Andrew Bogott has submitted this change and it was merged.
Change subject: Allow wikidev users to restart HHVM
......................................................................
Allow wikidev users to restart HHVM
* Remove sudo privs for restrating nutcracker for wikidevs. This is carry-over
from the time when we managed the Nutcracker configs in wmf-config.
Nutcracker config changes require a root to merge now.
* Allow wikidevs to restart HHVM, so it can be done automatically as part of
scap. Otherwise, the trace cache and PCRE cache will eventually run out of
space and HHVM will either skip certain optimizations or crash.
Change-Id: I60115d46aa9329966908a9216361e45acdedf4bd
---
M modules/mediawiki/manifests/users.pp
1 file changed, 2 insertions(+), 2 deletions(-)
Approvals:
Tim Starling: Looks good to me, but someone else must approve
Andrew Bogott: Looks good to me, approved
Giuseppe Lavagetto: Looks good to me, but someone else must approve
jenkins-bot: Verified
diff --git a/modules/mediawiki/manifests/users.pp
b/modules/mediawiki/manifests/users.pp
index 945ba18..32ec52e 100644
--- a/modules/mediawiki/manifests/users.pp
+++ b/modules/mediawiki/manifests/users.pp
@@ -77,8 +77,8 @@
sudo_group { 'wikidev':
privileges => [
'ALL = (apache,mwdeploy,l10nupdate) NOPASSWD: ALL',
- 'ALL = (root) NOPASSWD: /sbin/restart nutcracker',
- 'ALL = (root) NOPASSWD: /sbin/start nutcracker',
+ 'ALL = (root) NOPASSWD: /sbin/restart hhvm',
+ 'ALL = (root) NOPASSWD: /sbin/start hhvm',
'ALL = NOPASSWD: /usr/sbin/apache2ctl',
'ALL = NOPASSWD: /etc/init.d/apache2',
'ALL = NOPASSWD: /usr/bin/renice',
--
To view, visit https://gerrit.wikimedia.org/r/163075
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I60115d46aa9329966908a9216361e45acdedf4bd
Gerrit-PatchSet: 3
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Ori.livneh <[email protected]>
Gerrit-Reviewer: Andrew Bogott <[email protected]>
Gerrit-Reviewer: Giuseppe Lavagetto <[email protected]>
Gerrit-Reviewer: Ori.livneh <[email protected]>
Gerrit-Reviewer: Tim Starling <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
