Page MenuHomeVyOS Platform
Create Task
Maniphest T7717

Enabling TPM encryption causes commit revisions write to fail
Closed, ResolvedPublicBUG
Actions

Description

vyos@vyos# commit
_add_log_entry: CRITICAL:[Errno 13] Permission denied: '/opt/vyatta/etc/config/archive/commits'


vyos@vyos# ls -la /opt/vyatta/etc/config/archive/commits
-rw-rw-r-- 1 root root 128 Aug 13 09:55 /opt/vyatta/etc/config/archive/commits

It seems like chgrp needs to be used recursively - https://github.com/vyos/vyos-1x/blob/6e7e7842bc1ba55bd4c91c3af35faf8961793318/src/helpers/vyos-config-encrypt.py#L141

Steps to reproduce:

encryption enable
configure
set system host-name vyos-1
compare [TAB]

Details

Version
2025.08.13-0020-rolling
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Related Objects

Event Timeline

a.kudientsov created this task.Aug 13 2025, 11:51 AM
Unknown Object (User) triaged this task as Normal priority.Aug 14 2025, 1:06 PM
Unknown Object (User) added a project: VyOS 1.5 Circinus (1.5-stream-2025-Q3).
pasik subscribed.Aug 14 2025, 4:03 PM
Unknown Object (User) assigned this task to sarthurdev.Aug 18 2025, 7:41 AM
a.kudientsov renamed this task from Enabling TPM encryption changes '/opt/vyatta/etc/config/' contents group owner to root to Enabling TPM encryption causes commit revisions write to fail.Aug 18 2025, 10:01 AM
a.kudientsov updated the task description. (Show Details)
a.kudientsov updated the task description. (Show Details)Aug 18 2025, 1:45 PM
sarthurdev changed the task status from Open to In progress.Aug 18 2025, 8:04 PM
sarthurdev changed the task status from In progress to Needs testing.Aug 19 2025, 7:23 PM

PR: https://github.com/vyos/vyos-1x/pull/4669

a.pidnebesny subscribed.Sep 15 2025, 1:13 PM

This behavior is no more observed, the

commit

is successful on different scenario with encryption
Summary:
fixed and no more observed

Viacheslav subscribed.Sep 15 2025, 2:24 PM

@a.kudientsov could you confirm and close the task?

a.kudientsov closed this task as Resolved.Sep 17 2025, 7:20 AM
sarthurdev mentioned this in rVYOSONEXe5f06c475d01: tpm: T7717: Preserve group on config and archives.Sep 25 2025, 2:22 PM
Restricted Repository Identity mentioned this in rVYOSONEX51b2d4dc9c08: Merge pull request #4669 from sarthurdev/tpm_fixes.Sep 25 2025, 2:22 PM
dmbaturin edited projects, added VyOS 1.5 Circinus (2025.11); removed VyOS 1.5 Circinus (1.5-stream-2025-Q3), VyOS Rolling.Thu, Nov 13, 12:19 AM
dmbaturin changed Is it a breaking change? from Unspecified (possibly destroys the router) to Perfectly compatible.