From e94e7d124a4d1b862cb0e05b75b9551ce7ab1f3c Mon Sep 17 00:00:00 2001 From: Ragnor Comerford Date: Mon, 1 Jun 2026 13:11:36 +0200 Subject: [PATCH] fix(bootstrap): pin RustFS to beta.3 + allow insecure default creds (#136) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit `local-rustfs-bootstrap.sh` defaulted RUSTFS_IMAGE to the floating `rustfs/rustfs:latest`, which resolved to 1.0.0-beta.4 (2026-05-21). beta.4 added a credentials-policy check that refuses to start when the access/secret keys are values it treats as "default" (rustfsadmin/rustfsadmin, the script's defaults) — so a fresh bootstrap broke at RustFS startup. Pin the default to 1.0.0-beta.3 to match CI (.github/workflows/ci.yml) and the v0.5.0 release notes, and additionally pass RUSTFS_ALLOW_INSECURE_DEFAULT_CREDENTIALS=true so the script stays forward-compatible if RUSTFS_IMAGE is overridden to beta.4+. Co-authored-by: Ragnor Comerford --- scripts/local-rustfs-bootstrap.sh | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/scripts/local-rustfs-bootstrap.sh b/scripts/local-rustfs-bootstrap.sh index 29427de..c4fdcbe 100755 --- a/scripts/local-rustfs-bootstrap.sh +++ b/scripts/local-rustfs-bootstrap.sh @@ -6,7 +6,14 @@ SOURCE_REF="${SOURCE_REF:-main}" RELEASE_CHANNEL="${RELEASE_CHANNEL:-edge}" WORKDIR="${WORKDIR:-$PWD/.omnigraph-rustfs-demo}" RUSTFS_CONTAINER_NAME="${RUSTFS_CONTAINER_NAME:-omnigraph-rustfs-demo}" -RUSTFS_IMAGE="${RUSTFS_IMAGE:-rustfs/rustfs:latest}" +# Pinned to 1.0.0-beta.3 (2026-05-14) — the last known-good tag, matching CI +# (.github/workflows/ci.yml). `rustfs/rustfs:latest` (1.0.0-beta.4, 2026-05-21) +# added a credentials-policy check that refuses to start when the access/secret +# keys are values it considers "default" (rustfsadmin/rustfsadmin here). This +# script still works on beta.4+ because it passes +# RUSTFS_ALLOW_INSECURE_DEFAULT_CREDENTIALS=true below — so overriding +# RUSTFS_IMAGE to a newer tag is safe. +RUSTFS_IMAGE="${RUSTFS_IMAGE:-rustfs/rustfs:1.0.0-beta.3}" RUSTFS_DATA_DIR="${RUSTFS_DATA_DIR:-$WORKDIR/rustfs-data}" BUCKET="${BUCKET:-omnigraph-local}" PREFIX="${PREFIX:-repos/context}" @@ -265,6 +272,7 @@ start_rustfs() { -v "$RUSTFS_DATA_DIR:/data" \ -e RUSTFS_ACCESS_KEY="$AWS_ACCESS_KEY_ID" \ -e RUSTFS_SECRET_KEY="$AWS_SECRET_ACCESS_KEY" \ + -e RUSTFS_ALLOW_INSECURE_DEFAULT_CREDENTIALS=true \ "$RUSTFS_IMAGE" \ /data >/dev/null }