Yuvipanda has uploaded a new change for review.
https://gerrit.wikimedia.org/r/87080
Change subject: Add vagrant user to sudoers by default
......................................................................
Add vagrant user to sudoers by default
This should not be a security risk by default - since the
vagrant user is passwordless, and does not have any keys
authorized for it, and hence can not grant outsiders access.
Change-Id: I91344399e035d31a70ae0d3a5d416f8bbaded862
---
A modules/labs_vagrant/files/vagrant-sudoers
M modules/labs_vagrant/manifests/init.pp
2 files changed, 9 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/80/87080/1
diff --git a/modules/labs_vagrant/files/vagrant-sudoers
b/modules/labs_vagrant/files/vagrant-sudoers
new file mode 100644
index 0000000..f090f45
--- /dev/null
+++ b/modules/labs_vagrant/files/vagrant-sudoers
@@ -0,0 +1 @@
+vagrant ALL=(ALL) NOPASSWD:ALL
\ No newline at end of file
diff --git a/modules/labs_vagrant/manifests/init.pp
b/modules/labs_vagrant/manifests/init.pp
index 17e2cbb..86e7d1c 100644
--- a/modules/labs_vagrant/manifests/init.pp
+++ b/modules/labs_vagrant/manifests/init.pp
@@ -4,6 +4,14 @@
managehome => true
}
+ file { '/etc/sudoers.d/vagrant':
+ source => 'puppet:///modules/labs_vagrant/vagrant-sudoers',
+ ownder => 'root',
+ group => 'root',
+ mode => '0440',
+ require => User['vagrant']
+ }
+
git::clone { 'vagrant':
directory => '/mnt/vagrant/',
origin => 'https://gerrit.wikimedia.org/r/mediawiki/vagrant'
--
To view, visit https://gerrit.wikimedia.org/r/87080
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I91344399e035d31a70ae0d3a5d416f8bbaded862
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Yuvipanda <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
