Skip to content

non-root start for nginx or rserver process #519

@sebampuero

Description

@sebampuero

Hello
So I was thinking about the fact that the rserver-http which is based on nginx listens on port 8787 but runs as root. I havent find any way of running the rserver-http as non-root only, not even for the main workbench process rserver. I have tried running the rserver process as non-root by modifying the startup.sh file but that comes with other errors such as pam sessions not working and rstudio-launcher throwing these messages:

2024-05-30T14:20:34.863624Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/user]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:35.390795Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/user]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:36.396094Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/user]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:38.400983Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/user]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:42.407444Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/user]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:42.462144Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/jobs?fields=Status,tags&status=Pending|Running]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:42.574728Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/jobs?fields=Status,tags&status=Pending|Running]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:42.866322Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/jobs?fields=Status,tags&status=Pending|Running]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:43.461626Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/jobs?fields=Status,tags&status=Pending|Running]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:46.463619Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/jobs?fields=Status,tags&status=Pending|Running]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:47.414316Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/user]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:47.465908Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/jobs?fields=Status,tags&status=Pending|Running]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:49.461432Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/jobs?fields=Status,tags&status=Pending|Running]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:52.465742Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/jobs?fields=Status,tags&status=Pending|Running]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373
2024-05-30T14:20:52.465751Z [rstudio-launcher] ERROR No authorization provided for request [requestMethod: GET, requestUri: /v1/user]; LOGGED FROM: void rstudio::job_launcher::Server::onApiRequest(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>) src/cpp/job_launcher/LauncherServer.cpp:373

Is there a way to make the rserver-http process start as non-root? or even the rserver process? what configurations are needed?

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions