Paths

Table of Contentst

Differential D923

Create software build account
ClosedPublic
Actions

Authored by dereckson on Feb 23 2017, 18:26.

Tags

None

Referenced Files

	Unknown Object (File)
	Wed, Nov 13, 04:02

	Unknown Object (File)
	Thu, Oct 31, 04:48

	Unknown Object (File)
	Thu, Oct 31, 01:40

	Unknown Object (File)
	Sun, Oct 27, 14:09

	Unknown Object (File)
	Sun, Oct 27, 14:09

	Unknown Object (File)
	Sun, Oct 27, 14:09

	Unknown Object (File)
	Thu, Oct 24, 08:08

	Unknown Object (File)
	Tue, Oct 22, 05:48

Subscribers

None

Details

Reviewers

Maniphest Tasks

T1159: Deploy Wraith on Eglide

Commits

rOPS27562546c554: Create software build account

Summary

Account 'builder' can be used to install software, so a non privileged
account is used to operations like git clone, ./configure or make.

The group 'deployment' will contain deployment accounts, and users
allowed to sudo to these groups.

Test Plan

check builder account exists
check deployment group exists
test sudo -u builder whoami

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

dereckson created this revision.Feb 23 2017, 18:26

Harbormaster completed remote builds in B1422: Diff 2342.Feb 23 2017, 18:26

dereckson edited the summary of this revision. (Show Details)Feb 23 2017, 18:26

dereckson added a task: T1159: Deploy Wraith on Eglide.

Salt master

$ cd /opt/nasqueron-operations
$ arc patch D923
$ salt '*' saltutil.refresh_pillar
$ salt eglide state.apply roles/shellserver/users/
$ salt eglide state.apply roles/shellserver/userland-software/account

Eglide

$ id
uid=5001(dereckson) gid=5001(dereckson) groups=5001(dereckson),0(wheel),200(shell),828(deployment),829(nasqueron-irc)
$ sudo -u builder whoami
builder

This revision is now accepted and ready to land.Feb 23 2017, 18:58

Fix sudoers path

Closed by commit rOPS27562546c554: Create software build account (authored by dereckson, committed by dereckson). · Explain WhyFeb 23 2017, 19:01

This revision was automatically updated to reflect the committed changes.

dereckson mentioned this in T1310: Merge deploy and deployment groups.Nov 15 2018, 20:22

Revision Contents
Changeset List

Path

Size

1 line

1 line

pillar/

users/

shellgroups.sls

5 lines

roles/

shellserver/

userland-software/

36 lines

files/

builder.sudoers

17 lines

1 line

Diff 2344

GIDs

Loading...

UIDs

Loading...

pillar/users/shellgroups.sls

Loading...

roles/shellserver/userland-software/account.sls

Loading...

roles/shellserver/userland-software/files/builder.sudoers

Loading...

roles/shellserver/userland-software/init.sls

Loading...