Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Refactor EOSFS to use cbox / daemon instead of root #4977

Merged
merged 4 commits into from
Dec 10, 2024
Merged

Conversation

jessegeens
Copy link
Contributor

@jessegeens jessegeens commented Nov 28, 2024

Currently, the EOS drivers use root authentication for many different operations. This has now been changed to use one of the following, depending on the operation:

  • cbox, which is a sudo'er
  • daemon, for read-only operations
  • the user himselft

Note that home creation was tackled in sub-PR #4984

Copy link

update-docs bot commented Nov 28, 2024

Thanks for opening this pull request! The maintainers of this repository would appreciate it if you would create a changelog item based on your changes.

@jessegeens jessegeens force-pushed the fix/stat-as-daemon branch 6 times, most recently from a0fec9d to 70234b6 Compare November 29, 2024 09:33
@jessegeens jessegeens marked this pull request as ready for review December 3, 2024 09:28
pkg/eosclient/eosgrpc/eosgrpc.go Show resolved Hide resolved
pkg/eosclient/eosgrpc/eosgrpc.go Show resolved Hide resolved
pkg/eosclient/eosgrpc/eosgrpc.go Outdated Show resolved Hide resolved
pkg/eosclient/eosgrpc/eosgrpc.go Show resolved Hide resolved
pkg/eosclient/eosgrpc/eosgrpc.go Outdated Show resolved Hide resolved
pkg/eosclient/eosgrpc/eoshttp.go Show resolved Hide resolved
pkg/storage/utils/eosfs/eosfs.go Show resolved Hide resolved
pkg/utils/utils.go Show resolved Hide resolved
@jessegeens jessegeens force-pushed the fix/stat-as-daemon branch 5 times, most recently from 53aeb51 to 21135ae Compare December 9, 2024 12:52
* We now do not use root anymore in eos-grpc, but use the user, daemon or cbox
* Bugfix: when EOS token is provided, pass this on in the gRPC request
* For creating version folders, we impersonate the owner
* Some restructuring
changelog/unreleased/rootless-auth.md Show resolved Hide resolved
pkg/eosclient/eosgrpc/eosgrpc.go Outdated Show resolved Hide resolved
pkg/storage/utils/eosfs/eosfs.go Show resolved Hide resolved
…gic to script

* Replaced home creation function with external script
* Removed shadow namespace and related code
* eosfs: also removed user quota logic, externalized to the create_home_hook script
@jessegeens jessegeens force-pushed the fix/stat-as-daemon branch 2 times, most recently from 876ccd6 to 930fefe Compare December 10, 2024 09:58
@diocas diocas merged commit 1973726 into master Dec 10, 2024
14 of 15 checks passed
@diocas diocas deleted the fix/stat-as-daemon branch December 10, 2024 10:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants