Task #4771: Run smartgears on the rstudio-server instances as unprivileged user - D4Science Infrastructure - D4science

Custom queries

03. VRE Plan
04. All Projects Deliverables
04. All Projects Milestones
06. D4Science Projects Activities
All open Issues
D4Science Infrastructure Upgrade
My InProgress Tasks
My Paused Tasks
My Watched Tasks
Not Closed Assigned To Me
Not Closed Assigned To Me (No Releases, No Project Tasks)
Not Closed Opened by Me
Open Issues
Upgrade Plan
Upgrade Plan Clear

Actions

Copy link

Task #4771

closed

Run smartgears on the rstudio-server instances as unprivileged user

Added by Andrea Dell'Amico almost 9 years ago. Updated almost 9 years ago.

Status:

Closed

Priority:

Immediate

Assignee:

_InfraScience Systems Engineer

Category:

System Application

Target version:

System Configuration

Start date:

Jul 21, 2016

Due date:

% Done:

100%

Estimated time:

Infrastructure:

Development, Pre-Production, Production

Description

We need to:

Give sudo privileges to the commands esecuted by the Ruseradd.sh script

Related issues

Related to D4Science Infrastructure - Task #183: tomcat running as root user under port 80

Closed

Andrea Dell'Amico

May 30, 2015

Actions

Issue # Delay: days Cancel

History
Notes
Property changes

Actions

Copy link

Updated by Andrea Dell'Amico almost 9 years ago

We need to:

Give sudo privileges to the commands esecuted by the Ruseradd.sh script
Add firewall rules to isolate tomcat while still giving direct access from the isti network, for issue debugging
Create a playbook that installs the r-connector

Actions

Copy link

Updated by Andrea Dell'Amico almost 9 years ago

Status changed from New to In Progress

Starting with rstudio-dev

Actions

Copy link

Updated by Andrea Dell'Amico almost 9 years ago

Related to Task #183: tomcat running as root user under port 80 added

Actions

Copy link

Updated by Andrea Dell'Amico almost 9 years ago

Status changed from In Progress to Feedback
% Done changed from 0 to 100

It seems I got it working. I heavily modified the script that adds the users so that it uses sudo.
It also creates an empty userconfig.csv on the user's home with the correct permissions.

To replicate the configuration on the production server, a one time command will be needed to correct the permission of all the userconfig.csv files. Its group now needs to be gcube, with write access.

The configuration of the dev node lives on ansible inside d4science-ghn-cluster/group_vars/rstudio_dev while the r_connector stuff is in library/roles/smartgears/r_connector.

The rstudio-server installation and the ldap pam configuration aren't managed by the playbook right now.

Actions

Copy link