Repository has unknown error: EACCES: permission denied, open '/builds/graphviz/renovatebot/renovate/cache/renovate/repository/gitlab/graphviz/graphviz.gitlab.io.json'

[mhansen]

How are you running Renovate?

Self-hosted Renovate

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

GitLab

Please tell us more about your question or problem

I run renovatebot to update Graphviz's dependencies at https://gitlab.com/graphviz/renovatebot/-/pipelines.

In the last 3 days, we've had failures for each run:

Error: EACCES: permission denied, open '/builds/graphviz/renovatebot/renovate/cache/renovate/repository/gitlab/graphviz/graphviz.gitlab.io.json'

This is the last image that succeeded:

Using docker image sha256:851518d04e846e5c5e9a17d80c0ecf7f61b867cd56f0df5ea2feacb79e2b2370 for ghcr.io/renovatebot/renovate:full with digest ghcr.io/renovatebot/renovate@sha256:75843166d2130c9a75444db63ff2ca711cd24d892e593b658df15b4f38cdd3fc ...

This is the first image that failed:

Using docker image sha256:fa39d6c9853b010cb1e7a74597c08b926ea9ef2cb4ceed4c2e70340f677b5594 for ghcr.io/renovatebot/renovate:full with digest ghcr.io/renovatebot/renovate@sha256:6c67407d4d224231dcf7e2b70739d2236f5f74f7e3d52160f8d2b59f4398a21a ...

Logs (if relevant)

Logs

Using docker image sha256:fa39d6c9853b010cb1e7a74597c08b926ea9ef2cb4ceed4c2e70340f677b5594 for ghcr.io/renovatebot/renovate:full with digest ghcr.io/renovatebot/renovate@sha256:6c67407d4d224231dcf7e2b70739d2236f5f74f7e3d52160f8d2b59f4398a21a ...
 INFO: Repository started (repository=graphviz/graphviz.gitlab.io)
       "renovateVersion": "39.0.3"
 INFO: Dependency extraction complete (repository=graphviz/graphviz.gitlab.io, baseBranch=main)
       "stats": {
         "managers": {
           "gitlabci": {"fileCount": 1, "depCount": 4},
           "gomod": {"fileCount": 1, "depCount": 2},
           "npm": {"fileCount": 1, "depCount": 1}
         },
         "total": {"fileCount": 3, "depCount": 7}
       }
 INFO: Branch updated (repository=graphviz/graphviz.gitlab.io, branch=renovate/floryn90-hugo-0.x)
       "commitSha": "25c66c576d6c0883e85e69dce3a85047f9615cfa"
 INFO: PR updated (repository=graphviz/graphviz.gitlab.io, branch=renovate/floryn90-hugo-0.x)
       "pr": 701,
       "prTitle": "chore(deps): update floryn90/hugo docker tag to v0.137.0"
ERROR: Repository has unknown error (repository=graphviz/graphviz.gitlab.io)
       "err": {
         "errno": -13,
         "code": "EACCES",
         "syscall": "open",
         "path": "/builds/graphviz/renovatebot/renovate/cache/renovate/repository/gitlab/graphviz/graphviz.gitlab.io.json",
         "message": "EACCES: permission denied, open '/builds/graphviz/renovatebot/renovate/cache/renovate/repository/gitlab/graphviz/graphviz.gitlab.io.json'",
         "stack": "Error: EACCES: permission denied, open '/builds/graphviz/renovatebot/renovate/cache/renovate/repository/gitlab/graphviz/graphviz.gitlab.io.json'"
       }

[mhansen]

Our .gitlab-ci.yml: https://gitlab.com/graphviz/renovatebot/-/blob/main/.gitlab-ci.yml?ref_type=heads

include:
    - project: 'renovate-bot/renovate-runner'
      file: '/templates/renovate.gitlab-ci.yml'
      ref: v17.162.0

renovate:
    image: ghcr.io/renovatebot/renovate:full
    rules:
        - if: '$CI_PIPELINE_SOURCE == "schedule"'
        - if: '$CI_PIPELINE_SOURCE == "push"'

[mhansen]

Our renovate.json: https://gitlab.com/graphviz/graphviz.gitlab.io/-/blob/main/renovate.json?ref_type=heads

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended"
  ],
  "packageRules": [
    {
      "matchManagers": ["gomod"],
      "matchDepTypes": ["indirect"],
      "enabled": true
    }
  ]
}

[rarkins]

Did you make a major version update to v39?

[rarkins]

If so, the default image UID changed from 1001 to 12021. You may need to clear the cache

[mhansen]

Thank you. Clearing the pipeline cache fixed my problem.

I probably did upgrade; I think I'm just running the latest release.

[viceice]

the gitlab templates are still on v38 🤔

https://gitlab.com/renovate-bot/renovate-runner/-/blob/main/templates/renovate.gitlab-ci.yml#L10

[viceice]

oh, i see ghcr.io/renovatebot/renovate:full was automatically upgraded to v39. We strongly discurage to use the latest or full tags for those breaking changes.

[mhansen]

Thank you; I'll look into setting a specific version.