[#40] log目录供宿主机其他程序可写

src/log/fluent-bit/build/start-fluent-bit.sh

@@ -77,7 +77,20 @@ cp -r /tmp/flb/etc/* /etc/fluent-bit/
 
 # Create logs/buffers dirs
 mkdir -p /logs/train /logs/infer /buffers
-chmod 755 /logs/train /logs/infer /buffers
+
+# 控制日志目录权限：默认对宿主 bind mount 目录采用 1777（可由环境变量关闭）
+: "${ARGUS_LOGS_WORLD_WRITABLE:=1}"
+if [[ "${ARGUS_LOGS_WORLD_WRITABLE}" == "1" ]]; then
+  chmod 1777 /logs/train /logs/infer || true
+else
+  chmod 755 /logs/train /logs/infer || true
+fi
+
+# 缓冲目录仅供进程使用，不对外开放写入
+chmod 770 /buffers || true
+
+# 目录属主设置为 fluent-bit（不影响 1777 粘滞位）
+chown -R fluent-bit:fluent-bit /logs /buffers 2>/dev/null || true
 
 # Wait for Elasticsearch via bash /dev/tcp to avoid curl dependency
 echo "[INFO] Waiting for Elasticsearch to be ready (tcp ${ES_HOST}:${ES_PORT})..."