Restic restore changes original file permissions

[DanielXiao]

I tried to migrate Harbor to a new cluster with Velero 1.5.3 + Restic, but its Postgres Pod did not start properly after restore. The error logs said: FATAL: data directory “/var/lib/postgresql/data” has group or world access, because the permission of /var/lib/postgresql/data was set to 755 after restore. It was 700 in the original persistent volume.
Is it an issue or expected behavior? I can find people are hitting the same error for backup/restore in the same cluster, see https://brianragazzi.wordpress.com/2020/08/14/use-helm-to-deploy-harbor-with-annotations-for-velero/.

[ashish-amarnath]

@DanielXiao I tried to repro this but wasn't successful. Here's what I tried..

[ashish-amarnath]

I am using restic to take volume backups, in case it wasn't clear.

[DanielXiao]

We use different storage classes. I did the test on vSphere CSI storage class, are there any different restore behaviors on that?

[ashish-amarnath]

I am not aware of such differences. But, even if there is any difference, then that won't be coming from Velero.
Are you able to attempt repro with a different storage class?

[ashish-amarnath]

I am going to mark this as answered. Please feel free to reach out if you need more help.

[DanielXiao]

Thank you