Skip to content

fix(tunnel): 修复 Linux cloudflared 权限 - #246

Merged
uvwt merged 2 commits into
mainfrom
fix/linux-cloudflared-permissions-20261018
Oct 18, 2026
Merged

uvwt merged 2 commits into
mainfrom
fix/linux-cloudflared-permissions-20261018

Conversation

@uvwt

@uvwt uvwt commented Oct 18, 2026

Copy link
Copy Markdown
Owner

根因

Linux 上 cloudflared component 由 root/sudo 安装时,component store 的目录和二进制为 0700。Tunnel systemd 服务以非 root service user 运行,导致 fork/exec .../cloudflared: permission denied,服务进入自动重启循环。

修复

  • Linux component install/update/同版本复用时,收敛 components/cloudflared、版本目录和最终 cloudflared 二进制为 0755
  • 不修改 token/env 等敏感文件权限
  • tunnel start/restart 后增加短暂存活确认;服务立即退出时直接报错,不再返回 completed:true
  • 增加 Linux 权限修复与立即退出回归测试

验证

  • go test ./... -count=1
  • go vet ./...
  • Linux amd64 build
  • git diff --check

实机日志已确认故障表现为 cloudflared permission denied 且 systemd 连续自动重启。

@uvwt
uvwt force-pushed the fix/linux-cloudflared-permissions-20261018 branch from 16fffd3 to e03dc53 Compare October 18, 2026 06:46
@uvwt
uvwt merged commit bdb12bc into main Oct 18, 2026
10 checks passed
@uvwt
uvwt deleted the fix/linux-cloudflared-permissions-20261018 branch October 18, 2026 06:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant