Package: miniflux
Version: 2.2.0-2
Severity: important

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Dear Maintainer,

The latest version of miniflux can't connect to the database after a fresh
installation. This is due to incorrect ownership of /etc/miniflux/database file
which is owned by root (and correctly having the permissions 0600). After
changes in bug #1078416 🎉, miniflux no longer runs as root user and instead
runs as miniflux user. This user can't read the database file. The daemon
silently falls back to using built in defaults and fails to connect to
PostgreSQL database. This is originally caught by functional tests in
FreedomBox's miniflux integration.

Simply changing the ownership of the file seems to get things working. See the
following:

$ sudo -u miniflux miniflux -c /etc/miniflux/miniflux.conf -config-dump | grep
DATABASE_URL
DATABASE_URL=user=postgres password=postgres dbname=miniflux2 sslmode=disable
$ sudo miniflux -c /etc/miniflux/miniflux.conf -config-dump | grep DATABASE_URL
DATABASE_URL=postgresql://miniflux:9FBzJTXexY2n@localhost/miniflux

$ sudo chown miniflux:root /etc/miniflux/database
$ sudo -u miniflux miniflux -c /etc/miniflux/miniflux.conf -config-dump | grep
DATABASE_URL
DATABASE_URL=postgresql://miniflux:9FBzJTXexY2n@localhost/miniflux

Thank you for packaging miniflux.

- --
Sunil


- -- System Information:
Debian Release: 12.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.1.0-23-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_FIRMWARE_WORKAROUND
Locale: LANG=en_IN.UTF-8, LC_CTYPE=en_IN.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

-----BEGIN PGP SIGNATURE-----

iQJFBAEBCgAvFiEE5xPDY9ZyWnWupXSBQ+oc/wqnxfIFAmbjPfwRHHN1bmlsQG1l
ZGhhcy5vcmcACgkQQ+oc/wqnxfKWmw//dAbWkzNiDNiey6qWgVwDAYt8U2B6NznM
nO80Hd6RlHLBgJ9I5HKEuoFS5kdZbDgBImTDdQTfNu/4Rx/3R87MIPovBSD+IPJk
kSbcbZZ0CZ9eiK8XqEY/65JB53O+S91tEbQ8YqKrBNQiEE8ooyHK7GT9ka5+5aT4
lW1xrSdbh4+YSNMwRnC9k6lLeUKZzQcjM+NftYk6wOOetZkdrrcg85ztYEgTgdHA
xJV73L/1BoS+TW+o1tFbndboA2Zqx5t7UCrWv92TAk/GPkEcAZ6+1EIHXAQWAX1N
2gDvkQvAxyN+RG/xtT5KvgBn2iZP45+p/rJo7AA4DZDPfG56AbjhMEfITSL9M57Q
SKxZFOYnWFPTqegSqeGRbORn4029GyVYHu36495ODEbfimqnpfS0nvUetfvNxDPk
1fuNVDE3YULt+5jbbd+ApxcHtfNoru2YyYqWq94CKQ07y4OJ5K3s7LcCpuj3vRzO
aV1T/ES2iJc1xSRIP4R5VijIlBop5cwMGlWf9HGgwcH4TRopQRYevMZ5QGZfaRdW
CntnSesPQDv/rGs7lq1Le0Q1PYxD4GRjZwk1IALd9M5+623RGQuLX41zuLKnPnpj
GyX/P5XlHC7qrgNpoAyE9j+hxFxcmNzy3VVXa4YMrtQUeeBCTBpjqrHIrgaqhW3n
GXaMv9yly/s=
=JODD
-----END PGP SIGNATURE-----

Reply via email to