[#40] log目录供宿主机其他程序可写

src/log/fluent-bit/build/start-fluent-bit.sh

@@ -77,7 +77,20 @@ cp -r /tmp/flb/etc/* /etc/fluent-bit/
 
 # Create logs/buffers dirs
 mkdir -p /logs/train /logs/infer /buffers
-chmod 755 /logs/train /logs/infer /buffers
+
+# 控制日志目录权限：默认对宿主 bind mount 目录采用 1777（可由环境变量关闭）
+: "${ARGUS_LOGS_WORLD_WRITABLE:=1}"
+if [[ "${ARGUS_LOGS_WORLD_WRITABLE}" == "1" ]]; then
+  chmod 1777 /logs/train /logs/infer || true
+else
+  chmod 755 /logs/train /logs/infer || true
+fi
+
+# 缓冲目录仅供进程使用，不对外开放写入
+chmod 770 /buffers || true
+
+# 目录属主设置为 fluent-bit（不影响 1777 粘滞位）
+chown -R fluent-bit:fluent-bit /logs /buffers 2>/dev/null || true
 
 # Wait for Elasticsearch via bash /dev/tcp to avoid curl dependency
 echo "[INFO] Waiting for Elasticsearch to be ready (tcp ${ES_HOST}:${ES_PORT})..."

src/metric/client-plugins/all-in-one-full/plugins/fluent-bit/install.sh

@@ -171,9 +171,16 @@ fi
 # 创建日志和缓冲区目录
 log_info "Creating log and buffer directories..."
 mkdir -p /logs/train /logs/infer /buffers
-chmod 755 /logs/train /logs/infer
-chmod 770 /buffers
-chown -R fluent-bit:fluent-bit /logs /buffers
+# 对共享日志目录采用 1777（含粘滞位），便于宿主任意账号创建文件/目录
+if [[ "${ARGUS_LOGS_WORLD_WRITABLE:-1}" == "1" ]]; then
+    chmod 1777 /logs/train /logs/infer || true
+else
+    chmod 755 /logs/train /logs/infer || true
+fi
+# 缓冲目录限进程使用
+chmod 770 /buffers || true
+# 目录属主设置，不影响 1777 粘滞位
+chown -R fluent-bit:fluent-bit /logs /buffers 2>/dev/null || true
 
 # 启动 Fluent Bit
 log_info "Starting Fluent Bit with configuration from /etc/fluent-bit/"