cannot change permissions of ‘/usr/local/bin’ since 2025-03-02

[v1v]

Start failing with

install: cannot change permissions of ‘/usr/local/bin’: Operation not permitted

Run sourcemeta/jsonschema@2470d6ca67dc844b7048ee285e96b7652723756a
Run curl --retry 5 --location --fail-early --silent --show-error \
---- Fetching the pre-built JSON Schema CLI binary from GitHub Releases
---- Fetching version v6.0.3 from https://github.com/sourcemeta/jsonschema/releases/download/v6.0.3/jsonschema-6.0.3-linux-x86_64.zip
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

100 1503k  100 1503k    0     0  [9](https://github.com/elastic/app-obs-dev/actions/runs/13620147754/job/38293121826?pr=153#step:3:11)912k      0 --:--:-- --:--:-- --:--:-- 9912k
Archive:  /tmp/tmp.IjQ6a7AYO1/artifact.zip
   creating: /tmp/tmp.IjQ6a7AYO1/out/jsonschema-6.0.3-linux-x86_64/bin/
  inflating: /tmp/tmp.IjQ6a7AYO1/out/jsonschema-6.0.3-linux-x86_64/bin/jsonschema  
install: cannot change permissions of ‘/usr/local/bin’: Operation not permitted

and with even previous versions

Run sourcemeta/jsonschema@ea5fc1a889f6c4d404e6c48109c37aaf9248b5b1
Run curl --retry [5](https://github.com/elastic/ingest-dev/actions/runs/13693574903/job/38291107179?pr=5196#step:3:7) --location --fail-early --silent --show-error \
  curl --retry 5 --location --fail-early --silent --show-error \
    --output "${GITHUB_WORKSPACE}/install.sh" \
    "https://raw.githubusercontent.com/sourcemeta/jsonschema/main/install"
  chmod +x "${GITHUB_WORKSPACE}/install.sh"
  "${GITHUB_WORKSPACE}/install.sh" 5.0.1
  rm "${GITHUB_WORKSPACE}/install.sh"
  shell: /usr/bin/bash --noprofile --norc -e -o pipefail {0}
---- Fetching the pre-built JSON Schema CLI binary from GitHub Releases
---- Fetching version v5.0.1 from https://github.com/sourcemeta/jsonschema/releases/download/v5.0.1/jsonschema-5.0.1-linux-x8[6](https://github.com/elastic/ingest-dev/actions/runs/13693574903/job/38291107179?pr=5196#step:3:8)_64.zip
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

100 1802k  100 1802k    0     0  3284k      0 --:--:-- --:--:-- --:--:-- 3284k
Archive:  /tmp/tmp.PxzPx[7](https://github.com/elastic/ingest-dev/actions/runs/13693574903/job/38291107179?pr=5196#step:3:9)kxyk/artifact.zip
   creating: /tmp/tmp.PxzPx7kxyk/out/jsonschema-5.0.1-linux-x[8](https://github.com/elastic/ingest-dev/actions/runs/13693574903/job/38291107179?pr=5196#step:3:10)6_64/include/
   creating: /tmp/tmp.PxzPx7kxyk/out/jsonschema-5.0.1-linux-x86_64/include/boost/
...
install: cannot change permissions of ‘/usr/local/bin’: Operation not permitted

It seems

jsonschema/install

Lines 33 to 34 in 1b9a5df

	install -d -m 0755 "$OUTPUT/bin"
	install -v -m 0755 "$TMP/out/jsonschema-$VERSION-$PACKAGE_PLATFORM_NAME-$ARCH/bin/jsonschema" "$OUTPUT/bin"

It worked fine 3 days ago:

  Image: ubuntu-24.04
  Version: 20250223.1.0
  Included Software: https://github.com/actions/runner-images/blob/ubuntu24/20250223.1/images/ubuntu/Ubuntu2404-Readme.md
  Image Release: https://github.com/actions/runner-images/releases/tag/ubuntu24%2F20250223.1

But stopped working with the following runner version

  Image: ubuntu-24.04
  Version: 20250302.1.0
  Included Software: https://github.com/actions/runner-images/blob/ubuntu24/20250302.1/images/ubuntu/Ubuntu2404-Readme.md
  Image Release: https://github.com/actions/runner-images/releases/tag/ubuntu24%2F20250302.1

See changes actions/runner-images@c414ecd

[v1v]

I also created actions/runner-images#11736

[v1v]

#250 is a potential fix so it uses the native support for GITHUB_PATH in GH actions

[jviotti]

Hi @v1v , thanks a lot for catching this and for the quick fix! Let me do a CLI release

[jviotti]

Released as v7.0.1: https://github.com/sourcemeta/jsonschema/releases/tag/v7.0.1. Thanks again!

[jviotti]

I'll close it now, but please re-open if you find any other issues! 🙏🏻

[daniel-white]

@jviotti for some reason the change didn't land in my path so im getting a different jsonschema binary

[jviotti]

I wonder if we just need a sudo to get written permissions on /usr/local. Can you guys confirm sudo works and we don't actually need a password for it?

[jviotti]

Can you try v7.0.2? Looks like this #251 worked!

[v1v]

Thanks @jviotti for your quick release and also the fix of the fix 🙏

[kleinschmidt]

7.0.2 is working for us as well!

[jviotti]

Any time, and thank you both for confirming and for the fixes! 🚀