I wish it wasn't such a pain in the ass to debug why the fuck minio is throwing 403s at forgejo, when the access keys are correct.
-
Huh. Stracing forgejo suggests that we're not sending any authentication headers to minio? WTF.
-
Mngh. I'll debug this some other time. Not enough functioning braincells available right now.
-
The interesting part is that my server is running Forgejo 9.0.2 (official container image), and has S3 configured as storage. In my test environment, I'm also running 9.0.2 (self-built from the v9.0.2 tag), and the storage configuration is the same, apart from the URL and credentials.
This is a bit puzzling.
-
...
Had another look this morning, and I'm an idiot.
MINIO_SECRET_ACCESS_KEY_ID!=MINIO_SECRET_ACCESS_KEY. Of course we fail authentication if I mispell the name of the configuration key. -
@algernon Another reason to avoid using environment variables for configuration (when implementing software): it's difficult to verify that variables are spelled correctly. With a configuration file, you can check that every variable is allowed, which catches misspelling effectively.
(I don't know if the examples you gave are for environment variables, but they triggered this thought.)
-
@liw 100% agreed! Unfortunately, no environment variables involved, the configuration parser in this case will ignore unknown keys (for historical reasons), so I didn't immediately notice the typo.
-
@algernon So many programs get this wrong, alas. Many of mine do, too.
-
@liw nod
I'd like to address this shortcoming in Forgejo at some point, but there's so much else that'd net a bigger benefit. Some day!
-
@algernon We clearly need to find someone to fund us to fix ALL THE OPEN SOURCE. How difficult can it be to find such funding? (https://files.liw.fi/tombstone)
-
@liw I'd love to do that, fixing all the things. Wouldn't even cost much, half the salary of an average Big Tech software engineer and I'm churning out fix after fix seven days a week, 'cos I actually enjoy doing that. I like to think there'd be at least a small army of us.
But alas, those five words...
