Page MenuHomePhabricator

allow `sudo -u vagrant <command>` on labs-vagrant
Closed, ResolvedPublic

Description

I set up a labs instance with labs-vagrant in November 2013. Everything in /mnt/vagrant on ee-flow-extra.pmtpa.wmflabs is owner:group vagrant:www-data , mode 755 or 644.

This matches MW-vagrant, but since there's no vagrant ssh for labs, when I ssh in I don't have the right permissions. In order to do git checkouts or modify /vagrant/settings.d files I have to sudo su vagrant; bash. I added this to https://wikitech.wikimedia.org/wiki/Labs-vagrant , but it would be cleaner if I could execute sudo -u vagrant <some command> rather than changing users (or executing sudo <some command> as root).


Version: unspecified
Severity: normal

Details

Reference
bz61397

Event Timeline

bzimport raised the priority of this task from to Needs Triage.Nov 22 2014, 2:55 AM
bzimport added a project: Labs-Vagrant.
bzimport set Reference to bz61397.

Change 125523 had a related patch set uploaded by BryanDavis:
labs_vagrant: Allow wikidev group to sudo as vagrant

https://gerrit.wikimedia.org/r/125523

Change 125523 merged by Ori.livneh:
labs_vagrant: Allow wikidev group to sudo as vagrant

https://gerrit.wikimedia.org/r/125523

Tested on wikimania-scholarships.eqiad.wmflabs after forcing a puppet run (sudo puppetd --test --verbose):

$ touch /vagrant/bd808
touch: cannot touch `/vagrant/bd808': Permission denied
$ sudo -u vagrant touch /vagrant/bd808
$ $ ls -l /vagrant/bd808
-rw-r--r-- 1 vagrant vagrant 0 Apr 20 20:44 /vagrant/bd808