Add solr-permissions.conf and override tomcat9 permissions to allow solr-tomcat

read-write access to /var/lib/solr.

Closes: #919638

debian/solr-permissions.conf

+[Service]
+ReadWritePaths=/var/lib/solr/

debian/solr-tomcat.install

 debian/solr-tomcat.xml /etc/solr/
 debian/tomcat.policy /etc/solr/
+debian/solr-permissions.conf /etc/systemd/system/tomcat9.d/

[Bascht]

Sorry for commenting inline over here, but bugs.debian.org would just refuse my email:

I think the systemd overrides need to go into a folder with the name ..d – so

/etc/systemd/system/tomcat9.d

should be

/etc/systemd/system/tomcat9.service.d

I can confirm that after renaming the folder, issuing "systemctl daemon-reload" and restarting tomcat9, solr is able to write to /var/lib/solr again.

Best, Bascht

[Emmanuel Bourg]

Looking at the other overrides in Debian it seems you are right:

~$ apt-file find /etc/systemd/system/ | grep '\.d'
lava-dispatcher: /etc/systemd/system/systemd-udevd.service.d/override.conf
mariadb-plugin-tokudb: /etc/systemd/system/mariadb.service.d/tokudb.conf
solr-tomcat: /etc/systemd/system/tomcat9.d/solr-permissions.conf

Could you file a new bug to get this fixed?

[Markus Koschany]

Thanks for noticing us. I will take care of it later.