default site config escape hatch path is only writeable by root
Created by: ggilmore
SITE_CONFIG_ESCAPE_HATCH_PATH defaults to /site.config.json. However, only root can write to this file since it lives directly underneath /. This happens to work in both our k8s deployment and sourcegraph/server (we don't use the sourcegraph/alpine image which sets the sourcegraph user) since they both run as root. However, anyone who is using deploy-sourcegraph-docker or has otherwise modified the running user will run into this error message when running the frontend image:
t=2020-01-17T17:11:50+0000 lvl=eror msg="config: failed to write site config file, trying again in 1s" error="open /site-config.json: permission denied"
This issue also prevents the frontend binary from starting.
We need to change the default path to a location that's writeable for both root and the sourcegraph user?
-
/mnt/cache? -
/tmp/? -
/etc/config?