generate-changelog fails with permissions issue of file created

[Tylorjg]

generate-changelog fails with permissions issue of file created

[ragchuck]

I have a similar issue but with the snapshot and execute-sql in. I use the outputFile parameter to specify the filename, but the github-action fails to execute.

[2023-07-13 12:53:33] INFO [liquibase.integration] Starting command execution.
[2023-07-13 12:53:33] FINE [liquibase.configuration] Found 'liquibase.outputFile' configuration of 'badm-postgres-pk_business.json'
    command argument '--output-file' of 'badm-postgres-pk_business.json'
[2023-07-13 12:53:33] SEVERE [liquibase.integration] badm-postgres-pk_business.json
java.nio.file.AccessDeniedException: badm-postgres-pk_business.json
	at java.base/sun.nio.fs.UnixException.translateToIOException(Unknown Source)
	at java.base/sun.nio.fs.UnixException.rethrowAsIOException(Unknown Source)
	at java.base/sun.nio.fs.UnixException.rethrowAsIOException(Unknown Source)
	at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(Unknown Source)
	at java.base/java.nio.file.spi.FileSystemProvider.newOutputStream(Unknown Source)
	at java.base/java.nio.file.Files.newOutputStream(Unknown Source)
	at liquibase.resource.DirectoryPathHandler.createResource(DirectoryPathHandler.java:52)
	at liquibase.resource.PathHandlerFactory.createResource(PathHandlerFactory.java:52)
	at liquibase.resource.PathHandlerFactory.openResourceOutputStream(PathHandlerFactory.java:95)
	at liquibase.integration.commandline.CommandRunner.call(CommandRunner.java:51)
	at liquibase.integration.commandline.CommandRunner.call(CommandRunner.java:24)
	at picocli.CommandLine.executeUserObject(CommandLine.java:2041)
	at picocli.CommandLine.access$1500(CommandLine.java:148)
	at picocli.CommandLine$RunLast.executeUserObjectOfLastSubcommandWithSameParent(CommandLine.java:2461)
	at picocli.CommandLine$RunLast.handle(CommandLine.java:2453)
	at picocli.CommandLine$RunLast.handle(CommandLine.java:2415)
	at picocli.CommandLine$AbstractParseResultHandler.execute(CommandLine.java:2273)
	at picocli.CommandLine$RunLast.execute(CommandLine.java:2417)
	at picocli.CommandLine.execute(CommandLine.java:2170)
	at liquibase.integration.commandline.LiquibaseCommandLine.lambda$execute$2(LiquibaseCommandLine.java:381)
	at liquibase.Scope.child(Scope.java:206)
	at liquibase.Scope.child(Scope.java:182)
	at liquibase.integration.commandline.LiquibaseCommandLine.lambda$execute$3(LiquibaseCommandLine.java:356)
	at liquibase.Scope.child(Scope.java:206)
	at liquibase.Scope.child(Scope.java:182)
	at liquibase.integration.commandline.LiquibaseCommandLine.execute(LiquibaseCommandLine.java:354)
	at liquibase.integration.commandline.LiquibaseCommandLine.main(LiquibaseCommandLine.java:[94](https://atc-github.azure.cloud.bmw/q447823/badm-master/runs/3973955?check_suite_focus=true#step:8:95))
	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
	at java.base/java.lang.reflect.Method.invoke(Unknown Source)
	at liquibase.integration.commandline.LiquibaseLauncher.main(LiquibaseLauncher.java:[107](https://atc-github.azure.cloud.bmw/q447823/badm-master/runs/3973955?check_suite_focus=true#step:8:108))

same issue when providing path like /github/workspace, where the workspace is mounted....

[ragchuck]

after fiddling around I came up with a temporary directory that is created with -m777, where I can point the outputFile parameter, then liquibase can write the files.

Github Actions don't recommend to overwrite the default root user as explained here:

Note: GitHub Actions must be run by the default Docker user (root). Ensure your Dockerfile does not set the USER instruction, otherwise you will not be able to access GITHUB_WORKSPACE.
Source: https://docs.github.com/en/actions/using-github-hosted-runners/about-github-hosted-runners#docker-container-filesystem

But the Liquibase container runs with USER 'liquibase', as defined here: https://github.com/liquibase/docker/blob/main/Dockerfile#L46