summaryrefslogtreecommitdiffstats
path: root/prototypes
diff options
context:
space:
mode:
authorYolanda Robla Mota <yroblamo@redhat.com>2016-10-11 11:26:39 +0200
committerYolanda Robla Mota <yroblamo@redhat.com>2016-10-11 12:21:32 +0200
commita795342c11357784b522ccf347eb3463124aa525 (patch)
tree8b2abc77b1c2347a172ce35301aaf10253bb92a8 /prototypes
parent86e7153ddd6e6d7bf47955c8b82e7c5a8ede492e (diff)
Tune sudo settings on server
We need to have passwordless sudo, and not require a tty. Change-Id: Iee11cade89a45b49d6b623f07d8ccb76f9e5882d Signed-Off-By: Yolanda Robla <yroblamo@redhat.com>
Diffstat (limited to 'prototypes')
-rw-r--r--prototypes/puppet-infracloud/modules/opnfv/manifests/server.pp16
1 files changed, 15 insertions, 1 deletions
diff --git a/prototypes/puppet-infracloud/modules/opnfv/manifests/server.pp b/prototypes/puppet-infracloud/modules/opnfv/manifests/server.pp
index c4bff0962..a1e7d5d0e 100644
--- a/prototypes/puppet-infracloud/modules/opnfv/manifests/server.pp
+++ b/prototypes/puppet-infracloud/modules/opnfv/manifests/server.pp
@@ -224,6 +224,20 @@ class opnfv::server (
}
}
- # add hosts entries
+ # ensure that we have non-pass sudo, and
+ # not require tty
+ file_line { 'sudo_rule_no_pw':
+ path => '/etc/sudoers',
+ line => '%wheel ALL=(ALL) NOPASSWD: ALL',
+ }
+ file_line { 'sudo_rule_notty':
+ path => '/etc/sudoers',
+ line => 'Defaults requiretty',
+ match => '.*requiretty.*',
+ match_for_absence => true,
+ ensure => absent,
+ multiple => true,
+ }
+
create_resources('host', hiera_hash('hosts'))
}