*: handle PermissionError when saving files, ensure permission bits are set correctly

closes #3817 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
2022-10-19 20:24:28 +02:00
parent c22dae868c
commit 6882445937
4 changed files with 15 additions and 3 deletions
--- a/lifecycle/ak
+++ b/lifecycle/ak
@ -27,8 +27,10 @@ function check_if_root {
        GROUP_NAME=$(getent group $DOCKER_GID | sed 's/:/\n/g' | head -1)
        GROUP="authentik:${GROUP_NAME}"
    fi
-    # Fix permissions of backups and media
+    # Fix permissions of certs and media
    chown -R authentik:authentik /media /certs
+    chmod ug+rwx /media
+    chmod ug+rx /certs
    exec chpst -u authentik:$GROUP env HOME=/authentik $1
 }