From: Peter Palfrader <peter@palfrader.org>
Date: Wed, 8 Apr 2009 07:43:23 +0000 (+0200)
Subject: piatti: more groups (uddadm, debbugs, piuparts) and piupartss needs root for chroot... 
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=bad5a7facd96e61fd60ee498e070235d2d95a9cc;p=mirror%2Fdsa-puppet.git

piatti: more groups (uddadm, debbugs, piuparts) and piupartss needs root for chroot stuff
---

diff --git a/manifests/site.pp b/manifests/site.pp
index 87684b23c..19766c038 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -45,7 +45,7 @@ node default {
 
     # test here first
     case $hostname {
-        handel,geo1,geo2,geo3,wieck,brahms,bartok,spohr,sperger,carver,rore,malo,peri,penalosa,praetorius,schein,villa,lobos,steffani,kassia,pergolesi,lafayette,rem,albeniz,goetz,smetana,allegri,puccini,ball,argento,arcadelt,dijkstra,schumann,caballero,voltaire,pescetti,mundy,agricola,goedel,lebrun,mayer,mayr,merulo,morales,murphy,paer,saens,schroeder,spontini,widor,zelenka,agnesi:    { include sudo }
+        handel,geo1,geo2,geo3,wieck,brahms,bartok,spohr,sperger,carver,rore,malo,peri,penalosa,praetorius,schein,villa,lobos,steffani,kassia,pergolesi,lafayette,rem,albeniz,goetz,smetana,allegri,puccini,ball,argento,arcadelt,dijkstra,schumann,caballero,voltaire,pescetti,mundy,agricola,goedel,lebrun,mayer,mayr,merulo,morales,murphy,paer,saens,schroeder,spontini,widor,zelenka,agnesi,piatti:    { include sudo }
         default:   {}
     }
 }
diff --git a/modules/sudo/files/common/sudoers b/modules/sudo/files/common/sudoers
index 02b402245..9601666a1 100644
--- a/modules/sudo/files/common/sudoers
+++ b/modules/sudo/files/common/sudoers
@@ -47,7 +47,11 @@ nagios		ALL=(ALL)	NOPASSWD: /usr/sbin/hpacucli controller slot=0 pd [0-9]I\:[0-9
 nagios		ALL=(ALL)	NOPASSWD: /usr/sbin/hpacucli controller slot=0 show status
 
 # groups and their role accounts
+%debbugs	ALL=(debbugs)	ALL
 %mirroradm	ALL=(archvsync)	ALL
+%piuparts	ALL=(piupartsm)	ALL
+%piuparts	ALL=(piupartss)	ALL
+%uddadm		ALL=(udd)	ALL
 %wikiadm	ALL=(wiki)	ALL
 
 # some groups are in apachectrl on "their" hosts so they can reload apache and update their vhost
@@ -57,3 +61,5 @@ nagios		ALL=(ALL)	NOPASSWD: /usr/sbin/hpacucli controller slot=0 show status
 Defaults:buildd env_reset,env_keep+="APT_CONFIG DEBIAN_FRONTEND"
 buildd		ALL=(ALL)	NOPASSWD: ALL
 %buildd		ALL=(buildd)	ALL
+# The piuparts slave needs to handle chroots
+piupartss	piatti=(ALL)	NOPASSWD: ALL