Added --umask command line parameter

[syedriko]

Signed-off-by: Sergey Yedrikov syedriko@redhat.com

Which issue(s) this PR fixes:
None

What this PR does / why we need it:
I needed to control permissions on files and directories fluentd creates on disk, to make them accessible only to the user running fluentd:

sh-4.4# find /var/lib/fluentd -ls
100978405      0 drwxr-xr-x   5  root     root           53 Feb  4 04:52 /var/lib/fluentd
157295736      0 drwx------   2  root     root           59 Feb  4 05:01 /var/lib/fluentd/pos
157295739     12 -rw-------   1  root     root        11117 Feb  4 05:02 /var/lib/fluentd/pos/es-containers.log.pos
157295855      4 -rw-------   1  root     root          137 Feb  4 05:01 /var/lib/fluentd/pos/journal_pos.json
 48242762      0 drwxr-xr-x   2  root     root          115 Feb  4 05:02 /var/lib/fluentd/default
 48257477      8 -rw-------   1  root     root         5156 Feb  4 05:02 /var/lib/fluentd/default/buffer.b5d72a27e600fe3fec22c832f88f14303.log
 48257478      4 -rw-------   1  root     root          203 Feb  4 05:02 /var/lib/fluentd/default/buffer.b5d72a27e600fe3fec22c832f88f14303.log.meta
 50664000      0 drwxr-xr-x   2  root     root            6 Feb  4 04:52 /var/lib/fluentd/retry_default
sh-4.4# 

Setting the appropriate umask looked like an elegant solution. However, I found it impossible to control the umask of fluentd when it runs with --no-supervisor, as fluentd overrides the umask set in the parent shell.

Docs Changes:
--umask UMASK change umask
needs to be added to https://docs.fluentd.org/deployment/command-line-option

Release Note:

[ashie]

Refs:

• in_unix plugin does not work without supervisor (permission denied with var/run/td-agent/td-agent.sock) #2984
• supervisor: Call File.umask for standalone worker. fix #2984 #2987
• ServerEngine
  • https://github.com/treasure-data/serverengine/blob/9f37af507d7fc216d84c5fbe3d841fbe422e6be9/lib/serverengine/daemon.rb#L52
  • https://github.com/treasure-data/serverengine/blob/9f37af507d7fc216d84c5fbe3d841fbe422e6be9/lib/serverengine/daemon.rb#L83

[ashie]

Thanks!

--umask UMASK change umask
needs to be added to https://docs.fluentd.org/deployment/command-line-option

Could you create the pull request for it on https://github.com/fluent/fluentd-docs-gitbook/pulls?

[syedriko]

Thanks!

--umask UMASK change umask
needs to be added to https://docs.fluentd.org/deployment/command-line-option

Could you create the pull request for it on https://github.com/fluent/fluentd-docs-gitbook/pulls?

Sure, here you go: fluent/fluentd-docs-gitbook#394