Reputation
345
Top tag
Next privilege 500 Rep.
Access review queues
Badges
3 16
Impact
~8k people reached

May
2
revised What are my prospects of recovering old version of file on BTRFS
deleted 3 characters in body
Apr
26
awarded  Autobiographer
Apr
26
comment How to create /dev/tun device inside unprivileged LXC container?
Adding the lxc.cap.keep = CAP_MKNOD to config makes error Simultaneously requested dropping and keeping caps. I checked all recursively added configs (ubuntu.userns.conf, ubuntu.common.conf and common.conf) and found only one line with lxc.cap.drop: lxc.cap.drop = mac_admin mac_override sys_time sys_module. But that is irrelevant isn't it?
Apr
26
comment How to create /dev/tun device inside unprivileged LXC container?
Can you give me please a little pointer on how to change the capability of the unprivileged container? At least a correct phrase to Google?
Apr
9
accepted Is it possible to execute «unless» clause as a specific user?
Apr
7
comment How to create /dev/tun device inside unprivileged LXC container?
I believe, what docker calls "unprivileged" is quite different from what it means in LXC parlance: github.com/docker/docker/issues/7906 . It seems that Docker still don't support the unprivileged containers. It doesn't necessarily invalidate your answer - I'll check CAP_MKNOD after work.
Apr
6
asked How to create /dev/tun device inside unprivileged LXC container?
Apr
6
comment No tun device in lxc guest for openvpn
@apagr Doesn't work anymore on Ubuntu 14.04...
Mar
10
accepted Puppet: Is it possible to supply additional information when realizing an exported resource?
Mar
9
revised How to trigger sudo's grace period for a given user via Puppet?
added 402 characters in body
Mar
9
comment How to trigger sudo's grace period for a given user via Puppet?
@fuero Well, the module bypasses my problem by running the Bundle as root. And it runs the Passenger AppRack: /opt/redmine as www-data as opposed to the dedicated redmine user. I hope it is not a security issue
Mar
9
comment How to trigger sudo's grace period for a given user via Puppet?
@fuero This repository works perfectly, thank you very much.
Mar
9
comment How to trigger sudo's grace period for a given user via Puppet?
@fuero Thank you for the link. I'll try to merge it with my own module.
Mar
9
comment How to trigger sudo's grace period for a given user via Puppet?
Dear @MadHatter. I'll do it as soon as I am able to reproduce it, just give me a 20 minutes. Until then the original question (maybe temporarily) stands.
Mar
9
revised How to trigger sudo's grace period for a given user via Puppet?
added 64 characters in body
Mar
9
comment How to trigger sudo's grace period for a given user via Puppet?
@MadHatter ATM I have a strange (and possibly unrelated) problem with redmine@redmine $ sudo su sudo: effective uid is not 0, is /usr/bin/sudo on a file system with the 'nosuid' option set or an NFS file system without root privileges?. I'll first troubleshoot it and then update the question.
Mar
9
comment How to trigger sudo's grace period for a given user via Puppet?
@PaulHaldane I do use it exactly like you have written. The problem is that the Bundle occasionally requires admin rights, which tries to get via sudo. And this is where the problem lays.
Mar
9
comment How to trigger sudo's grace period for a given user via Puppet?
@fuero my Puppet manifest is just a sketch. I definitely don't want to have this NOPASSWD entry to prevail after the installation.
Mar
9
comment How to trigger sudo's grace period for a given user via Puppet?
@MadHatter Yes, the /etc/sudoers.d is supported and I use it for the /etc/sudoers.d/tty_tickets file.
Mar
9
revised How to trigger sudo's grace period for a given user via Puppet?
added 30 characters in body