Skip to content

Another Sudo User Can Not Install Extensions #7358

Closed
Closed
Another Sudo User Can Not Install Extensions#7358
Labels
bugSomething isn't workingtriageThis issue needs to be triaged by a maintainer

Description

@navidbakhtiary
navidbakhtiary
opened on May 26, 2025

Is there an existing issue for this?

  • I have searched the existing issues

OS/Web Information

  • Web Browser: Chrome & Edge
  • Local OS: Windows
  • Remote OS: Ubuntu
  • Remote Architecture: x64
  • code-server --version: 1.95.3

Steps to Reproduce

Running code-server by another sudo user(not root) does not allow for the installation of extensions and shows error 403 on the UI.
Run code-server --install-extension extension_id with or without sudo by the user, installs the extensions in /root/.local/share/code-server/extensions.
The only way is to change the owner of ~/.local/share/code-server/extensions and install the extension by importing the .vsix file. Still get error 403 with changing the owner.

Expected

I run code-server as another sudo user and I was expected to install extensions through UI easily.

Actual

It gives me error 403 on the UI and does not allow me to install any extension.

Logs



Screenshot/Video


No response


Does this bug reproduce in native VS Code?


No, this works as expected in native VS Code


Does this bug reproduce in GitHub Codespaces?


I did not test GitHub Codespaces


Are you accessing code-server over a secure context?


    

  •  I am using a secure context.
    • 



Notes


No response
Activity
  1. navidbakhtiary
    added 
    bugSomething isn't working
     
    triageThis issue needs to be triaged by a maintainer
     on May 26, 2025
  2. code-asher commented on May 27, 2025 
    @code-asher
    code-asher
    on May 27, 2025
    Member
    code-server runs everything as the user and it will not try to elevate permissions.
    

    The best fix is probably to use use group permissions, if you need multiple users modifying the same directory.
  3. navidbakhtiary commented on Jun 2, 2025 
    @navidbakhtiary
    navidbakhtiary
    on Jun 2, 2025
    Author
    There is a question.  Why does code-server not install the extensions in the user folder(~/.local/share/code-server/extensions) when I run code-server as another user(not root)?
  4. code-asher commented on Jun 2, 2025 
    @code-asher
    code-asher
    on Jun 2, 2025
    Member
    By default,  it should install extensions in that user's home directory (see user-data-dir).  For example with sudo:
    

    $ sudo /tmp/code-server/bin/code-server 
[2025-06-02T19:26:40.900Z] info  code-server 4.100.2 9dd999ba78032163d606fadd531de5e1fcae5443
[2025-06-02T19:26:40.901Z] info  Using user-data-dir /root/.local/share/code-server
[2025-06-02T19:26:40.910Z] info  Using config file /root/.config/code-server/config.yaml

    

    And without sudo:
    

    $ /tmp/code-server/bin/code-server 
[2025-06-02T19:26:48.160Z] info  code-server 4.100.2 9dd999ba78032163d606fadd531de5e1fcae5443
[2025-06-02T19:26:48.161Z] info  Using user-data-dir /home/coder/.local/share/code-server
[2025-06-02T19:26:48.172Z] info  Using config file /home/coder/.config/code-server/config.yaml

    

    If your non-sudo command is still using /root/.local, I would guess that either --user-data-dir or --extensions-dir is set (either as a flag or in the config file), or the non-root user's home is /root for some reason?
    

    $ sudo printenv HOME
/root
$ printenv HOME
/home/coder

    

    What do you get for the above commands?  And what do the permissions of all the related directories look like?
  5. navidbakhtiary commented on Jun 4, 2025 
    @navidbakhtiary
    navidbakhtiary
    on Jun 4, 2025
    Author
    /tmp/code-server/bin/code-server is not exist.
    
I have a code-server executable binary file /usr/bin/code-server but I am not sure it is the executer file or not.
    
Code-server is running as a service with my sudo_user(not root).
    

    Status of my service is:
    

    ● code-server.service - Code Server
     Loaded: loaded (/etc/systemd/system/code-server.service; enabled; preset: enabled)
     Active: active (running) since Mon 2025-06-02 09:56:21 UTC; 1 day 23h ago
   Main PID: 2010591 (node)
      Tasks: 79 (limit: 4540)
     Memory: 937.1M (peak: 2.3G)
        CPU: 1h 59min 1.854s
     CGroup: /system.slice/code-server.service
             ├─2010591 /usr/lib/code-server/lib/node /usr/lib/code-server --host 127.0.0.1 --port 8080
             ├─2010609 /usr/lib/code-server/lib/node /usr/lib/code-server/out/node/entry
             ├─2013065 /usr/lib/code-server/lib/node /usr/lib/code-server/lib/vscode/out/bootstrap-fork --type=ptyHost --logsPath /home/sudo_user/.local/share/code-server/logs/20250602T095628

    

    And:
    

    $ sudo printenv HOME
    
/root
    
$ printenv HOME
    
/home/sudo_user
  6. code-asher commented on Jun 4, 2025 
    @code-asher
    code-asher
    on Jun 4, 2025
    Member
    Oh right yeah sorry /tmp/code-server/bin/code-server is just where I have mine, it is not a common place for it.
    

    Hmm yeah I would expect extensions to be in /home/sudo_user/.local/share/code-server/extensions, in that case.  But you say it is trying to use /root/.local/share/code-server/extensions?  Can you post the code-server output from the journal?
  7. navidbakhtiary commented on Jun 6, 2025 
    @navidbakhtiary
    navidbakhtiary
    on Jun 6, 2025
    Author
    In the beginning, it could not install extensions, and I got an error of 403. But the root directory had the extensions I wanted to install with sudo_user. I think each time I try to install an extension for sudo_user, when a 403 error happens, it installs it for the root user.
    

    After I changed the owner of /home/sudo_user/.local/share/code-server/extensions to sudo_user, it can execute and install extensions of sudo_user.
    

    It's weird.
    

    Jun 03 07:28:51 ubuntu code-server[2010591]: [07:28:51] [127.0.0.1][6dc6b42a][ExtensionHostConnection] The client has reconnected.
    
Jun 03 07:28:55 ubuntu code-server[2010591]: [07:28:55] [127.0.0.1][1ed8cdfa][ManagementConnection] The client has reconnected.
    
Jun 03 07:32:04 ubuntu code-server[2010591]: [07:32:04] [127.0.0.1][6dc6b42a][ExtensionHostConnection] The client has reconnected.
    
Jun 03 07:32:11 ubuntu code-server[2010591]: [07:32:11] [127.0.0.1][1ed8cdfa][ManagementConnection] The client has reconnected.
    
Jun 03 08:43:05 ubuntu code-server[2010591]: [08:43:05] [File Watcher (node.js)] Watcher shutdown because watched path got deleted
    
Jun 03 08:49:40 ubuntu code-server[2010591]: [08:49:40] [File Watcher (node.js)] Watcher shutdown because watched path got deleted
    
Jun 03 11:35:55 ubuntu code-server[2010591]: [11:35:55] [127.0.0.1][6dc6b42a][ExtensionHostConnection] The client has reconnected.
    
Jun 03 11:35:59 ubuntu code-server[2010591]: [11:35:59] [127.0.0.1][1ed8cdfa][ManagementConnection] The client has reconnected.
    
Jun 03 11:59:55 ubuntu sudo[2230388]:    sudo_user : TTY=pts/7 ; PWD=/var/www/AF_project ; USER=root ; COMMAND=/usr/bin/nano /etc/postgresql/16/main/postgresql.conf
    
Jun 03 11:59:55 ubuntu sudo[2230388]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
    
Jun 03 12:06:14 ubuntu code-server[2010591]: [12:06:14] [File Watcher (node.js)] Watcher shutdown because watched path got deleted
    
Jun 03 12:07:21 ubuntu sudo[2230388]: pam_unix(sudo:session): session closed for user root
    
Jun 03 12:07:29 ubuntu sudo[2232400]:    sudo_user : TTY=pts/7 ; PWD=/var/www/AF_project  ; USER=root ; COMMAND=/usr/bin/nano /etc/postgresql/16/main/pg_hba.conf
    
Jun 03 12:07:29 ubuntu sudo[2232400]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
    
Jun 03 12:08:12 ubuntu sudo[2232400]: pam_unix(sudo:session): session closed for user root
    
Jun 03 12:08:15 ubuntu sudo[2232623]:    sudo_user : TTY=pts/7 ; PWD=/var/www/AF_project  ; USER=root ; COMMAND=/usr/bin/systemctl restart postgresql
    
Jun 03 12:08:15 ubuntu sudo[2232623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1000)
    
Jun 03 12:08:22 ubuntu sudo[2232623]: pam_unix(sudo:session): session closed for user root
    
Jun 03 12:45:18 ubuntu code-server[2010591]: [12:45:18] [File Watcher (node.js)] Watcher shutdown because watched path got deleted
    
Jun 03 15:18:25 ubuntu code-server[2010591]: [15:18:25] [127.0.0.1][1ed8cdfa][ManagementConnection] The client has disconnected, will wait for reconnection 3h before disposing...
    
Jun 03 18:18:10 ubuntu code-server[2010591]: [18:18:10] [127.0.0.1][6dc6b42a][ExtensionHostConnection] <2174146> Extension Host Process exited with code: 0, signal: null.
    
Jun 03 18:18:33 ubuntu code-server[2010591]: [18:18:33] [127.0.0.1][1ed8cdfa][ManagementConnection] The reconnection grace time of 3h has expired, so the connection will be disposed.
    
Jun 06 08:43:45 ubuntu code-server[2010591]: File not found: /usr/lib/code-server/lib/vscode/node_modules/vsda/rust/web/vsda_bg.wasm
    
Jun 06 08:43:45 ubuntu code-server[2010591]: File not found: /usr/lib/code-server/lib/vscode/node_modules/vsda/rust/web/vsda.js
    
Jun 06 08:43:45 ubuntu code-server[2010591]: [08:43:45] [127.0.0.1][3982a23f][ManagementConnection] New connection established.
    
Jun 06 08:43:47 ubuntu code-server[2010591]: [08:43:47] [127.0.0.1][f11a8fd9][ExtensionHostConnection] New connection established.
    
Jun 06 08:43:47 ubuntu code-server[2010591]: [08:43:47] [127.0.0.1][f11a8fd9][ExtensionHostConnection] <2340489> Launched Extension Host Process.
    
Jun 06 08:43:53 ubuntu code-server[2010591]: [08:43:53] Getting Manifest... bradlc.vscode-tailwindcss
    
Jun 06 08:43:53 ubuntu code-server[2010591]: [08:43:53] Installing extension: bradlc.vscode-tailwindcss {
    
Jun 06 08:43:53 ubuntu code-server[2010591]:   productVersion: { version: '1.95.3', date: '2024-11-15T19:35:09.428Z' },
    
Jun 06 08:43:53 ubuntu code-server[2010591]:   pinned: false,
    
Jun 06 08:43:53 ubuntu code-server[2010591]:   operation: 3,
    
Jun 06 08:43:53 ubuntu code-server[2010591]:   isApplicationScoped: false,
    
Jun 06 08:43:53 ubuntu code-server[2010591]:   installOnlyNewlyAddedFromExtensionPack: true,
    
Jun 06 08:43:53 ubuntu code-server[2010591]:   profileLocation: gr {
    
Jun 06 08:43:53 ubuntu code-server[2010591]:     scheme: 'file',
    
Jun 06 08:43:53 ubuntu code-server[2010591]:     authority: '',
    
Jun 06 08:43:53 ubuntu code-server[2010591]:     path: '/home/sudo_user/.local/share/code-server/extensions/extensions.json',
    
Jun 06 08:43:53 ubuntu code-server[2010591]:     query: '',
    
Jun 06 08:43:53 ubuntu code-server[2010591]:     fragment: '',
    
Jun 06 08:43:53 ubuntu code-server[2010591]:     _formatted: 'file:///home/sudo_user/.local/share/code-server/extensions/extensions.json',
    
Jun 06 08:43:53 ubuntu code-server[2010591]:     _fsPath: '/home/sudo_user/.local/share/code-server/extensions/extensions.json'
    
Jun 06 08:43:53 ubuntu code-server[2010591]:   }
    
Jun 06 08:43:53 ubuntu code-server[2010591]: }
    
Jun 06 08:43:56 ubuntu code-server[2010591]: [08:43:56] Could not load vsce-sign module Cannot find package '@vscode/vsce-sign' imported from /usr/lib/code-server/lib/vscode/out/server-main.js
    
Jun 06 08:43:56 ubuntu code-server[2010591]: [08:43:56] Extension signature verification is not done: bradlc.vscode-tailwindcss
    
Jun 06 08:43:56 ubuntu code-server[2010591]: [08:43:56] Extracted extension to file:///home/sudo_user/.local/share/code-server/extensions/bradlc.vscode-tailwindcss-0.14.21-universal: bradlc.vscode-tailwindcss
    
Jun 06 08:43:56 ubuntu code-server[2010591]: [08:43:56] Renamed to /home/sudo_user/.local/share/code-server/extensions/bradlc.vscode-tailwindcss-0.14.21-universal
    
Jun 06 08:43:56 ubuntu code-server[2010591]: [08:43:56] Marked extension as uninstalled bradlc.vscode-tailwindcss-0.14.20-universal
    
Jun 06 08:43:56 ubuntu code-server[2010591]: [08:43:56] Extension installed successfully: bradlc.vscode-tailwindcss file:///home/sudo_user/.local/share/code-server/extensions/extensions.json
  8. code-asher commented on Jun 6, 2025 
    @code-asher
    code-asher
    on Jun 6, 2025
    Member
    Hard to say why /home/sudo_user/.local/share/code-server/extensions had the wrong owner, but I would guess some kind of configuration issue.
    

    Looks like everything is working now though?
  9. navidbakhtiary commented on Jun 6, 2025 
    @navidbakhtiary
    navidbakhtiary
    on Jun 6, 2025
    Author
    The problem was unexpected, but I am grateful to find a solution for it.
    
It is a great tool, and it helps me a lot to work with my server when I encounter network/vpn restrictions.
  10. coder
    locked and limited conversation to collaborators on Jun 9, 2025
  11. code-asher
    converted this issue into a discussion #7371 on Jun 9, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Metadata
Metadata
Assignees
No one assigned
    Labels
    bugSomething isn't workingtriageThis issue needs to be triaged by a maintainer
    Type
    No type
    Projects
    No projects
      Milestone
      No milestone
      Relationships
      None yet
      Development
      No branches or pull requests
      Issue actions