Set default X509_USER_PROXY & BEARER_TOKEN_FILE

Question

Set default X509_USER_PROXY & BEARER_TOKEN_FILE

DrDaveD opened this issue 4 years ago · 1 comments

Since cvmfsexec mounts cvmfs repositories in a fake root namespace, the default access for X509 proxies is /tmp/x509up_u0. If X509_USER_PROXY is not set, set it to a default value of /tmp/x50up_u$(id -u) before creating the namespace. This is to make ligo.osgstorage.org access work properly when running interactively (htcondor always sets X509_USER_PROXY).

Answer 1 · 2022-01-14T20:24:13.000Z

The same issue exists for tokens, so it should also set BEARER_TOKEN_FILE to ${XDG_RUNTIME_DIR:-/tmp}/bt_u$(id -u).