found In Version

5.0

QA Owner

None

Bug Type

legacy bug

Customer Encountered

No

Customer Name

None

Release Notes

yes

Priority

High

Epic Link

Priority

Blocker
Configure