Skip to content

Fix #187: fix redis-session.ini permission denied #752

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
antoinetran wants to merge 6 commits into
base: main
Choose a base branch
from
+34 −2
Open

Fix #187: fix redis-session.ini permission denied #752

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
5de9afb
Fix #187: fix redis-session.ini permission denied
antoinetran Mar 26, 2025
f3dd0a4
Chart.yaml 7.0.1
antoinetran Jul 23, 2025
0b06043
Merge branch 'main' into feature/issue187-fixredispermission_nextcloud7
varet80 Aug 15, 2025
348c710
Chart version 7.0.2
antoinetran Aug 18, 2025
5d14ab8
Fix #187: fix redis-session.ini permission denied (added SCC + rss)
antoinetran Feb 25, 2026
4bcbe1e
Fix #187: fix redis-session.ini permission denied (addd comment fsGroup)
antoinetran Feb 25, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion charts/nextcloud/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
apiVersion: v2
name: nextcloud
version: 7.0.1
version: 7.0.2
Copy link
Collaborator

@varet80 varet80 Jul 23, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you kindly makte it 7.0.1 which is the next release?

Copy link
Contributor Author

@antoinetran antoinetran Jul 23, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done

Copy link
Collaborator

@varet80 varet80 Aug 15, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

7.0.1 is already released, if you can kindly update the number to .2

Copy link
Contributor Author

@antoinetran antoinetran Aug 18, 2025 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Wouldn't it be better in the process if that Chart version was done outside of all branches feature/fix? Like in a dedicated release branch (like gitflow)?

Anyway, done!

# renovate: image=docker.io/library/nextcloud
appVersion: 31.0.7
description: A file sharing server that puts the control and security of your own data back into your hands.
Expand Down
30 changes: 29 additions & 1 deletion charts/nextcloud/templates/deployment.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -270,6 +270,11 @@ spec:
{{- toYaml . | nindent 12 }}
{{- end }}
volumeMounts:
{{- if .Values.redis.enabled }}
- name: php-confd
mountPath: "/usr/local/etc/php/conf.d/redis-session.ini" # fix permission denied error
subPath: redis-session.ini
{{- end }}
{{- include "nextcloud.volumeMounts" . | trim | nindent 12 }}
{{- end }}{{/* end-if cronjob.enabled */}}
{{- with .Values.nextcloud.extraSidecarContainers }}
Expand All @@ -279,7 +284,7 @@ spec:
nodeSelector:
{{- toYaml . | nindent 8 }}
{{- end }}
{{- if or .Values.nextcloud.extraInitContainers .Values.mariadb.enabled .Values.postgresql.enabled }}
{{- if or .Values.nextcloud.extraInitContainers .Values.mariadb.enabled .Values.postgresql.enabled .Values.redis.enabled }}
initContainers:
{{- with .Values.nextcloud.extraInitContainers }}
{{- toYaml . | nindent 8 }}
Expand Down Expand Up @@ -330,6 +335,25 @@ spec:
- "-c"
- "until pg_isready -h ${POSTGRES_HOST} -U ${POSTGRES_USER} ; do sleep 2 ; done"
{{- end }}{{/* end-if any database-initContainer */}}
{{- if .Values.redis.enabled }}
# create empty redis file for nextcloud entrypoint to override it
- name: init-redis-session-ini
# Using the same image as nextcloud to get the same UID to write the configuration.
image: {{ include "nextcloud.image" . }}
command: ['touch', '/usr/local/etc/php/conf.d/redis-session.ini']
{{- with .Values.nextcloud.redisInitContainer }}
resources:
{{- toYaml .resources | nindent 12 }}
{{- end }}
# Reuse the SCC from nextcloud, no need to provide a dedicated SCC for Redis init container.
{{- with .Values.nextcloud.securityContext }}
securityContext:
{{- toYaml . | nindent 12 }}
{{- end }}
volumeMounts:
- name: php-confd
mountPath: "/usr/local/etc/php/conf.d"
{{- end }}{{/* end-if redis init */}}
{{- end }}{{/* end-if any initContainer */}}
{{- with .Values.affinity }}
affinity:
Expand Down Expand Up @@ -373,6 +397,10 @@ spec:
name: {{ template "nextcloud.fullname" . }}-hooks
defaultMode: 0o755
{{- end }}
{{- if .Values.redis.enabled }}
- name: php-confd
emptyDir: {}
{{- end }}
{{- with .Values.nextcloud.extraVolumes }}
{{- toYaml . | nindent 8 }}
{{- end }}
Expand Down
4 changes: 4 additions & 0 deletions charts/nextcloud/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -299,6 +299,7 @@ nextcloud:

# Set securityContext parameters for the entire pod. For example, you may need to define runAsNonRoot directive
podSecurityContext: {}
# fsGroup: 33
# runAsUser: 33
# runAsGroup: 33
# runAsNonRoot: true
Expand All @@ -316,6 +317,9 @@ nextcloud:
# Set postgresql initContainer securityContext parameters. For example, you may need to define runAsNonRoot directive
securityContext: {}

# Settings for the Redis init container that creates a configuration file to address permission issue in some cluster
redisInitContainer:
resources: {}

nginx:
## You need to set an fpm version of the image for nextcloud if you want to use nginx!
Expand Down