mirrors/maddy
1
0
Fork 0
mirror of https://github.com/foxcpp/maddy.git synced 2025-04-04 21:47:40 +03:00
Code Issues Projects Releases Packages Wiki Activity

Make it easier to avoid permission issues when setting up maddy

Browse source 
1. Clarify that you need to manually create the user and group
when building from source. ./build.sh does not do that since
it is a packaging tool, not system configuration one.

2. Do not require "go" command to be present when running
./build.sh install. go installation may be user-specific and
unavailable when running with sudo.

3. Ease UMask restrictions. Allow group access.
This allows CLI commands to be run by any user in maddy group.

See #569.
This commit is contained in:
fox.cpp 2024-01-21 21:57:00 +03:00
parent a2f8916183
commit 28bdf6d33f
No known key found for this signature in database
GPG key ID: 5B991F6215D2FCC0
5 changed files with 32 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

21
build.sh
View file

@ -146,10 +146,23 @@ install() {
# Attempt to install systemd units only for Linux. # Attempt to install systemd units only for Linux.
# Check is done using GOOS instead of uname -s to account for possible # Check is done using GOOS instead of uname -s to account for possible
# package cross-compilation. # package cross-compilation.
if [ "$(go env GOOS)" = "linux" ]; then # Though go command might be unavailable if build.sh is run
command install -m 0755 -d "${destdir}/${prefix}/lib/systemd/system/" # with sudo and go installation is user-specific, so fallback
command install -m 0644 "${builddir}"/systemd/*.service "${destdir}/${prefix}/lib/systemd/system/" # to using uname -s in the end.
fi set +e
if command -v go >/dev/null 2>/dev/null; then
set -e
if [ "$(go env GOOS)" = "linux" ]; then
command install -m 0755 -d "${destdir}/${prefix}/lib/systemd/system/"
command install -m 0644 "${builddir}"/systemd/*.service "${destdir}/${prefix}/lib/systemd/system/"
fi
else
set -e
if [ "$(uname -s)" = "Linux" ]; then
command install -m 0755 -d "${destdir}/${prefix}/lib/systemd/system/"
command install -m 0644 "${builddir}"/systemd/*.service "${destdir}/${prefix}/lib/systemd/system/"
fi
fi
if [ -e "${builddir}"/man ]; then if [ -e "${builddir}"/man ]; then
command install -m 0755 -d "${destdir}/${prefix}/share/man/man1/" command install -m 0755 -d "${destdir}/${prefix}/share/man/man1/"

5
dist/systemd/maddy.service vendored
View file

@ -54,8 +54,9 @@ KillSignal=SIGTERM
AmbientCapabilities=CAP_NET_BIND_SERVICE AmbientCapabilities=CAP_NET_BIND_SERVICE
CapabilityBoundingSet=CAP_NET_BIND_SERVICE CapabilityBoundingSet=CAP_NET_BIND_SERVICE
# Force all files created by maddy to be only readable by it. # Force all files created by maddy to be only readable by it
UMask=0027 # and maddy group.
UMask=0007
# Bump FD limitations. Even idle mail server can have a lot of FDs open (think # Bump FD limitations. Even idle mail server can have a lot of FDs open (think
# of idle IMAP connections, especially ones abandoned on the other end and # of idle IMAP connections, especially ones abandoned on the other end and

5
dist/systemd/maddy@.service vendored
View file

@ -50,8 +50,9 @@ KillSignal=SIGTERM
AmbientCapabilities=CAP_NET_BIND_SERVICE AmbientCapabilities=CAP_NET_BIND_SERVICE
CapabilityBoundingSet=CAP_NET_BIND_SERVICE CapabilityBoundingSet=CAP_NET_BIND_SERVICE
# Force all files created by maddy to be only readable by it. # Force all files created by maddy to be only readable by it and
UMask=0027 # maddy group.
UMask=0007
# Bump FD limitations. Even idle mail server can have a lot of FDs open (think # Bump FD limitations. Even idle mail server can have a lot of FDs open (think
# of idle IMAP connections, especially ones abandoned on the other end and # of idle IMAP connections, especially ones abandoned on the other end and

10
docs/tutorials/building-from-source.md
View file

@ -34,17 +34,19 @@ $ git clone https://github.com/foxcpp/maddy.git
$ cd maddy $ cd maddy
``` ```
3. Select the appropriate version to build: 2. Select the appropriate version to build:
``` ```
$ git checkout v0.7.0 # a specific release $ git checkout v0.7.0 # a specific release
$ git checkout master # next bugfix release $ git checkout master # next bugfix release
$ git checkout dev # next feature release $ git checkout dev # next feature release
``` ```
2. Build & install it 3. Build & install it
``` ```
$ ./build.sh $ ./build.sh
# ./build.sh install $ sudo ./build.sh install
``` ```
3. Have fun! 4. Finish setup as described in [Setting up](../setting-up) (starting from System configuration).

3
docs/tutorials/setting-up.md
View file

@ -246,6 +246,9 @@ storage account:
$ maddy imap-acct create postmaster@example.org $ maddy imap-acct create postmaster@example.org
``` ```
Note: to run `maddy` CLI commands, your user should be in the `maddy`
group. Alternatively, just use `sudo -u maddy`.
That is it. Now you have your first e-mail address. when authenticating using That is it. Now you have your first e-mail address. when authenticating using
your e-mail client, do not forget the username is "postmaster@example.org", not your e-mail client, do not forget the username is "postmaster@example.org", not
just "postmaster". just "postmaster".