Re: OT: Capistrano setting sudo password on deployment server
Re: OT: Capistrano setting sudo password on deployment server
- Subject: Re: OT: Capistrano setting sudo password on deployment server
- From: Michael Bushkov <email@hidden>
- Date: Tue, 16 Jun 2009 13:55:24 +0400
Tuning sudo not to ask for password for specific users is indeed the best way. Here is a quote from /etc/sudoers file:
# Uncomment to allow people in group wheel to run all commands
# %wheel ALL=(ALL) ALL
# Same thing without a password
# %wheel ALL=(ALL) NOPASSWD: ALL
You can, of course store the password in your script itself and feed it to sudo command when needed, but such way is totally insecure and is potentially very dangerous.
On Tue, Jun 16, 2009 at 12:26 AM, Pascal Robert
<email@hidden> wrote:
You can tell sudo to not ask the password for specific users, you should have such an example in the default sudoers file (launch "visudo" to edit the file).
This is a follow up to the WOWODC Capistrano deployment session.
I'm trying to write a simple capfile to learn capistrano. I got the tail -f on the logs to work, but how do I do a task of run "sudo some-command" which requires a password? How do I set the sudo password once?
Thanks in advance.
Paul
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (
email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to
email@hidden
-------------------------------------------------------
Pascal Robert
http://www.macti.ca |
http://www.linkedin.com/in/macti
Skype | Twitter | AIM/iChat : MacTICanada
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (
email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to
email@hidden
--
With best regards,
Michael Bushkov
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden