[j-nsp] JUNOS upgrade annoyance...

[Anderson, Charles R]

PR.  It is a bug for a valid config to not work after upgrade, unless the validate procedure catches it first.  So they can either put this check into the validation stage, or chown the script during the upgrade.

On Thu, Aug 01, 2019 at 04:45:05PM +0200, Melchior Aelmans wrote:
> It sounds to me as if you want to file an ER with your Juniper account team
> ;-)
> 
> On Thu, Aug 1, 2019 at 2:59 PM Chris Adams <cma at cmadams.net> wrote:
> 
> > Upgraded JUNOS on an MX last night - I had put a python commit script on
> > there a few months ago.  After the upgrade, the router came up amnesiac,
> > because the commit script has to be owned by root or a super-user.  It
> > was owned by me (a super-user), but JUNOS wouldn't process the config to
> > see that my UID existed and is a super-user.
> >
> > :facepalm:
> >
> > In other words, commit scripts (at least in python) must be owned by
> > root if you want them to work after an upgrade, because no other user
> > exists until after the script runs.  This seems like a shortcoming...