Ori.livneh has uploaded a new change for review.
https://gerrit.wikimedia.org/r/189604
Change subject: role::ve: allow wikidev to (re-)start hhvm, xvfb and chromium
......................................................................
role::ve: allow wikidev to (re-)start hhvm, xvfb and chromium
wikidev on app servers can already restart HHVM; this allows Roan to restart
xvfb and Chromium as well, if necessary.
Change-Id: Ie7bb4f142fa54aeec0a05e81c28c44c68d38ebba
---
M manifests/role/ve.pp
1 file changed, 11 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/04/189604/1
diff --git a/manifests/role/ve.pp b/manifests/role/ve.pp
index 00716a5..da9c295 100644
--- a/manifests/role/ve.pp
+++ b/manifests/role/ve.pp
@@ -43,6 +43,17 @@
],
}
+ sudo::group { 'wikidev':
+ privileges => [
+ 'ALL = (root) NOPASSWD: /sbin/restart hhvm',
+ 'ALL = (root) NOPASSWD: /sbin/start hhvm',
+ 'ALL = (root) NOPASSWD: /sbin/restart chromium',
+ 'ALL = (root) NOPASSWD: /sbin/start chromium',
+ 'ALL = (root) NOPASSWD: /sbin/restart xvfb',
+ 'ALL = (root) NOPASSWD: /sbin/start xvfb',
+ ],
+ }
+
# vbench is a CLI tool for benchmarking VisualEditor.
# It uses `autobahn` and `twisted` for WebSocket support, which
--
To view, visit https://gerrit.wikimedia.org/r/189604
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ie7bb4f142fa54aeec0a05e81c28c44c68d38ebba
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Ori.livneh <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
