Dzahn has submitted this change and it was merged.
Change subject: Add vagrant user to sudoers by default
......................................................................
Add vagrant user to sudoers by default
This should not be a security risk by default - since the
vagrant user is passwordless, and does not have any keys
authorized for it, and hence can not grant outsiders access.
Change-Id: I91344399e035d31a70ae0d3a5d416f8bbaded862
---
A modules/labs_vagrant/files/vagrant-sudoers
M modules/labs_vagrant/manifests/init.pp
2 files changed, 9 insertions(+), 0 deletions(-)
Approvals:
jenkins-bot: Verified
Dzahn: Looks good to me, approved
diff --git a/modules/labs_vagrant/files/vagrant-sudoers
b/modules/labs_vagrant/files/vagrant-sudoers
new file mode 100644
index 0000000..f090f45
--- /dev/null
+++ b/modules/labs_vagrant/files/vagrant-sudoers
@@ -0,0 +1 @@
+vagrant ALL=(ALL) NOPASSWD:ALL
\ No newline at end of file
diff --git a/modules/labs_vagrant/manifests/init.pp
b/modules/labs_vagrant/manifests/init.pp
index 17e2cbb..17b63d0 100644
--- a/modules/labs_vagrant/manifests/init.pp
+++ b/modules/labs_vagrant/manifests/init.pp
@@ -4,6 +4,14 @@
managehome => true
}
+ file { '/etc/sudoers.d/vagrant':
+ source => 'puppet:///modules/labs_vagrant/vagrant-sudoers',
+ owner => 'root',
+ group => 'root',
+ mode => '0440',
+ require => User['vagrant']
+ }
+
git::clone { 'vagrant':
directory => '/mnt/vagrant/',
origin => 'https://gerrit.wikimedia.org/r/mediawiki/vagrant'
--
To view, visit https://gerrit.wikimedia.org/r/87080
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I91344399e035d31a70ae0d3a5d416f8bbaded862
Gerrit-PatchSet: 3
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Yuvipanda <[email protected]>
Gerrit-Reviewer: Dzahn <[email protected]>
Gerrit-Reviewer: Ryan Lane <[email protected]>
Gerrit-Reviewer: coren <[email protected]>
Gerrit-Reviewer: jenkins-bot
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
