v0.66.0: userdata layout + shared-storage ownership convention

appbackup/userdata.go: EnsureUserdataDir (MkdirAll + explicit setgid Chmod 2775 +
chown gid 1000), UserdataSkeleton, EnsureUserdataSkeleton; linux chown/StatGID +
non-linux stubs. stackEnv injects USERDATA_PATH=<HDD_PATH>/userdata. Skeleton
pre-created on register + FileBrowser sync; deploy belt (composeExecCustomEnv on
'up') pre-creates every ${USERDATA_PATH} bind source. FileBrowser mounts userdata
(was appdata) — uid 1000 can now write into 2775 setgid. #8: migrate merge walk +
copyFile preserve source setgid+group so the convention survives MigrateAll.
Non-hollow tests incl. Linux setgid assertions + migration-preserve companion.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

This commit is contained in:

authentik Default Admin

2026-06-14 21:58:49 +02:00

parent cbaa53f565

commit c48f95fe06

17 changed files with 523 additions and 34 deletions

									
										controller/internal/stacks/deploy.go
									
		+1
		-1
	
												View File
												
				@@ -919,4 +919,4 @@ func randomAlphanumeric(length int) (string, error) {

						result[i] = alphanumChars[n.Int64()]

					}

					return string(result), nil

				}

				}