Ori.livneh has uploaded a new change for review.
https://gerrit.wikimedia.org/r/163075
Change subject: Allow wikidev users to restart HHVM
......................................................................
Allow wikidev users to restart HHVM
* Remove sudo privs for restrating nutcracker for wikidevs. This is carry-over
from the time when we managed the Nutcracker configs in wmf-config.
Nutcracker config changes require a root to merge now.
* Allow wikidevs to restart HHVM, so it can be done automatically as part of
scap. Otherwise, the trace cache and PCRE cache will eventually run out of
space and HHVM will either skip certain optimizations or crash.
Change-Id: I60115d46aa9329966908a9216361e45acdedf4bd
---
M modules/mediawiki/manifests/users.pp
1 file changed, 2 insertions(+), 2 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/75/163075/1
diff --git a/modules/mediawiki/manifests/users.pp
b/modules/mediawiki/manifests/users.pp
index 945ba18..32ec52e 100644
--- a/modules/mediawiki/manifests/users.pp
+++ b/modules/mediawiki/manifests/users.pp
@@ -77,8 +77,8 @@
sudo_group { 'wikidev':
privileges => [
'ALL = (apache,mwdeploy,l10nupdate) NOPASSWD: ALL',
- 'ALL = (root) NOPASSWD: /sbin/restart nutcracker',
- 'ALL = (root) NOPASSWD: /sbin/start nutcracker',
+ 'ALL = (root) NOPASSWD: /sbin/restart hhvm',
+ 'ALL = (root) NOPASSWD: /sbin/start hhvm',
'ALL = NOPASSWD: /usr/sbin/apache2ctl',
'ALL = NOPASSWD: /etc/init.d/apache2',
'ALL = NOPASSWD: /usr/bin/renice',
--
To view, visit https://gerrit.wikimedia.org/r/163075
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I60115d46aa9329966908a9216361e45acdedf4bd
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Ori.livneh <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
