fix: use 0o777 permissions for mcp-logs and squid-logs directories by Copilot · Pull Request #710 · github/gh-aw-firewall

Copilot · 2026-02-12T03:55:29Z

GitHub Actions workflows fail with "Permission denied" when creating subdirectories in /tmp/gh-aw/mcp-logs/safeoutputs after AWF runs with sudo. The directory is created by root with 755 permissions, preventing non-root workflow steps from writing.

Changes

Set directory permissions to 0o777: Changed from 0o755 to allow any user to create subdirectories
Added explicit chmodSync(): Bypasses umask (0002) which would reduce 0o777 to 0o775
Fix existing directories: Apply correct permissions if directory already exists from previous run
Applied to both directories: mcpLogsDir (/tmp/gh-aw/mcp-logs) and squidLogsDir for consistency

Implementation

const mcpLogsDir = '/tmp/gh-aw/mcp-logs';
if (!fs.existsSync(mcpLogsDir)) {
  fs.mkdirSync(mcpLogsDir, { recursive: true, mode: 0o777 });
  fs.chmodSync(mcpLogsDir, 0o777);  // Explicit chmod bypasses umask
  logger.debug(`MCP logs directory created at: ${mcpLogsDir}`);
} else {
  fs.chmodSync(mcpLogsDir, 0o777);
  logger.debug(`MCP logs directory permissions fixed at: ${mcpLogsDir}`);
}

Safe for these temp log directories: already in /tmp, hidden from AWF container via tmpfs, no sensitive data.

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

Fixes permission denied error when GitHub Actions workflows try to create subdirectories in /tmp/gh-aw/mcp-logs after AWF runs with sudo. Changes: - Set directory permissions to 0o777 (rwxrwxrwx) instead of 0o755 - Explicitly call chmodSync after mkdirSync to bypass umask - Fix permissions if directory already exists from previous run - Update test to verify 777 permissions Root cause: When AWF runs with sudo (e.g., --enable-chroot), it creates /tmp/gh-aw/mcp-logs owned by root. With 755 permissions, non-root users cannot create subdirectories. Using 777 allows workflows to create subdirectories like /tmp/gh-aw/mcp-logs/safeoutputs without sudo. Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Apply same fix to squidLogsDir for consistency with mcpLogsDir. Explicitly calls chmodSync to bypass umask effects. Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

github-actions · 2026-02-12T04:03:11Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-02-12T04:03:14Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-02-12T04:03:16Z

Chroot tests failed Smoke Chroot was cancelled - See logs for details.

github-actions · 2026-02-12T04:07:05Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-02-12T04:07:08Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-02-12T04:07:13Z

Chroot tests passed! Smoke Chroot - All security and functionality tests succeeded.

github-actions · 2026-02-12T04:10:03Z

Build Test: Bun - Results

Project	Install	Tests	Status
elysia	✅	1/1	PASS
hono	✅	1/1	PASS

Overall: PASS ✅

All Bun projects built and tested successfully.

AI generated by Build Test Bun

github-actions · 2026-02-12T04:10:07Z

Deno Build Test Results ✅

Project	Tests	Status
oak	1/1	✅ PASS
std	1/1	✅ PASS

Overall: ✅ PASS

All Deno tests completed successfully.

AI generated by Build Test Deno

github-actions · 2026-02-12T04:10:16Z

Build Test: Go - Results

All Go projects tested successfully! ✅

Project	Download	Tests	Status
color	✅	1/1	PASS
env	✅	1/1	PASS
uuid	✅	1/1	PASS

Overall: PASS

AI generated by Build Test Go

github-actions · 2026-02-12T04:10:17Z

Smoke Test Results (Claude)

Last 2 merged PRs:

fix: create /tmp/gh-aw/mcp-logs before Docker mount #707: fix: create /tmp/gh-aw/mcp-logs before Docker mount
fix(docker): mount CLI state directories in chroot mode for Copilot and Claude #702: fix(docker): mount CLI state directories in chroot mode for Copilot and Claude

✅ GitHub MCP - Retrieved PRs
✅ Playwright - Page title: "GitHub · Change is constant. GitHub keeps you ahead. · GitHub"
✅ File Writing - Created /tmp/gh-aw/agent/smoke-test-claude-21933071664.txt
✅ Bash Tool - Verified file contents

Status: PASS

AI generated by Smoke Claude

github-actions · 2026-02-12T04:10:31Z

Smoke Test Results

Last 2 Merged PRs:

fix: create /tmp/gh-aw/mcp-logs before Docker mount #707: fix: create /tmp/gh-aw/mcp-logs before Docker mount
fix(docker): mount CLI state directories in chroot mode for Copilot and Claude #702: fix(docker): mount CLI state directories in chroot mode for Copilot and Claude

Tests:

✅ GitHub MCP (reviewed PRs)
✅ Playwright (GitHub page title verified)
✅ File writing (created smoke-test-copilot-21933071672.txt)
✅ Bash commands (verified file content)

Overall Status: PASS

cc @Copilot @lpcox

AI generated by Smoke Copilot

github-actions · 2026-02-12T04:10:47Z

C++ Build Test Results

Project	CMake	Build	Status
fmt	✅	✅	PASS
json	✅	✅	PASS

Overall: PASS

All C++ projects built successfully.

AI generated by Build Test C++

github-actions · 2026-02-12T04:10:50Z

Node.js Build Test Results

Project	Install	Tests	Status
clsx	✅	PASS	PASS
execa	✅	PASS	PASS
p-limit	✅	PASS	PASS

Overall: PASS ✅

All Node.js test projects built and tested successfully.

AI generated by Build Test Node.js

github-actions · 2026-02-12T04:10:51Z

Build Test: .NET

Project	Restore	Build	Run	Status
hello-world	✅	✅	✅	PASS
json-parse	✅	✅	✅	PASS

Overall: PASS

All .NET projects successfully restored, built, and ran with expected output.

AI generated by Build Test .NET

github-actions · 2026-02-12T04:10:51Z

Rust Build Test Results

Project	Build	Tests	Status
fd	✅	1/1	PASS
zoxide	✅	1/1	PASS

Overall: PASS

All Rust projects built and tested successfully.

AI generated by Build Test Rust

github-actions · 2026-02-12T04:11:36Z

Chroot Version Comparison Results ❌

Runtime	Host Version	Chroot Version	Match?
Python	3.12.12	3.12.3	❌ NO
Node.js	v24.13.0	v20.20.0	❌ NO
Go	go1.22.12	go1.22.12	✅ YES

Overall: Tests did not pass. Python and Node.js versions differ between host and chroot environments.

AI generated by Smoke Chroot

Copilot

Pull request overview

This PR addresses GitHub Actions permission failures by making the host log directories used by AWF world-writable, ensuring non-root steps can create subdirectories even when AWF is run via sudo.

Changes:

Create /tmp/gh-aw/mcp-logs with 0o777 and explicitly chmod it to bypass umask.
Create squid-logs with 0o777 and explicitly chmod it on creation.
Extend writeConfigs test coverage to assert mcp-logs permissions are 0777.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File	Description
src/docker-manager.ts	Adjusts creation/permissions logic for `mcp-logs` and `squid-logs` directories.
src/docker-manager.test.ts	Updates the `writeConfigs` test to assert `mcp-logs` is created with `0777`.

Comments suppressed due to low confidence (1)

src/docker-manager.ts:878

squidLogsDir only gets chmodSync(..., 0o777) when the directory is newly created. If it already exists from a previous run with more restrictive permissions, this code won’t fix it (unlike mcpLogsDir below) and the debug log still says "created" even when it wasn’t. Consider adding an else branch (and adjusting the log message) to normalize permissions consistently, in line with the PR description.

  const squidLogsDir = config.proxyLogsDir || path.join(config.workDir, 'squid-logs');
  if (!fs.existsSync(squidLogsDir)) {
    fs.mkdirSync(squidLogsDir, { recursive: true, mode: 0o777 });
    // Explicitly set permissions to 0o777 (not affected by umask)
    fs.chmodSync(squidLogsDir, 0o777);
  }
  logger.debug(`Squid logs directory created at: ${squidLogsDir}`);

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-02-12T04:16:12Z

src/docker-manager.ts

+    fs.chmodSync(mcpLogsDir, 0o777);
+    logger.debug(`MCP logs directory permissions fixed at: ${mcpLogsDir}`);


In the else branch, chmodSync(mcpLogsDir, 0o777) is unconditional. If /tmp/gh-aw/mcp-logs already exists and is owned by a different user (e.g., created by a prior sudo run) but already has 0777, a non-root run will still throw EPERM here and fail the workflow unnecessarily. Consider stat’ing first and only chmod’ing when the mode isn’t already 0777, and handle EPERM with a clearer error or a non-fatal warning when permissions are already sufficient.

This issue also appears on line 872 of the same file.

Suggested change

fs.chmodSync(mcpLogsDir, 0o777);

logger.debug(`MCP logs directory permissions fixed at: ${mcpLogsDir}`);

try {

const stats = fs.statSync(mcpLogsDir);

const currentMode = stats.mode & 0o777;

if (currentMode !== 0o777) {

try {

fs.chmodSync(mcpLogsDir, 0o777);

logger.debug(`MCP logs directory permissions fixed at: ${mcpLogsDir}`);

} catch (err: any) {

const code = (err as NodeJS.ErrnoException).code;

if (code === 'EPERM') {

logger.warn(

`MCP logs directory exists at ${mcpLogsDir} but permissions could not be changed to 0o777 due to EPERM. ` +

`Current mode is ${currentMode.toString(8)}.`

);

} else {

throw err;

}

}

} else {

logger.debug(`MCP logs directory permissions already set to 0o777: ${mcpLogsDir}`);

}

} catch (err) {

logger.warn(`Unable to verify or adjust MCP logs directory permissions at ${mcpLogsDir}: ${err}`);

}

Copilot · 2026-02-12T04:16:13Z

src/docker-manager.test.ts

@@ -1514,6 +1514,8 @@ describe('docker-manager', () => {
      expect(fs.existsSync('/tmp/gh-aw/mcp-logs')).toBe(true);
      const stats = fs.statSync('/tmp/gh-aw/mcp-logs');
      expect(stats.isDirectory()).toBe(true);
+      // Verify permissions are 0o777 (rwxrwxrwx) to allow non-root users to create subdirectories
+      expect((stats.mode & 0o777).toString(8)).toBe('777');


This test writes to a global path (/tmp/gh-aw/mcp-logs) but doesn’t clean it up, which can make the test suite order/environment-dependent on developer machines or persistent runners. Consider removing /tmp/gh-aw/mcp-logs (and possibly /tmp/gh-aw if empty) in setup/teardown for this test, or mocking the fs calls so the test remains isolated.

…709) * Initial plan * fix: revert file approach, need directory solution for mcp-logs Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> * fix: use tmpfs to hide /tmp/gh-aw/mcp-logs directory from container Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> * test: verify tmpfs mount solution works end-to-end Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> * fix: use 0o777 permissions for mcp-logs and squid-logs directories (#710) * Initial plan * fix: set /tmp/gh-aw/mcp-logs to world-writable (0o777) Fixes permission denied error when GitHub Actions workflows try to create subdirectories in /tmp/gh-aw/mcp-logs after AWF runs with sudo. Changes: - Set directory permissions to 0o777 (rwxrwxrwx) instead of 0o755 - Explicitly call chmodSync after mkdirSync to bypass umask - Fix permissions if directory already exists from previous run - Update test to verify 777 permissions Root cause: When AWF runs with sudo (e.g., --enable-chroot), it creates /tmp/gh-aw/mcp-logs owned by root. With 755 permissions, non-root users cannot create subdirectories. Using 777 allows workflows to create subdirectories like /tmp/gh-aw/mcp-logs/safeoutputs without sudo. Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> * fix: ensure squid logs dir has 777 permissions Apply same fix to squidLogsDir for consistency with mcpLogsDir. Explicitly calls chmodSync to bypass umask effects. Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

* Initial plan * feat: hide /tmp/gh-aw/mcp-logs/ directory from agent container Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> * test: improve mcp-logs tests to verify mount protection * fix: create /tmp/gh-aw/mcp-logs before Docker mount (#707) * Initial plan * fix: create /tmp/gh-aw/mcp-logs directory before mounting Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> * test: add test for /tmp/gh-aw/mcp-logs directory creation Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> * fix: use tmpfs to hide /tmp/gh-aw/mcp-logs directory from containers (#709) * Initial plan * fix: revert file approach, need directory solution for mcp-logs Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> * fix: use tmpfs to hide /tmp/gh-aw/mcp-logs directory from container Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> * test: verify tmpfs mount solution works end-to-end Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> * fix: use 0o777 permissions for mcp-logs and squid-logs directories (#710) * Initial plan * fix: set /tmp/gh-aw/mcp-logs to world-writable (0o777) Fixes permission denied error when GitHub Actions workflows try to create subdirectories in /tmp/gh-aw/mcp-logs after AWF runs with sudo. Changes: - Set directory permissions to 0o777 (rwxrwxrwx) instead of 0o755 - Explicitly call chmodSync after mkdirSync to bypass umask - Fix permissions if directory already exists from previous run - Update test to verify 777 permissions Root cause: When AWF runs with sudo (e.g., --enable-chroot), it creates /tmp/gh-aw/mcp-logs owned by root. With 755 permissions, non-root users cannot create subdirectories. Using 777 allows workflows to create subdirectories like /tmp/gh-aw/mcp-logs/safeoutputs without sudo. Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> * fix: ensure squid logs dir has 777 permissions Apply same fix to squidLogsDir for consistency with mcpLogsDir. Explicitly calls chmodSync to bypass umask effects. Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

- Add --allow-full-filesystem-access flag to docs/usage.md - Add link to docs/selective-mounting.md in README.md - Update AGENTS.md container architecture to reflect selective mounting default - Update docs/architecture.md with security features: - Selective mounting and credential protection - One-shot token library (LD_PRELOAD) - MCP logs directory protection Changes sync documentation with code from PRs: - #681 (selective mounting) - #706, #709, #710 (mcp-logs hiding) - #604, #640 (one-shot token library)

Initial plan

832a767

Copilot AI assigned Copilot and lpcox Feb 12, 2026

Copilot started work on behalf of lpcox February 12, 2026 03:55 View session

Copilot AI and others added 2 commits February 12, 2026 04:01

fix: ensure squid logs dir has 777 permissions

10134c4

Apply same fix to squidLogsDir for consistency with mcpLogsDir. Explicitly calls chmodSync to bypass umask effects. Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Fix failing GitHub Actions workflow due to permissions~~ fix: use 0o777 permissions for mcp-logs and squid-logs directories Feb 12, 2026

Copilot AI requested a review from lpcox February 12, 2026 04:05

Copilot finished work on behalf of lpcox February 12, 2026 04:05

github-actions bot mentioned this pull request Feb 12, 2026

[agentics] No-Op Runs #676

Closed

github-actions bot added the build-test-bun label Feb 12, 2026

github-actions bot added the build-test-deno label Feb 12, 2026

github-actions bot added the build-test-go label Feb 12, 2026

github-actions bot added smoke-claude smoke-copilot labels Feb 12, 2026

github-actions bot added the build-test-cpp label Feb 12, 2026

github-actions bot added build-test-node build-test-dotnet build-test-rust labels Feb 12, 2026

lpcox marked this pull request as ready for review February 12, 2026 04:13

Copilot AI review requested due to automatic review settings February 12, 2026 04:13

lpcox merged commit abeeb41 into copilot/fix-github-actions-workflow-another-one Feb 12, 2026
69 checks passed

lpcox deleted the copilot/fix-github-actions-workflow-one-more-time branch February 12, 2026 04:13

Copilot started reviewing on behalf of lpcox February 12, 2026 04:13 View session

Copilot AI reviewed Feb 12, 2026

View reviewed changes

github-actions bot mentioned this pull request Feb 12, 2026

fix: use tmpfs to hide /tmp/gh-aw/mcp-logs directory from containers #709

Merged

github-actions bot mentioned this pull request Feb 12, 2026

feat: hide /tmp/gh-aw/mcp-logs/ from agent containers #706

Merged

github-actions bot mentioned this pull request Feb 12, 2026

[docs] docs: sync with selective mounting and security features #742

Closed

		fs.chmodSync(mcpLogsDir, 0o777);
		logger.debug(`MCP logs directory permissions fixed at: ${mcpLogsDir}`);

-    fs.chmodSync(mcpLogsDir, 0o777);
-    logger.debug(`MCP logs directory permissions fixed at: ${mcpLogsDir}`);
+    try {
+      const stats = fs.statSync(mcpLogsDir);
+      const currentMode = stats.mode & 0o777;
+      if (currentMode !== 0o777) {
+        try {
+          fs.chmodSync(mcpLogsDir, 0o777);
+          logger.debug(`MCP logs directory permissions fixed at: ${mcpLogsDir}`);
+        } catch (err: any) {
+          const code = (err as NodeJS.ErrnoException).code;
+          if (code === 'EPERM') {
+            logger.warn(
+              `MCP logs directory exists at ${mcpLogsDir} but permissions could not be changed to 0o777 due to EPERM. ` +
+              `Current mode is ${currentMode.toString(8)}.`
+            );
+          } else {
+            throw err;
+          }
+        }
+      } else {
+        logger.debug(`MCP logs directory permissions already set to 0o777: ${mcpLogsDir}`);
+      }
+    } catch (err) {
+      logger.warn(`Unable to verify or adjust MCP logs directory permissions at ${mcpLogsDir}: ${err}`);
+    }

Conversation

Copilot AI commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

Implementation

Uh oh!

github-actions bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 12, 2026

Build Test: Bun - Results

Uh oh!

github-actions bot commented Feb 12, 2026

Deno Build Test Results ✅

Uh oh!

github-actions bot commented Feb 12, 2026

Build Test: Go - Results

Uh oh!

github-actions bot commented Feb 12, 2026

Uh oh!

github-actions bot commented Feb 12, 2026

Smoke Test Results

Uh oh!

github-actions bot commented Feb 12, 2026

C++ Build Test Results

Uh oh!

github-actions bot commented Feb 12, 2026

Node.js Build Test Results

Uh oh!

github-actions bot commented Feb 12, 2026

Build Test: .NET

Uh oh!

github-actions bot commented Feb 12, 2026

Rust Build Test Results

Uh oh!

github-actions bot commented Feb 12, 2026

Chroot Version Comparison Results ❌

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Feb 12, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 12, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Copilot AI commented Feb 12, 2026 •

edited

Loading

github-actions bot commented Feb 12, 2026 •

edited

Loading

github-actions bot commented Feb 12, 2026 •

edited

Loading

github-actions bot commented Feb 12, 2026 •

edited

Loading

github-actions bot commented Feb 12, 2026 •

edited

Loading

github-actions bot commented Feb 12, 2026 •

edited

Loading

github-actions bot commented Feb 12, 2026 •

edited

Loading