Project

General

Profile

Actions

tickets #134654

closed

Elevated privileges on provo-mirror-i-o-o

Added by luc14n0 over 1 year ago. Updated over 1 year ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Servers hosted in Provo
Target version:
-
Start date:
2023-08-26
Due date:
% Done:

100%

Estimated time:

Description

Hello there,

I've grown an interest in helping maintaining systems in the Provo DC,
specially after numerous issues that plagued this side of world, in the past.
And there was no-one awake to hit the magical Restart Button.

Of course I'm going to need much more than restart-button-pressing skills.
But to get to know a system, first thing after gathering information about it,
here and there, is to have the right kind of access to it.

So, here I'm asking for elevated privileges on provo-mirror.i.o.o for starters,
where the debuginfod server is also run and I do happen to have some business
with it.

Actions #1

Updated by crameleon over 1 year ago

  • Category set to Servers hosted in Provo
  • Status changed from New to In Progress
  • Assignee set to crameleon
  • Private changed from Yes to No

Hi,

thanks for showing interest. Usually we grant root access using sudo groups matching the Salt roles of the machine. Since provo-mirror.i.o.o doesn't have any existing roles assigned (seems everything there is set up manually) I will add a minimal debuginfod role for this.

Actions #3

Updated by pjessen_invalid over 1 year ago

luc14n0 wrote:

So, here I'm asking for elevated privileges on provo-mirror.i.o.o for starters,
where the debuginfod server is also run and I do happen to have some business
with it.

I have often wondered why debuginfod is running in provo.

Actions #4

Updated by luc14n0 over 1 year ago

crameleon wrote in #note-1:

Hi,

thanks for showing interest. Usually we grant root access using sudo groups matching the Salt roles of the machine. Since provo-mirror.i.o.o doesn't have any existing roles assigned (seems everything there is set up manually) I will add a minimal debuginfod role for this.

Yeah, not enough salt there. Thanks for the changes!

Actions #5

Updated by luc14n0 over 1 year ago

per@computer.org wrote in #note-3:

I have often wondered why debuginfod is running in provo.

That's a good question. Seems at the very least a bit odd to me.

Actions #6

Updated by crameleon over 1 year ago

  • % Done changed from 0 to 50

Created a debuginfod-admins group in FreeIPA and added your user to it. After the Salt patch is merged and applied you can use it to gain root access from your account using sudo on provo-mirror.i.o.o.

Actions #7

Updated by crameleon over 1 year ago

  • Status changed from In Progress to Resolved
  • % Done changed from 50 to 100

It's done. Let me know should you face any issues.

Actions #8

Updated by luc14n0 over 1 year ago

OK @crameleon, thanks for your trouble.

Actions #9

Updated by luc14n0 over 1 year ago

luc14n0 wrote in #note-5:

per@computer.org wrote in #note-3:

I have often wondered why debuginfod is running in provo.

That's a good question. Seems at the very least a bit odd to me.

For me, a plausible explanation would be to lessen the burden on the Nuremberg DC,
I suppose.

Actions #10

Updated by pjessen_invalid over 1 year ago

luc14n0 wrote in #note-9:

luc14n0 wrote in #note-5:

per@computer.org wrote in #note-3:

I have often wondered why debuginfod is running in provo.

That's a good question. Seems at the very least a bit odd to me.

For me, a plausible explanation would be to lessen the burden on the Nuremberg DC,
I suppose.

Haha, then we surely ought to be running a lot more stuff in Provo. Besides, given how little debuginfod is used, not much of an off-load.

Actions #11

Updated by luc14n0 over 1 year ago

per@computer.org wrote in #note-10:

Haha, then we surely ought to be running a lot more stuff in Provo. Besides, given how little debuginfod is used, not much of an off-load.

You got me there :~p

Actions

Also available in: Atom PDF