[chef] Re: Re: More fun with 11.6.0-hotfix.1 and Windows file access

[Brian Anderson < >]

On Fri, Aug 16, 2013 at 2:23 AM, Serdar Sutay < " target="_blank"> > wrote:

Interesting issue... Thanks for sharing... Looks like one of the template is failing while trying to "move" the file (atomic update - a new feature of 11.6). 

A few questions & ideas Brian:

• What is the windows flavor you are working on?

Server 2008 R2 Datacenter Edition (AWS)

 

• Looks like the files are going to "C:". Is the source of the template also on the same drive? 

The source template is part of the cookbook. There is only 1 drive in the system, so the cookbook cache is definitely also on the same drive. 

 

• How is the "/etc/sensu/conf.d/" directory is created?

It's created by Chef. The permissions are specified unix style, but I believe that should work:

[node['sensu']['dir'], node['sensu']['conf_dir'], node['sensu']['ssl_dir'], node['sensu']['log_dir'], node['sensu']['plugin_dir']].each do |dir|
    directory dir do
        action :create
        recursive true
        owner node['sensu']['user']
        group node['sensu']['group']
        mode "0755"
    end
end

 

• • Can you check the ACLs (permissions) on that directory before the run and after a chef-client run?

Before the initial run it doesn't exist. The created directory looks right

Path   : Microsoft.PowerShell.Core\FileSystem::C:\etc\sensu\conf.d

Owner  : AFFECTIVA-X1\Administrator

Group  : BUILTIN\Administrators

Access : Everyone Allow  ReadAndExecute, Synchronize

         BUILTIN\Administrators Allow  ReadAndExecute, Synchronize

         AFFECTIVA-X1\Administrator Allow  Modify, Synchronize

         NT AUTHORITY\SYSTEM Allow  FullControl

         BUILTIN\Administrators Allow  FullControl

         BUILTIN\Users Allow  ReadAndExecute, Synchronize

         BUILTIN\Users Allow  AppendData

         BUILTIN\Users Allow  CreateFiles

         AFFECTIVA-X1\Administrator Allow  FullControl

         CREATOR OWNER Allow  268435456

                                     

 

• Can you try setting atomic_update = false in these resources and see if that works for you? 

I'll make that change now and see how it goes.

To add more complexity to the issue, it is intermittent. Chef-client is running every 30 minutes. Over the course of last night it ran successfully most of the time. There were only 2 failures, at 3:55PM and 4:07PM. Every run after that completed successfully.

Brian