[Puppet Users] Puppet commands require root access

use sudo command in exec, no problem, but you need to configure sudoers
file.

2012/6/25 Worker Bee <[email protected]>

Of course giving someone 'sudo puppet' is the same as giving them full root
access. Just be aware of that.

I guess in principle it's for the same reason that the agent needs to run
with root privilege: it otherwise doesn't have sufficient access to do its
job. In practice, I can't think of very many things I would expect 'puppet
resource' to be able to find out that are actually privileged, at least on
the systems I'm familiar with. There are a few, however, including system
passwords (hashes) and service statuses.


John

puppet resource doesnt necessarily require root access. E.g. running
»puppet resource group« should show you present groups and it should
work as a normal user. Like:

% puppet resource group wheel
group { 'wheel':
ensure => 'present',
gid => '10',
}

Just note that »puppet resource some_resource_type« needs a suitable
provider for the type. Most of the providers specify a few files that
have to be executable by the user that is running puppet. The »groupadd«
provider e.g. requires the commands "groupadd", "groupdel" and "groupmod".
If your unprivileged user doesnt have these commands in $PATH or doesn't
have access rights (I guess ubuntoo ships these commands with mode 0700)
puppet will not work.

-Stefan