snowflake-proxy: jailed process prevents command reading geoip files

[MatzFan]

Package Name

snowflake-proxy

Maintainer

(@PolynomialDivision)

OpenWrt Version

25.12.0-rc5

OpenWrt Target/Subtarget

mediatek/filogic

Steps to Reproduce

• install snowflake-proxy package
• install tor-geoip package (this creates 2 files: /usr/share/tor/geoip and /usr/share/torgeoip6)
• edit /etc/init.d/snowflake-proxy script and add -metrics flag as command parameter
• restart proxy: /etc/init.d/snowflake-proxy
• read logs: logread|grep snowflake-proxy

Logs should include output like the following:-

<timestamp> Using geoip file  /usr/share/tor/geoip  with checksum 4bdff9c5c91eb87685fb637e8cbcb1f5b0cab970
<timestamp> Loaded  372677  entries into table
<timestamp> Using geoip file  /usr/share/tor/geoip6  with checksum 265f349d046819240b0a930ba50b2a4274c2b362
<timestamp> Loaded  286480  entries into table
<timestamp> Proxy starting

Actual Behaviour

Logs look like this:

<timestamp> Error loading geoip db for country based metrics: open /usr/share/tor/geoip: no such file or directory
<timestamp> Proxy starting

If I comment out this line in the init script and restart the proxy the files are read fine.

Note also it should be possible to specify non-default absolute file paths to the 2 files in the init script via the command line parameters -geoipdb and -geoipdb6 respectively - see the command help here.

Related forum question here. If I get an answer I'll do a PR!

Confirmation Checklist

• The package is maintained in this repository.
• I understand that issues related to the base OpenWrt repository or LuCI repository will be closed.
• I am reporting an issue for OpenWrt, not an unsupported fork.

[PolynomialDivision]

What about adding procd_add_jail_mount or procd_add_jail_mount_rw like done here:

packages/net/transmission/files/transmission.init

Lines 164 to 176 in dde3a69

	procd_add_jail transmission log
	procd_add_jail_mount "$config_file"
	procd_add_jail_mount_rw "$config_dir/resume"
	procd_add_jail_mount_rw "$config_dir/torrents"
	procd_add_jail_mount_rw "$config_dir/blocklists"
	procd_add_jail_mount_rw "$config_dir/stats.json"
	procd_add_jail_mount_rw "$download_dir"
	[ "$incomplete_dir_enabled" = "1" ] && procd_add_jail_mount_rw "$incomplete_dir"
	[ "$watch_dir_enabled" = "1" ] && procd_add_jail_mount_rw "$watch_dir"
	web_home="${web_home:-/usr/share/transmission/public_html}"
	[ -d "$web_home" ] && procd_add_jail_mount "$web_home"
	[ -f "$ca_bundle_file" ] && procd_add_jail_mount "$ca_bundle_file"
	procd_close_instance

[MatzFan]

It was that simple, I'll do a PR