mysticalsoap/docker
Watch
1
0
Fork
You've already forked docker
 0
Code Issues 35 Pull requests 6 Wiki Activity Actions

docs: sudo -u apps needs absolute paths #305

Closed
mysticalsoap wants to merge 1 commit from docs/secrets-abs-paths into trunk
pull from: docs/secrets-abs-paths
merge into: mysticalsoap:trunk
Conversation 0 Commits 1 Files changed 1 +2
mysticalsoap commented 2026-09-21 00:25:44 -04:00
Owner
Copy link

Problem

Secrets.md shows sudo -u apps ... cp infra/...-style commands. Run from a home directory, they fail with Permission denied on the source path: apps cannot enter $HOME, so the relative path dies before the file is checked. Looks like a permissions problem on the repo.

Fix

One paragraph next to the existing tee note: use absolute paths in anything run as apps, and why.

Verification

Reproduced: sudo -u apps sh -c "cp infra/wireguard/wg0.conf.example ..." from ~ fails, the same with /opt/docker/... paths succeeds; the source is 644 in a 755 dir.

## Problem Secrets.md shows `sudo -u apps ... cp infra/...`-style commands. Run from a home directory, they fail with `Permission denied` on the source path: `apps` cannot enter `$HOME`, so the relative path dies before the file is checked. Looks like a permissions problem on the repo. ## Fix One paragraph next to the existing `tee` note: use absolute paths in anything run as `apps`, and why. ## Verification Reproduced: `sudo -u apps sh -c "cp infra/wireguard/wg0.conf.example ..."` from `~` fails, the same with `/opt/docker/...` paths succeeds; the source is `644` in a `755` dir.
docs: sudo -u apps needs absolute paths
All checks were successful
validate / validate (pull_request) Successful in 23s
Details
4565bcda5b
 
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
mysticalsoap closed this pull request 2026-09-21 00:29:27 -04:00
All checks were successful
validate / validate (pull_request) Successful in 23s
Required
Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
audit-work
Security enhancements coming out of an audit of the stack

  
bug
Something is broken

  
docs
Wiki, in-repo docs, comments

  
general-admin
Learning, refinement, and housekeeping

  
major-upgrade
Major-version bump, review carefully

  
needs-vps-sync

   
new-service
Adding a new service to the stack

  
on-hold
Deliberately parked, not ready to start

  
outside-work
Not part of the stack itself, tracked here anyway

  
post-podman
Suited to after the Podman migration

  
renovate
Opened by renovate-bot

  
upstream
Needs an issue or PR on someone else's project

  
vps
Work on the VPS rather than the homelab

No labels
audit-work
bug
docs
general-admin
major-upgrade
needs-vps-sync
new-service
on-hold
outside-work
post-podman
renovate
upstream
vps
Milestone
Clear milestone
No items
No milestone
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
mysticalsoap/docker!305
No description provided.