[GH-ISSUE #18] Permission Denied on vaultwarden_cookies.txt in Non-Root Mode #11

New issue

Closed

opened 2026-03-04 00:59:39 +03:00 by kerem · 2 comments

kerem commented

2026-03-04 00:59:39 +03:00

Owner

Originally created by @ottvladimir on GitHub (Sep 11, 2025).
Original GitHub issue: https://github.com/sirtoobii/vaultwarden_ldap_sync/issues/18

When deploying with securityContext in Kubernetes (e.g., runAsUser: 1001, fsGroup: 1001), the following error occurs due to lack of write permissions on the cookie file path:

2025-09-11:03:57:15 ERROR [sync.py] Something went wrong. Error: [Errno 13] Permission denied: '../vaultwarden_cookies.txt'
2025-09-11:03:57:15 DEBUG [sync.py] Traceback (most recent call last):
  File "/src/vaultwarden_user_sync/sync.py", line 104, in <module>
    sync_result = SyncResult.factory(vwc, ls, ldap_emails)
                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/src/vaultwarden_user_sync/compare.py", line 60, in factory
    vw_users = vwc.get_all_users()
               ^^^^^^^^^^^^^^^^^^^
  File "/src/vaultwarden_user_sync/backends/vaultwarden.py", line 70, in get_all_users
    result = self.make_authenticated_request('{}/admin/users'.format(self.vaultwarden_url),
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/src/vaultwarden_user_sync/backends/vaultwarden.py", line 57, in make_authenticated_request
    self.client.cookies.save()
  File "/usr/lib/python3.11/http/cookiejar.py", line 2093, in save
    os.open(filename, os.O_CREAT | os.O_WRONLY | os.O_TRUNC, 0o600),
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

PermissionError: [Errno 13] Permission denied: '../vaultwarden_cookies.txt'
This failure happens during cookie saving in the vaultwarden.py backend, as the non-root user (e.g., UID 1001) cannot write to the default relative path ../vaultwarden_cookies.txt, which likely points to a root-owned or restricted directory outside the container's writable area.

Originally created by @ottvladimir on GitHub (Sep 11, 2025). Original GitHub issue: https://github.com/sirtoobii/vaultwarden_ldap_sync/issues/18 When deploying with securityContext in Kubernetes (e.g., runAsUser: 1001, fsGroup: 1001), the following error occurs due to lack of write permissions on the cookie file path: ``` 2025-09-11:03:57:15 ERROR [sync.py] Something went wrong. Error: [Errno 13] Permission denied: '../vaultwarden_cookies.txt' 2025-09-11:03:57:15 DEBUG [sync.py] Traceback (most recent call last): File "/src/vaultwarden_user_sync/sync.py", line 104, in <module> sync_result = SyncResult.factory(vwc, ls, ldap_emails) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/src/vaultwarden_user_sync/compare.py", line 60, in factory vw_users = vwc.get_all_users() ^^^^^^^^^^^^^^^^^^^ File "/src/vaultwarden_user_sync/backends/vaultwarden.py", line 70, in get_all_users result = self.make_authenticated_request('{}/admin/users'.format(self.vaultwarden_url), ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/src/vaultwarden_user_sync/backends/vaultwarden.py", line 57, in make_authenticated_request self.client.cookies.save() File "/usr/lib/python3.11/http/cookiejar.py", line 2093, in save os.open(filename, os.O_CREAT | os.O_WRONLY | os.O_TRUNC, 0o600), ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ``` PermissionError: [Errno 13] Permission denied: '../vaultwarden_cookies.txt' This failure happens during cookie saving in the vaultwarden.py backend, as the non-root user (e.g., UID 1001) cannot write to the default relative path ../vaultwarden_cookies.txt, which likely points to a root-owned or restricted directory outside the container's writable area.

kerem

2026-03-04 00:59:39 +03:00

closed this issue
added the
bug
label

kerem commented

2026-03-04 00:59:41 +03:00

Author

Owner

@sirtoobii commented on GitHub (Sep 13, 2025):

Hi @ottvladimir Thanks for raising this issue. I've pushed a fix in fix/cookie_store_location can you confirm that this solves it?

@sirtoobii commented on GitHub (Sep 13, 2025): Hi @ottvladimir Thanks for raising this issue. I've pushed a fix in `fix/cookie_store_location` can you confirm that this solves it?

kerem commented

2026-03-04 00:59:41 +03:00

Author

Owner

@ottvladimir commented on GitHub (Sep 19, 2025):

Hi! Yes, this fixed the problem.

@ottvladimir commented on GitHub (Sep 19, 2025): Hi! Yes, this fixed the problem.

kerem referenced this issue

2026-03-04 00:59:43 +03:00

[PR #11] [MERGED] Big refactoring, bug fixes, and new features: #14