[Qa-jenkins-scm] [Git][qa/jenkins.debian.net][master] reproducible maintenance: automatically fix unreadable kernel issues (on ubuntu nodes)

[Holger Levsen (@holger)]

Holger Levsen pushed to branch master at Debian QA / jenkins.debian.net


Commits:
a61ed3ca by Holger Levsen at 2023-06-01T12:43:29+02:00
reproducible maintenance: automatically fix unreadable kernel issues (on ubuntu nodes)

Signed-off-by: Holger Levsen <holger at layer-acht.org>

- - - - -


3 changed files:

- bin/reproducible_maintenance.sh
- hosts/common/etc/sudoers.d/jenkins
- hosts/ionos9-amd64/etc/sudoers.d/jenkins


Changes:

=====================================
bin/reproducible_maintenance.sh
=====================================
@@ -800,6 +800,14 @@ if [ -n "$BADPERMS" ] ; then
     echo
 fi
 
+# find kernels we cannot read and fix that
+BADPERMS=$(find /boot/vmlinuz-* ! -perm 644)
+if [ -n "$BADPERMS" ] ; then
+    echo "Fixing kernel permissions:"
+    echo $BADPERMS
+    sudo chmod +r /boot/vmlinuz-*
+fi
+
 # daily mails
 if [ "$HOSTNAME" = "$MAINNODE" ] && [ $(date -u +%H) -eq 0 ]  ; then
 	# once a day, send mail about builder problems


=====================================
hosts/common/etc/sudoers.d/jenkins
=====================================
@@ -66,7 +66,8 @@ jenkins ALL=  \
 	/usr/sbin/slay 1111, \
 	/usr/sbin/slay 2222, \
 	/usr/sbin/slay jenkins, \
-	/bin/chmod -R a+rX /var/lib/libvirt/images
+	/bin/chmod -R a+rX /var/lib/libvirt/images, \
+	/bin/chmod +r /boot/vmlinuz-*
 
 # keep these environment variables
 Defaults        env_keep += "http_proxy", env_reset


=====================================
hosts/ionos9-amd64/etc/sudoers.d/jenkins
=====================================
@@ -10,7 +10,8 @@ jenkins ALL=  \
 	/usr/sbin/slay 1111, \
 	/usr/sbin/slay 2222, \
 	/usr/sbin/slay jenkins, \
-	/usr/bin/apt-get update
+	/usr/bin/apt-get update, \
+	/bin/chmod +r /boot/vmlinuz-*
 
 # keep these environment variables
 Defaults        env_keep += "http_proxy", env_reset



View it on GitLab: https://salsa.debian.org/qa/jenkins.debian.net/-/commit/a61ed3ca377a434b68c57b76da8c593d5b8569f7

-- 
View it on GitLab: https://salsa.debian.org/qa/jenkins.debian.net/-/commit/a61ed3ca377a434b68c57b76da8c593d5b8569f7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/qa-jenkins-scm/attachments/20230601/a6ce6cd8/attachment-0001.htm>