Issue #3050
closedget rid of "apache" user in dev environment
Description
In the dev environment, we are using the "apache" user to own /var/lib/pulp.
https://github.com/pulp/devel/blob/3.0-dev/ansible/roles/dev/tasks/main.yml#L90
Since the dir is owned by apache, workers are also run as apache.
https://github.com/pulp/devel/blob/3.0-dev/ansible/roles/systemd/templates/pulp_celerybeat.j2#L8
We also need to `runserver` as user apache.
In our ansible-galaxy install, we use the "pulp" user:
Step 6: https://docs.pulpproject.org/en/3.0/nightly/installation/instructions.html#ansible-galaxy-installation
Systemd: https://docs.pulpproject.org/en/3.0/nightly/installation/instructions.html#systemd
Related issues
Updated by ipanova@redhat.com about 7 years ago
i thought we on purpose wanted to get rid of apache user to give the possibility to use nginx for example as well.
Updated by amacdona@redhat.com about 7 years ago
@ipanova, so do you think we ought to change the dev environment to "pulp" user also?
Updated by ttereshc about 7 years ago
- Sprint/Milestone set to 45
- Triaged changed from No to Yes
Updated by daviddavis about 7 years ago
- Status changed from NEW to ASSIGNED
- Assignee set to daviddavis
Updated by daviddavis about 7 years ago
Currently in our dev environment, we have two users: vagrant and apache. We're running pulp (via runserver) as vagrant while apache owns the files and runs the processes pulp_workers, etc.
Two options I see:
1. We create a new pulp user in ansible and have it own the files, processes, etc
2. Replace BOTH the vagrant and apache users with a pulp user
I have option 1 working now. It's a rather minimal change. Option 2 is a radical change and I'm not 100% sure it might work.
Thoughts?
Updated by dalley about 7 years ago
This is technically a duplicate of 2879 (https://pulp.plan.io/issues/2879) but I will close that one instead since this is already assigned.
Updated by daviddavis about 7 years ago
Discussed with bmbouter, @dkliban, and @asmacdo in person and am going to try option 2.
Updated by daviddavis about 7 years ago
- Related to Task #3065: Replace the vagrant user with a user named 'pulp' added
Updated by daviddavis about 7 years ago
So in order to replace the vagrant user with a pulp user, we'll have to update the vagrant box image. I'm opening another task to do this:
https://pulp.plan.io/issues/3065
I'm going with option 1 for now. #3065 will implement option 2.
Updated by bmbouter about 7 years ago
- Has duplicate Task #2879: Create a 'pulp' user for Pulp3 in the development environment added
Updated by daviddavis about 7 years ago
- Subject changed from "apache" user used in dev environment, "pulp" user used by ansible galaxy to get rid of "apache" user in dev environment
- Status changed from ASSIGNED to POST
Updated by jortel@redhat.com about 7 years ago
- Sprint/Milestone changed from 45 to 46
Updated by bmbouter almost 5 years ago
- Status changed from MODIFIED to CLOSED - CURRENTRELEASE