Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

deploy user doesn't need to be a sudoer if he's the owner of the app's runit directories #6

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

webmat
Copy link

@webmat webmat commented Apr 24, 2013

This pull request is the first part of the fix for issue #2

@bjensen
Copy link

bjensen commented Apr 27, 2013

Lets get this merged in already :-)

@webmat
Copy link
Author

webmat commented Apr 27, 2013

I agree we want this in. But there's one remaining issue I haven't had time to investigate yet. I'm not sure if it's a bug in the runit cookbook.

But setting the owner & group like I do here still doesn't set the ownership of the "supervise" directory for the process (it's still owned by root). Which makes the sv commands fail because of ownership problems.

You're more than welcome to try it out. You need to use my rackbox and appbox cookbooks, same branch name for both.

@bjensen
Copy link

bjensen commented Apr 27, 2013

Sounds like it could be related to this:

http://tickets.opscode.com/browse/COOK-1136

@teohm
Copy link
Owner

teohm commented May 2, 2013

@webmat any updates on your investigation?

@bjensen, @webmat, I plan to experiment another alternative, although I'm not sure if this is a good practice: that is to update sudoer config, and allow users in deploy group to run sv without password.

See example: http://www.cyberciti.biz/tips/allow-a-normal-user-to-run-commands-as-root.html

@webmat
Copy link
Author

webmat commented May 2, 2013

To be honest, we're going to leave the deploy user a sudoer for the moment. I haven't had time to look into this yet. It's on my medium term plate, but not for this week or the next :-)

It would be nice if the approach in this link yields positive results. I've put it in my reading queue.

@webmat
Copy link
Author

webmat commented May 2, 2013

Another thing we may want to look into: http://community.opscode.com/cookbooks/deployer

It integrates with Opscode's "users" cookbooks, though. Not Mr Nichol's "user" cookbook. I personally wouldn't mind switching over if you decide to go that route.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants