There are inconsistencies bewteen uids on uffizi (nfs server) and the frontends.
For instance, uffizi:/srv/storage/space/backups/prado/postgres is owned by puppet:munin, when the permissions are correct on prado (postgres:postgres).
There are inconsistencies bewteen uids on uffizi (nfs server) and the frontends.
For instance, uffizi:/srv/storage/space/backups/prado/postgres is owned by puppet:munin, when the permissions are correct on prado (postgres:postgres).
Status | Assigned | Task | ||
---|---|---|---|---|
Unknown Object (Maniphest Task) | ||||
Migrated | gitlab-migration | T1 Investigate NFS UID and GID mapping |
Still true as of today:
Rapid check:
ardumont@uffizi:~% id puppet uid=109(puppet) gid=114(puppet) groups=114(puppet) ardumont@uffizi:~% id munin uid=110(munin) gid=115(munin) groups=115(munin) ... ardumont@prado:~% id postgres uid=109(postgres) gid=115(postgres) groups=115(postgres),1002(swhdev),114(ssl-cert),1007(swhbackup)
That would be the reason of the match.
The reason of this behavior is Debian uses dynamic UIDs for most of its system users.
The behavior of uffizi:/srv/storage/space/backups/prado wrt user names/uid mappings is also problematic for Postgres log backups on belvedere.