openSUSE admin

Overview
Activity
Roadmap
Issues
Calendar
News
Files
Repository

Custom queries

Events of the openSUSE Heroes
my assigned stuff
obs-admin-tickets
openQA Infrastructure Project
openqa-review - Closed tickets last updated by openqa-review, last 30 days
QA roadmap long-term
QA SLE functional
QA SLE Functional - closed in last 14 days
QA SLE Functional - High, need to be refined
QA SLE Functional - over cycle time median
QA SLE u
QA SLE y
QA tools (tag not necessary in openQA and subprojects)
QA tools tag (tag not necessary in openQA and subprojects; excluding tickets in "Ready" version as they are already on the backlog)
QAC - Backlog
QE tools team - backlog (dev)
QE tools team - backlog (ready issues)
QE tools team - backlog SLA high
QE tools team - backlog SLA immediate
QE tools team - backlog SLA no immediate/urgent in feedback/blocked
QE tools team - backlog SLA normal
QE tools team - backlog SLA urgent
QE tools team - backlog SLO high
QE tools team - backlog SLO normal
QE tools team - backlog SLO urgent
QE tools team - backlog, high-level view (epics and higher)
QE tools team - backlog, non-reactive work, needs parent
QE tools team - backlog, top-level view (all sagas)
QE tools team - closed within last 14 days
QE tools team - closed within last 60 days
QE tools team - closed yesterday
QE Tools Team - Collaborative Session
QE tools team - due date forecast
QE tools team - exceeding due-date
QE tools team - infrastructure backlog
QE tools team - next - sorted by update time
QE tools team - next issues
QE tools team - non-estimated (unblocked) issues (dev)
QE tools team - non-estimated (unblocked) issues (infra)
QE tools team - ready issues - Workable
QE tools team - ready, not assigned/blocked/low
QE tools team - SLO high forecast
QE tools team - update forecast
QE tools team - updated by priority
QE tools team - what members of the team are working on - Feedback (not-low)
QE Tools Team Backlog By Assignee
Tools Team Retrospective
Tools Team Retrospective (not estimated or assigned)

Actions

Copy link

tickets #166181

closed

Discourse shows an error when trying to update the theme

Added by hellcp about 2 months ago. Updated about 2 months ago.

Status:

Resolved

Priority:

Normal

Assignee:

crameleon

Category:

Forum

Target version:

Start date:

2024-09-02

Due date:

% Done:

Estimated time:

Description

Errors like the following show up in https://forums.opensuse.org/logs/ whenever I try to hit the Check for updates button on https://forums.opensuse.org/admin/customize/themes/2
Errno::ENOENT (No such file or directory - /tmp/discourse_theme_8ce0dc736ef884236395bbe561c444b7)

Files

0001-Discourse-allow-git-write-tree.patch (1.1 KB) 0001-Discourse-allow-git-write-tree.patch

crameleon, 2024-09-02 21:51

History
Notes
Property changes

Actions

Copy link

Updated by crameleon about 2 months ago

Private changed from Yes to No

Actions

Copy link

Updated by crameleon about 2 months ago

Status changed from New to In Progress
Assignee set to crameleon

At the same time the button is pressed, the following denial is logged:

type=AVC msg=audit(1725313485.688:50250): apparmor="DENIED" operation="exec" class="file" profile="/discourse-apps//timeout" name="/usr/libexec/git/git-write-tree" pid=894289 comm="timeout" requested_mask="x" denied_mask="x" fsuid=470 ouid=0

Actions

Copy link

Updated by crameleon about 2 months ago

File 0001-Discourse-allow-git-write-tree.patch 0001-Discourse-allow-git-write-tree.patch added
Status changed from In Progress to Blocked

# rpm -qf /etc/apparmor.d/discourse
discourse-apparmor-1.3.0+git15.2a11136-1.1.noarch

 ~/W/o/h/apparmor-profiles-nordisch> grep url _service
    <param name="url">https://git.nordisch.org/darix/apparmor-profiles-nordisch.git</param>

There does not seem to be a way to register https://git.nordisch.org/darix/apparmor-profiles-nordisch to submit a patch.

I made the attached patch and will ask @darix to apply it.

For now, I applied it manually on discourse01, and confirmed the update check to be working.

Actions

Copy link