Package: prometheus-ipmi-exporter
Version: 1.8.0-1
Severity: normal
X-Debbugs-Cc: rvandegr...@debian.org

Hello,

The Debian package for prometheus-ipmi-exporter carries a patch [1] to set
freeipmi.path by default.  Due to a surprising design, this breaks the config
required to run a local exporter as an unprivileged user.

That involves using sudo as follows:
  modules:
    default:
      collectors:
        - bmc
        - ipmi
      collector_cmd:
        bmc: sudo
        ipmi: sudo
      custom_args:
        bmc:
          - bmc-info
        ipmi:
          - ipmimonitoring

Surprisingly, freeimpi.path applies to the collect_cmd entires.  So the
exporter prepends /usr/bin to those entires, and fails to find sudo.  Since
there is no way to override this, I don't see any way to run without root.

There's an upstream report of this issue at [2].

Thanks,
Ross


[1] - 
https://salsa.debian.org/go-team/packages/prometheus-ipmi-exporter/-/blob/debian/sid/debian/patches/0001-Set-sane-defaults-for-Debian-systems.patch
[2] - https://github.com/prometheus-community/ipmi_exporter/issues/153


-- System Information:
Debian Release: trixie/sid
  APT prefers testing
  APT policy: (500, 'testing'), (40, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.8.2 (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages prometheus-ipmi-exporter depends on:
ii  adduser              3.137
pn  freeipmi-tools       <none>
ii  init-system-helpers  1.66
ii  libc6                2.37-15
ii  systemd-sysv         255.4-1

prometheus-ipmi-exporter recommends no packages.

prometheus-ipmi-exporter suggests no packages.

Reply via email to