Project

Profile

Help

Issue #3050

get rid of "apache" user in dev environment

Added by amacdona@redhat.com about 2 years ago. Updated 7 months ago.

Status:
MODIFIED
Priority:
Normal
Assignee:
Category:
-
Sprint/Milestone:
Start date:
Due date:
Severity:
2. Medium
Version:
Platform Release:
Blocks Release:
OS:
Backwards Incompatible:
No
Triaged:
Yes
Groomed:
No
Sprint Candidate:
No
Tags:
Dev Environment
QA Contact:
Complexity:
Smash Test:
Verified:
No
Verification Required:
No
Sprint:
Sprint 28

Description

In the dev environment, we are using the "apache" user to own /var/lib/pulp.
https://github.com/pulp/devel/blob/3.0-dev/ansible/roles/dev/tasks/main.yml#L90

Since the dir is owned by apache, workers are also run as apache.
https://github.com/pulp/devel/blob/3.0-dev/ansible/roles/systemd/templates/pulp_celerybeat.j2#L8

We also need to `runserver` as user apache.

In our ansible-galaxy install, we use the "pulp" user:
Step 6: https://docs.pulpproject.org/en/3.0/nightly/installation/instructions.html#ansible-galaxy-installation
Systemd: https://docs.pulpproject.org/en/3.0/nightly/installation/instructions.html#systemd


Related issues

Related to Pulp - Task #3065: Replace the vagrant user with a user named 'pulp' CLOSED - WONTFIX Actions
Duplicated by Pulp - Task #2879: Create a 'pulp' user for Pulp3 in the development environment CLOSED - DUPLICATE Actions

History

#1 Updated by ipanova@redhat.com about 2 years ago

i thought we on purpose wanted to get rid of apache user to give the possibility to use nginx for example as well.

#2 Updated by amacdona@redhat.com about 2 years ago

@ipanova, so do you think we ought to change the dev environment to "pulp" user also?

#3 Updated by ipanova@redhat.com about 2 years ago

yes, that's my understanding

#4 Updated by mhrivnak about 2 years ago

  • Tags Dev Environment, Pulp 3 added

#5 Updated by ttereshc about 2 years ago

  • Sprint/Milestone set to 45
  • Triaged changed from No to Yes

#6 Updated by daviddavis about 2 years ago

  • Status changed from NEW to ASSIGNED
  • Assignee set to daviddavis

#7 Updated by daviddavis about 2 years ago

Currently in our dev environment, we have two users: vagrant and apache. We're running pulp (via runserver) as vagrant while apache owns the files and runs the processes pulp_workers, etc.

Two options I see:

1. We create a new pulp user in ansible and have it own the files, processes, etc
2. Replace BOTH the vagrant and apache users with a pulp user

I have option 1 working now. It's a rather minimal change. Option 2 is a radical change and I'm not 100% sure it might work.

Thoughts?

#8 Updated by dalley about 2 years ago

This is technically a duplicate of 2879 (https://pulp.plan.io/issues/2879) but I will close that one instead since this is already assigned.

#9 Updated by daviddavis about 2 years ago

Discussed with @bmbouter, @dkliban, and @asmacdo in person and am going to try option 2.

#10 Updated by daviddavis about 2 years ago

  • Related to Task #3065: Replace the vagrant user with a user named 'pulp' added

#11 Updated by daviddavis about 2 years ago

So in order to replace the vagrant user with a pulp user, we'll have to update the vagrant box image. I'm opening another task to do this:

https://pulp.plan.io/issues/3065

I'm going with option 1 for now. #3065 will implement option 2.

#12 Updated by bmbouter about 2 years ago

  • Duplicated by Task #2879: Create a 'pulp' user for Pulp3 in the development environment added

#13 Updated by daviddavis about 2 years ago

  • Subject changed from "apache" user used in dev environment, "pulp" user used by ansible galaxy to get rid of "apache" user in dev environment
  • Status changed from ASSIGNED to POST

#14 Updated by jortel@redhat.com about 2 years ago

  • Sprint/Milestone changed from 45 to 46

#15 Updated by mhrivnak about 2 years ago

  • Sprint/Milestone changed from 46 to 47

#16 Updated by daviddavis about 2 years ago

  • Status changed from POST to MODIFIED

#17 Updated by bmbouter over 1 year ago

  • Sprint set to Sprint 28

#18 Updated by bmbouter over 1 year ago

  • Sprint/Milestone deleted (47)

#19 Updated by daviddavis 7 months ago

  • Sprint/Milestone set to 3.0

#20 Updated by bmbouter 7 months ago

  • Tags deleted (Pulp 3)

Please register to edit this issue

Also available in: Atom PDF