refactor: change dir permission.

.dockerignore

@@ -1,2 +1,3 @@
 .git*
-.idea*
+.idea*
+*.md

.github/workflows/build-and-push.yml

@@ -7,7 +7,7 @@ on:
     inputs:
       dockerImageTag:
         description: 'Image Tag'
-        default: 'v2.0.1-dev'
+        default: 'v2.0.3-dev'
         required: true
       dockerImageTagWithLatest:
         description: '是否发布latest tag（正式发版时选择，测试版本切勿选择）'

apps/maxkb/settings/lib.py

@@ -15,7 +15,7 @@ from maxkb.const import CONFIG, PROJECT_DIR, LOG_DIR
 # celery相关配置
 celery_data_dir = os.path.join(PROJECT_DIR, 'data', 'celery_task')
 if not os.path.exists(celery_data_dir) or not os.path.isdir(celery_data_dir):
-    os.makedirs(celery_data_dir)
+    os.makedirs(celery_data_dir, 0o700, exist_ok=True)
 # Celery using redis as broker
 redis_celery_once_db = CONFIG.get("REDIS_DB")
 redis_celery_db = CONFIG.get('REDIS_DB')

apps/ops/celery/utils.py

@@ -33,8 +33,8 @@ def get_celery_periodic_task(task_name):
     return task
 
 
-def make_dirs(name, mode=0o755, exist_ok=False):
-    """ 默认权限设置为 0o755 """
+def make_dirs(name, mode=0o700, exist_ok=False):
+    """ 默认权限设置为 0o700 """
     return os.makedirs(name, mode=mode, exist_ok=exist_ok)
 
 

apps/tools/serializers/tool.py

@@ -62,7 +62,7 @@ def get_file_name():
     file_name = f"{uuid.uuid7()}"
     pylint_dir = os.path.join(PROJECT_DIR, 'data', 'pylint')
     if not os.path.exists(pylint_dir):
-        os.makedirs(pylint_dir)
+        os.makedirs(pylint_dir, 0o700, exist_ok=True)
     return os.path.join(pylint_dir, file_name)