saltstack / saltstack/salt

[BUG] 3006.12: pillar.items fails silently if /srv/pillars is unreadable by salt-master's user

Open
#68,092 1 comment 1 reaction 1 assignee View on GitHub

@dwoz is already working on this.

Since Jun 28, 2025.

bug
Dominant language
Python
Stars
15.7k
Forks
5.6k
Avg merge
2d 44m
Merged PRs (30d)
80

Description

Description
There is 0 indication in the logs, on either salt-master or salt-minion when the /srv/pillar directory is unreadable to a non-root running salt-master. A simple salt \* pillar.items returns success with no output.

Setup
Tested in both Ubuntu 20.04 and Ubuntu 24.04 via debs https://packages.broadcom.com/

  1. Install salt-master and salt-minion 3006.12
  2. Run sudo mkdir /srv/pillar and sudo chmod 0750 /srv/pillar
  3. Create a simple pillar.sls and top.sls in /srv/pillar/
  4. Run salt-master as the salt user
  • on-prem machine
  • VM (Virtualbox, KVM, etc. please specify)
  • VM running on a cloud service, please be explicit and add details
  • container (Kubernetes, Docker, containerd, etc. please specify)
  • or a combination, please be explicit
  • jails if it is FreeBSD
  • classic packaging
  • onedir packaging
  • used bootstrap to install

Steps to Reproduce the behavior

  1. Run salt minion pillar.items see a success with no data.
  2. Use journalctl -u salt-master and salt-minion and see no error/warning logs about /srv/pillar being unreadable.

Expected behavior
A log line in salt-master indicating that there was some issue reading /srv/pillar/.

Screenshots
N/A

Versions Report

Salt Version:
          Salt: 3006.12

Python Version:
        Python: 3.10.17 (main, Jun  9 2025, 20:41:48) [GCC 11.2.0]

Dependency Versions:
          cffi: 1.14.6
      cherrypy: unknown
  cryptography: 42.0.5
      dateutil: 2.8.1
     docker-py: Not Installed
         gitdb: Not Installed
     gitpython: Not Installed
        Jinja2: 3.1.6
       libgit2: Not Installed
  looseversion: 1.0.2
      M2Crypto: Not Installed
          Mako: Not Installed
       msgpack: 1.0.2
  msgpack-pure: Not Installed
  mysql-python: Not Installed
     packaging: 22.0
     pycparser: 2.21
      pycrypto: Not Installed
  pycryptodome: 3.19.1
        pygit2: Not Installed
  python-gnupg: 0.4.8
        PyYAML: 6.0.1
         PyZMQ: 23.2.0
        relenv: 0.19.3
         smmap: Not Installed
       timelib: 0.2.4
       Tornado: 4.5.3
           ZMQ: 4.3.4

System Versions:
          dist: ubuntu 20.04.6 focal
        locale: utf-8
       machine: x86_64
       release: 5.4.0-1118-fips
        system: Linux
       version: Ubuntu 20.04.6 focal

Additional context

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.