koji

#4116 koji-gc: dedicated Kerberos credential cache to avoid conflicts with root user's credential cache
Closed: Fixed by tkopecek. Opened by amessina.

Closed: Fixed
Reopen Issue

kojira and kojid both use their own Kerberos credential cache (equivalent of KRB5CCNAME) which separates the ccaches from the default root user on the machine, even though the services run as root by default).

Please extend koji-gc to use it's own (configurable, default to /var/tmp just as kojira and kojid do) Kerberos credential cache to achieve a similar result.

For now, I'm using the following in /etc/systemd/system/koji-gc.service.d/krb5ccname.conf:

[Service]
Environment=KRB5CCNAME=FILE:/var/tmp/kojigc.ccache

Metadata Update from @tkopecek:
- Custom field Size adjusted to None
- Issue set to the milestone: 1.36

Metadata Update from @mikem:
- Issue set to the milestone: 1.35.1 (was: 1.36)

Metadata Update from @mikem:
- Issue set to the milestone: 1.36 (was: 1.35.1)

PR 4171

Metadata Update from @jcupova:
- Issue tagged with: testing-ready

Metadata Update from @tkopecek:
- Issue untagged with: testing-ready
- Issue tagged with: testing-basic

Metadata Update from @mfilip:
- Issue tagged with: testing-done

Commit fa0c5589 fixes this issue

Commit c603ff6a fixes this issue

This issue has been migrated to Fedora Forge:
https://forge.fedoraproject.org/koji/koji/issues/4116

Please continue any further discussion there.
Metadata
None

testing-basic testing-done

None
None
Low
None
Related Pull Requests
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.