geerlingguy / ansible-role-gitlab

Ansible Role - GitLab

Home Page:https://galaxy.ansible.com/geerlingguy/gitlab/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Issue running the GitLab provided install script on a CIS hardened Ubuntu Pro install

ianburrowes opened this issue · comments

Hi Jeff,

After applying the CIS hardening scripts to Ubuntu Pro the default umask changes to user read only (instead of read all). As a result, the GitLab provided install script adds the GitLab PGP key for the apt repository with insufficient permissions. To run the script successfully you need to ensure the umask is all read before the script runs. Patch incoming!

Had the same issue on an Ubuntu AMI from the CIS foundation, was fixed by @ianburrowes PR. Thanks bud!

commented

This issue has been marked 'stale' due to lack of recent activity. If there is no further activity, the issue will be closed in another 30 days. Thank you for your contribution!

Please read this blog post to see the reasons why I mark issues as stale.

commented

This issue has been closed due to inactivity. If you feel this is in error, please reopen the issue or file a new issue with the relevant details.