Bug 1395195

Summary: [RFE] NFS-Ganesha cluster setup should be able to use sudo instead
Product: Red Hat Gluster Storage Reporter: Niels de Vos <ndevos>
Component: common-haAssignee: Patric Uebele <puebele>
Status: CLOSED WONTFIX QA Contact: storage-qa-internal <storage-qa-internal>
Severity: medium Docs Contact:
Priority: medium    
Version: rhgs-3.2CC: amukherj, apaladug, jthottan, pasik, puebele, rhs-bugs, skoduri, storage-qa-internal
Target Milestone: ---Keywords: FutureFeature, Triaged, ZStream
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-07-09 08:22:05 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
ganesha-ha-sudo.sh none

Description Niels de Vos 2016-11-15 11:47:15 UTC 
Description of problem:
The ganesha-ha.sh script executes many commands and expects root privileges. In many enterprise environments, scripts are not supposed to run as root or surely not able to login over ssh as root. ganesha-ha.sh is no exception and should accommodate for running as non-root with sudo.

Additional info:
Chris Blum has hacked the script to run as non-root where the needed commands have been prefixed with 'sudo'. The environment was modified so that the non-root user could only execute particular commands.
Comment 4 Chris Blum 2016-11-15 13:18:03 UTC 
Created attachment 1220832 [details]
ganesha-ha-sudo.sh

This is the script successfully used onsite, which enabled us to activate NFS-ganesha using the hacluster user (which is created and defined anyways during the NFS-ganesha setup)
Obviously the sudoers file needs to be adjusted additionally...
Comment 8 Kaleb KEITHLEY 2017-08-23 12:37:37 UTC 
storhaug
Comment 9 Kaleb KEITHLEY 2017-08-23 12:38:00 UTC 
storhaug
Comment 13 Patric Uebele 2019-07-09 08:22:05 UTC 
Don't see large demand for this, closing.