From f86f29f8733f521be38afbc64a40cde161c1d671 Mon Sep 17 00:00:00 2001 From: Andrea Dell'Amico Date: Sat, 24 Sep 2022 20:04:51 +0200 Subject: [PATCH] The lib/quarkus directory must be writeable. --- tasks/keycloak-install.yml | 9 +++++++++ templates/keycloak.service.j2 | 2 +- 2 files changed, 10 insertions(+), 1 deletion(-) diff --git a/tasks/keycloak-install.yml b/tasks/keycloak-install.yml index 179827f..ef8d69e 100644 --- a/tasks/keycloak-install.yml +++ b/tasks/keycloak-install.yml @@ -34,6 +34,15 @@ mode: 0750 tags: [ keycloak, keycloak_data_dir ] + - name: Set the permissions of the {{ keycloak_runtime_home }}/lib/quarkus directory + ansible.builtin.file: + dest: '{{ keycloak_runtime_home }}/lib/quarkus' + state: directory + owner: '{{ keycloak_user }}' + group: '{{ keycloak_user }}' + mode: 0750 + tags: [ keycloak, keycloak_data_dir ] + - name: Avatar directory ansible.builtin.file: dest: '{{ keycloak_external_avatar_dir }}' diff --git a/templates/keycloak.service.j2 b/templates/keycloak.service.j2 index 5107180..dcc1fcf 100644 --- a/templates/keycloak.service.j2 +++ b/templates/keycloak.service.j2 @@ -20,7 +20,7 @@ User={{ keycloak_user }} Group={{ keycloak_user }} SuccessExitStatus=0 143 UMask=0027 -ExecStart={{ keycloak_runtime_home }}/bin/kc.sh start{% if not keycloak_optimize_build_at_startup %} --optimized{% endif %}{% if keycloak_disabled_features != "" %} --features-disabled={% for dis in keycloak_disabled_features %}{{ dis }}{% if not loop.last %},{% endif %}{% endfor %}{% endif %}{% if keycloak_preview_features != "" %} --features=={% for feat in --features= %}{{ feat }}{% if not loop.last %},{% endif %}{% endfor %}{% endif %}{% if keycloak_upgrade_db_at_startup %} --spi-connections-jpa-default-migration-strategy=update{% endif %} +ExecStart={{ keycloak_runtime_home }}/bin/kc.sh start{% if not keycloak_optimize_build_at_startup %} --optimized{% endif %}{% if keycloak_disabled_features | length %} --features-disabled={% for dis in keycloak_disabled_features %}{{ dis }}{% if not loop.last %},{% endif %}{% endfor %}{% endif %}{% if keycloak_preview_features | length %} --features={% for feat in keycloak_preview_features %}{{ feat }}{% if not loop.last %},{% endif %}{% endfor %}{% endif %}{% if keycloak_upgrade_db_at_startup %} --spi-connections-jpa-default-migration-strategy=update{% endif %} [Install] WantedBy=multi-user.target \ No newline at end of file