Skip to content

fix(packaging): init.sh should run buildtsi as influxdb user #26699

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Aug 20, 2025
Merged

fix(packaging): init.sh should run buildtsi as influxdb user #26699

Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
539e19d
fix(packaging): init.sh should run buildtsi as influxdb user
philjb Aug 18, 2025
ae51932
chore: switch from sudo to su; update comment
philjb Aug 18, 2025
b41806e
chore: switch to runuser as the su syntax and debugging is difficult
philjb Aug 18, 2025
9016216
chore: switch to setpriv to avoid PAM
philjb Aug 20, 2025
8524170
chore: update comment to reflect setpriv usage
philjb Aug 20, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 6 additions & 5 deletions .circleci/packages/influxdb/fs/usr/lib/influxdb/scripts/init.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -155,11 +155,12 @@ function start() {
WAL_DIR="$( influxd_config data wal-dir )"
if [[ ( -d "${DATA_DIR}" ) && ( -d "${WAL_DIR}" ) ]]
then
# If this daemon is configured to run as root, influx_inspect hangs
# waiting for confirmation before executing. Supplying "yes" allows
# the service to continue without interruption.
yes | /usr/bin/influx_inspect buildtsi -compact-series-file \
-datadir "${DATA_DIR}" \
# buildtsi prompts with a warning if it is run as root as the files it creates will be owned by root which
# influxd won't be able to read. Best to run it as the influxdb user instead. sudo and su are options but
# difficult to use; setpriv is more direct and available in the util-linux package
echo "Building tsi with influxd_inspect buildtsi."
setpriv --reuid influxdb --regid influxdb --clear-groups /usr/bin/influx_inspect buildtsi -compact-series-file \
-datadir "${DATA_DIR}" \
-waldir "${WAL_DIR}"
fi

Expand Down