Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

non-root start for nginx or rserver process #519

Open
sebampuero opened this issue May 31, 2024 · 0 comments
Open

non-root start for nginx or rserver process #519

sebampuero opened this issue May 31, 2024 · 0 comments

Comments

@sebampuero
Copy link

Hello
So I was thinking about the fact that the rserver-http which is based on nginx listens on port 8787 but runs as root. I havent find any way of running the rserver-http as non-root only, not even for the main workbench process rserver. I have tried running the rserver process as non-root by modifying the startup.sh file but that comes with other errors such as pam sessions not working and rstudio-launcher throwing these messages:

2024-05-30T14:20:34.863624Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/user]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:35.390795Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/user]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:36.396094Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/user]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:38.400983Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/user]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:42.407444Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/user]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:42.462144Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/jobs?fields=Status,tags&status=Pending|Running]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:42.574728Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/jobs?fields=Status,tags&status=Pending|Running]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:42.866322Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/jobs?fields=Status,tags&status=Pending|Running]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:43.461626Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/jobs?fields=Status,tags&status=Pending|Running]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:46.463619Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/jobs?fields=Status,tags&status=Pending|Running]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:47.414316Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/user]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:47.465908Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/jobs?fields=Status,tags&status=Pending|Running]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:49.461432Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/jobs?fields=Status,tags&status=Pending|Running]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:52.465742Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/jobs?fields=Status,tags&status=Pending|Running]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:52.465751Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/user]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373

Is there a way to make the rserver-http process start as non-root? or even the rserver process? what configurations are needed?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant