Bug 57534 - matrix-synapse: некорректные права на /etc/synapse
Summary: matrix-synapse: некорректные права на /etc/synapse
Status: NEW
Alias: None
Product: Sisyphus
Classification: Development
Component: matrix-synapse (show other bugs)
Version: unstable
Hardware: x86_64 Linux
: P5 normal
Assignee: Vitaly Lipatov
QA Contact: qa-sisyphus
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2026-01-18 22:33 MSK by Alexander Makeenkov
Modified: 2026-01-18 22:33 MSK (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Alexander Makeenkov 2026-01-18 22:33:53 MSK
Версия:
matrix-synapse-1.129.0-alt1.x86_64

Сервис падает с ошибкой:
systemd[1]: Started matrix-synapse.service - Synapse Matrix homeserver.
python3[1649]: /usr/lib64/python3/site-packages/synapse/config/_base.py:49: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81.
python3[1649]:   import pkg_resources
python3[1649]: Traceback (most recent call last):
python3[1649]:   File "<frozen runpy>", line 198, in _run_module_as_main
python3[1649]:   File "<frozen runpy>", line 88, in _run_code
python3[1649]:   File "/usr/lib64/python3/site-packages/synapse/app/homeserver.py", line 419, in <module>
python3[1649]:     main()
python3[1649]:     ~~~~^^
python3[1649]:   File "/usr/lib64/python3/site-packages/synapse/app/homeserver.py", line 409, in main
python3[1649]:     hs = setup(sys.argv[1:])
python3[1649]:   File "/usr/lib64/python3/site-packages/synapse/app/homeserver.py", line 318, in setup
python3[1649]:     config = HomeServerConfig.load_or_generate_config(
python3[1649]:         "Synapse Homeserver", config_options
python3[1649]:     )
python3[1649]:   File "/usr/lib64/python3/site-packages/synapse/config/_base.py", line 833, in load_or_generate_config
python3[1649]:     obj.generate_missing_files(config_dict, config_dir_path)
python3[1649]:     ~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
python3[1649]:   File "/usr/lib64/python3/site-packages/synapse/config/_base.py", line 880, in generate_missing_files
python3[1649]:     self.invoke_all("generate_files", config_dict, config_dir_path)
python3[1649]:     ~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
python3[1649]:   File "/usr/lib64/python3/site-packages/synapse/config/_base.py", line 443, in invoke_all
python3[1649]:     res[config_class.section] = getattr(config, func_name)(*args, **kwargs)
python3[1649]:                                 ~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^
python3[1649]:   File "/usr/lib64/python3/site-packages/synapse/config/key.py", line 309, in generate_files
python3[1649]:     with open(
python3[1649]:          ~~~~^
python3[1649]:         signing_key_path, "w", opener=lambda p, f: os.open(p, f, mode=0o640)
python3[1649]:         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
python3[1649]:     ) as signing_key_file:
python3[1649]:     ^
python3[1649]:   File "/usr/lib64/python3/site-packages/synapse/config/key.py", line 310, in <lambda>
python3[1649]:     signing_key_path, "w", opener=lambda p, f: os.open(p, f, mode=0o640)
python3[1649]:                                                ~~~~~~~^^^^^^^^^^^^^^^^^^
python3[1649]: PermissionError: [Errno 13] Permission denied: '/etc/synapse/my.matrix.test.signing.key'
python3[1649]: Generating signing key file /etc/synapse/my.matrix.test.signing.key
systemd[1]: matrix-synapse.service: Main process exited, code=exited, status=1/FAILURE
systemd[1]: matrix-synapse.service: Failed with result 'exit-code'.


Права на директорию:
# stat /etc/synapse
  Файл: /etc/synapse
  Размер: 4             Блоков: 1          Блок В/В: 131072 каталог
Устройство: 0/46        Инода: 96043       Ссылки: 2
Доступ: (0755/drwxr-xr-x)  Uid: (    0/    root)   Gid: (    0/    root)


Сервис работает от пользователя _synapse:
# systemctl cat matrix-synapse | grep -E "User|Group"
User=_synapse
Group=_synapse

Решение:
# chown _synapse:_synapse /etc/synapse