[BUG] 3006.12: pillar.items fails silently if /srv/pillars is unreadable by salt-master's user
Open
@dwoz is already working on this.
Since Jun 28, 2025.
bug
- Dominant language
- Python
- Stars
- 15.7k
- Forks
- 5.6k
- Avg merge
- 2d 44m
- Merged PRs (30d)
- 80
Description
Description
There is 0 indication in the logs, on either salt-master or salt-minion when the /srv/pillar directory is unreadable to a non-root running salt-master. A simple salt \* pillar.items returns success with no output.
Setup
Tested in both Ubuntu 20.04 and Ubuntu 24.04 via debs https://packages.broadcom.com/
- Install
salt-masterandsalt-minion3006.12 - Run
sudo mkdir /srv/pillarandsudo chmod 0750 /srv/pillar - Create a simple
pillar.slsandtop.slsin/srv/pillar/ - Run
salt-masteras thesaltuser
- on-prem machine
- VM (Virtualbox, KVM, etc. please specify)
- VM running on a cloud service, please be explicit and add details
- container (Kubernetes, Docker, containerd, etc. please specify)
- or a combination, please be explicit
- jails if it is FreeBSD
- classic packaging
- onedir packaging
- used bootstrap to install
Steps to Reproduce the behavior
- Run
salt minion pillar.itemssee a success with no data. - Use
journalctl -u salt-masterandsalt-minionand see no error/warning logs about/srv/pillarbeing unreadable.
Expected behavior
A log line in salt-master indicating that there was some issue reading /srv/pillar/.
Screenshots
N/A
Versions Report
Salt Version:
Salt: 3006.12
Python Version:
Python: 3.10.17 (main, Jun 9 2025, 20:41:48) [GCC 11.2.0]
Dependency Versions:
cffi: 1.14.6
cherrypy: unknown
cryptography: 42.0.5
dateutil: 2.8.1
docker-py: Not Installed
gitdb: Not Installed
gitpython: Not Installed
Jinja2: 3.1.6
libgit2: Not Installed
looseversion: 1.0.2
M2Crypto: Not Installed
Mako: Not Installed
msgpack: 1.0.2
msgpack-pure: Not Installed
mysql-python: Not Installed
packaging: 22.0
pycparser: 2.21
pycrypto: Not Installed
pycryptodome: 3.19.1
pygit2: Not Installed
python-gnupg: 0.4.8
PyYAML: 6.0.1
PyZMQ: 23.2.0
relenv: 0.19.3
smmap: Not Installed
timelib: 0.2.4
Tornado: 4.5.3
ZMQ: 4.3.4
System Versions:
dist: ubuntu 20.04.6 focal
locale: utf-8
machine: x86_64
release: 5.4.0-1118-fips
system: Linux
version: Ubuntu 20.04.6 focal
Additional context
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.