Reputation
375
Top tag
Next privilege 500 Rep.
Access review queues
Badges
3 19
Impact
~13k people reached

Jan
26
awarded  Popular Question
Nov
6
awarded  Popular Question
Aug
31
awarded  Caucus
May
2
revised What are my prospects of recovering old version of file on BTRFS
deleted 3 characters in body
Apr
26
awarded  Autobiographer
Apr
26
comment How to create /dev/tun device inside unprivileged LXC container?
Adding the lxc.cap.keep = CAP_MKNOD to config makes error Simultaneously requested dropping and keeping caps. I checked all recursively added configs (ubuntu.userns.conf, ubuntu.common.conf and common.conf) and found only one line with lxc.cap.drop: lxc.cap.drop = mac_admin mac_override sys_time sys_module. But that is irrelevant isn't it?
Apr
26
comment How to create /dev/tun device inside unprivileged LXC container?
Can you give me please a little pointer on how to change the capability of the unprivileged container? At least a correct phrase to Google?
Apr
9
accepted Is it possible to execute «unless» clause as a specific user?
Apr
7
comment How to create /dev/tun device inside unprivileged LXC container?
I believe, what docker calls "unprivileged" is quite different from what it means in LXC parlance: github.com/docker/docker/issues/7906 . It seems that Docker still don't support the unprivileged containers. It doesn't necessarily invalidate your answer - I'll check CAP_MKNOD after work.
Apr
6
asked How to create /dev/tun device inside unprivileged LXC container?
Apr
6
comment No tun device in lxc guest for openvpn
@apagr Doesn't work anymore on Ubuntu 14.04...
Mar
10
accepted Puppet: Is it possible to supply additional information when realizing an exported resource?
Mar
9
revised How to trigger sudo's grace period for a given user via Puppet?
added 402 characters in body
Mar
9
comment How to trigger sudo's grace period for a given user via Puppet?
@fuero Well, the module bypasses my problem by running the Bundle as root. And it runs the Passenger AppRack: /opt/redmine as www-data as opposed to the dedicated redmine user. I hope it is not a security issue
Mar
9
comment How to trigger sudo's grace period for a given user via Puppet?
@fuero This repository works perfectly, thank you very much.
Mar
9
comment How to trigger sudo's grace period for a given user via Puppet?
@fuero Thank you for the link. I'll try to merge it with my own module.
Mar
9
comment How to trigger sudo's grace period for a given user via Puppet?
Dear @MadHatter. I'll do it as soon as I am able to reproduce it, just give me a 20 minutes. Until then the original question (maybe temporarily) stands.
Mar
9
revised How to trigger sudo's grace period for a given user via Puppet?
added 64 characters in body
Mar
9
comment How to trigger sudo's grace period for a given user via Puppet?
@MadHatter ATM I have a strange (and possibly unrelated) problem with redmine@redmine $ sudo su sudo: effective uid is not 0, is /usr/bin/sudo on a file system with the 'nosuid' option set or an NFS file system without root privileges?. I'll first troubleshoot it and then update the question.
Mar
9
comment How to trigger sudo's grace period for a given user via Puppet?
@PaulHaldane I do use it exactly like you have written. The problem is that the Bundle occasionally requires admin rights, which tries to get via sudo. And this is where the problem lays.