[JIRA] (JENKINS-50195) Create a non root user for running Jenkins and the evergreen-client
Title: Message Title Baptiste Mathus updated an issue Jenkins / JENKINS-50195 Create a non root user for running Jenkins and the evergreen-client Change By: Baptiste Mathus Labels: essentials evergreen Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-50195) Create a non root user for running Jenkins and the evergreen-client
Title: Message Title Baptiste Mathus updated an issue Jenkins / JENKINS-50195 Create a non root user for running Jenkins and the evergreen-client Change By: Baptiste Mathus Labels: essentials evergreen Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-50195) Create a non root user for running Jenkins and the evergreen-client
Title: Message Title Baptiste Mathus updated JENKINS-50195 Jenkins / JENKINS-50195 Create a non root user for running Jenkins and the evergreen-client Change By: Baptiste Mathus Status: In Review Resolved Resolution: Fixed Add Comment This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-50195) Create a non root user for running Jenkins and the evergreen-client
Title: Message Title Baptiste Mathus updated JENKINS-50195 Jenkins / JENKINS-50195 Create a non root user for running Jenkins and the evergreen-client Change By: Baptiste Mathus Status: In Progress Review Add Comment This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-50195) Create a non root user for running Jenkins and the evergreen-client
Title: Message Title Baptiste Mathus started work on JENKINS-50195 Change By: Baptiste Mathus Status: Open In Progress Add Comment This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-50195) Create a non root user for running Jenkins and the evergreen-client
Title: Message Title Baptiste Mathus assigned an issue to Baptiste Mathus Jenkins / JENKINS-50195 Create a non root user for running Jenkins and the evergreen-client Change By: Baptiste Mathus Assignee: Baptiste Mathus Add Comment This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-50195) Create a non root user for running Jenkins and the evergreen-client
Title: Message Title R. Tyler Croy commented on JENKINS-50195 Re: Create a non root user for running Jenkins and the evergreen-client Baptiste Mathus, FYI the reason I'd like to get to this (if possible) in Milestone 1 is that it will be difficult to seamlessly upgrade in the future without a full re-installation. If the filesystem permissions are correct when somebody starts with Milestone 1, in theory we can continue upgrading them all the way to GA Add Comment This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-50195) Create a non root user for running Jenkins and the evergreen-client
Title: Message Title Baptiste Mathus commented on JENKINS-50195 Re: Create a non root user for running Jenkins and the evergreen-client Ack, tagged for current milestone so that it shows up on the board. But ack also to work on it only if others are done. I agree it's not critical to the current phase. Add Comment This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-50195) Create a non root user for running Jenkins and the evergreen-client
Title: Message Title Baptiste Mathus updated an issue Jenkins / JENKINS-50195 Create a non root user for running Jenkins and the evergreen-client Change By: Baptiste Mathus Sprint: Essentials - Milestone 1 Add Comment This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-50195) Create a non root user for running Jenkins and the evergreen-client
Title: Message Title R. Tyler Croy commented on JENKINS-50195 Re: Create a non root user for running Jenkins and the evergreen-client I don't have a good notion right now of whether supervisord needs root or not. I'm going to leave this ticket in the backlog, but feel free to pick it up for Milestone 1 if the other stuff gets tackled in good time. Add Comment This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-50195) Create a non root user for running Jenkins and the evergreen-client
Title: Message Title Baptiste Mathus commented on JENKINS-50195 Re: Create a non root user for running Jenkins and the evergreen-client Yes, Jenkins right now. And same for evergreen-client once it will exist as a process too. I think we should ideally run supervisord in userspace too, if it does not need to be root. Add Comment This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-50195) Create a non root user for running Jenkins and the evergreen-client
Title: Message Title R. Tyler Croy assigned an issue to Unassigned Jenkins / JENKINS-50195 Create a non root user for running Jenkins and the evergreen-client Change By: R. Tyler Croy Assignee: R. Tyler Croy Add Comment This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-50195) Create a non root user for running Jenkins and the evergreen-client
Title: Message Title R. Tyler Croy commented on JENKINS-50195 Re: Create a non root user for running Jenkins and the evergreen-client I'm assuming the issue here is that the java process is running as root, correct? Or are you concerned about supervisord running as root too? Assuming it's the first one, supervisord supports dropping permissions when it executes processes, so perhaps we should just update the supervisord.conf to run both java and eventually nodejs as the jenkins user? Add Comment This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-50195) Create a non root user for running Jenkins and the evergreen-client
Title: Message Title
Baptiste Mathus updated an issue
Jenkins / JENKINS-50195
Create a non root user for running Jenkins and the evergreen-client
Change By:
Baptiste Mathus
h3. IssueCurrently the user for Jenkins is still {{root}}, we need to fix this and be for instance {{jenkins}} before we deliver it to users.h3. ExpectedThe processes should *not* running as root.We must do like the {{jenkins/jenkins}} image in this regard .
Add Comment
This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e)
--
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-50195) Create a non root user for running Jenkins and the evergreen-client
Title: Message Title Baptiste Mathus updated an issue Jenkins / JENKINS-50195 Create a non root user for running Jenkins and the evergreen-client Change By: Baptiste Mathus Labels: essentials Add Comment This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-50195) Create a non root user for running Jenkins and the evergreen-client
Title: Message Title Baptiste Mathus created an issue Jenkins / JENKINS-50195 Create a non root user for running Jenkins and the evergreen-client Issue Type: Bug Assignee: R. Tyler Croy Components: essentials Created: 2018-03-15 14:14 Priority: Major Reporter: Baptiste Mathus Issue Currently the user for Jenkins is still root, we need to fix this and be for instance jenkins before we deliver it to users. Expected The processes should not running as root. We must do like the jenkins/jenkins image. Add Comment
