Skip to content

multi-client data directory permissions #357

@b0a7

Description

@b0a7

while incorporating vc-nimbus and vc-teku into a multi-client cluster I ran into issues with both related to permissions on the charon-distributed-validator-node/data folder. When starting the stack for the first time, Docker creates the data/ directories as root:root

Permission Requirements for Validator Client Data Directories

Different validator clients have different permission requirements for their data directories:

Nimbus

  • Requires 700 (drwx------) on data directory
  • Must be owned by container UID (1000)

Teku

  • Requires write access to create logs directory
  • May need to be owned by container UID (1000)?

work-around

modify the local charon-distributed-validator-node/data permissions as follows:

# For Nimbus
sudo mkdir -p ./data/vc-nimbus/validators
sudo chown -R 1000:1000 ./data/vc-nimbus
sudo chmod 700 ./data/vc-nimbus
sudo chmod 700 ./data/vc-nimbus/validators

# For Teku
sudo mkdir -p ./data/vc-teku/logs
sudo chown -R 1000:1000 ./data/vc-teku
sudo chmod -R 700 ./data/vc-teku

Metadata

Metadata

Assignees

No one assigned

    Labels

    protocolprotocol team tickets

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions