Skip to content

[#590] Fallback to $HOME/tmp dir as a temp if instance root is mounted as noexec #591

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
maximthomas wants to merge 6 commits into
base: master
Choose a base branch
from
Open

[#590] Fallback to $HOME/tmp dir as a temp if instance root is mounted as noexec #591

Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
93bface
Fallback to $HOME/tmp dir as a temp if instance root is mounted as no…
maximthomas Feb 10, 2026
86db5b5
Add a file execution possibility check
maximthomas Feb 11, 2026
166ffb9
Add a temporary file execution possibility check for tmp directory
maximthomas Feb 13, 2026
2922dc1
update copyright
maximthomas Feb 13, 2026
49c2bde
try switching to $HOME for org.bouncycastle.native.loader.install_dir
vharseko Feb 19, 2026
7b98f26
set bc_dir move to a separate function
maximthomas Feb 19, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
58 changes: 56 additions & 2 deletions opendj-server-legacy/resource/bin/_script-util.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@
#
# Copyright 2008-2010 Sun Microsystems, Inc.
# Portions Copyright 2010-2016 ForgeRock AS.
# Portions Copyright 2019-2025 3A Systems, LLC.
# Portions Copyright 2019-2026 3A Systems, LLC.
#
# Display an error message
#
Expand Down Expand Up @@ -83,8 +83,62 @@ set_opendj_java_bin() {
export OPENDJ_JAVA_BIN
}

check_noexec() { #returns 0 if can execute files in the directory, otherwise 1
local DIR_TO_TEST=$1
local res=0
local remove_dir=0

if [ ! -d "${DIR_TO_TEST}" ]; then
remove_dir=1
mkdir ${DIR_TO_TEST}
fi

local TMP_FILE=`mktemp ${DIR_TO_TEST}/temp.XXXXXX`

chmod +x ${TMP_FILE}
if ! ${TMP_FILE} 2>/dev/null; then
res=1
fi

rm -rf ${TMP_FILE}

if [ $remove_dir = 1 ]; then
rm -rf $DIR_TO_TEST
fi

return $res
}

set_bc_dir() {
if echo "$OPENDJ_JAVA_ARGS" | grep -q -o "\-Dorg.bouncycastle.native.loader.install_dir=[^ ]*"; then
return # bc install dir already set
fi

check_noexec "${OPENDJ_TMP_DIR}"
local res=$?
if [ $res = 1 ]; then
if [ "$SCRIPT_NAME" = "setup" ]; then
echo "WARNING: $OPENDJ_TMP_DIR is mounted as noexec, try switching to $HOME for org.bouncycastle.native.loader.install_dir"
fi
check_noexec "${HOME}"
res=$?
if [ $res = 0 ]; then
OPENDJ_JAVA_ARGS="${OPENDJ_JAVA_ARGS} -Dorg.bouncycastle.native.loader.install_dir=${HOME}"
elif [ "$SCRIPT_NAME" = "setup" ]; then
echo "WARNING: $HOME is mounted as noexec, the OpenDJ installation could cause errors"
fi
fi
}

set_temp_dir() {

if echo "$OPENDJ_JAVA_ARGS" | grep -q -o "\-Djava.io.tmpdir=[^ ]*"; then
OPENDJ_TMP_DIR=$(echo "$OPENDJ_JAVA_ARGS" | grep -o "\-Djava.io.tmpdir=[^ ]*" | cut -d'=' -f2)
return # temp dir already set
fi

OPENDJ_TMP_DIR="${INSTANCE_ROOT}/tmp"

if [ ! -d "${OPENDJ_TMP_DIR}" ]; then
mkdir ${OPENDJ_TMP_DIR}
fi
Expand All @@ -110,6 +164,7 @@ set_java_home_and_args() {
fi
fi
set_temp_dir
set_bc_dir
set_opendj_java_bin
}

Expand Down Expand Up @@ -333,4 +388,3 @@ elif test "${SCRIPT_UTIL_CMD}" = "test-java"
then
test_java
fi