MarceloZoeng/syscall_monitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

no message
Some checks failed
CI / lint-and-build (push) Successful in 7s
Details
CD / deploy (push) Failing after -4s
Details

Browse Source
This commit is contained in:
MarceloZoeng
2026-06-14 08:23:12 +08:00
parent fd57638374
commit f9b32208e4
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.gitea/README.md
View File

@@ -34,7 +34,7 @@
4. 给 runner 用户配置免密 sudo。CD 用到的 root 命令有 4 个：rsync、setup.sh、run.sh、stop.sh，外加 tail 读 root 拥有的日志。写 `/etc/sudoers.d/syscall-monitor`： 4. 给 runner 用户配置免密 sudo。CD 用到的 root 命令有 4 个：rsync、setup.sh、run.sh、stop.sh，外加 tail 读 root 拥有的日志。写 `/etc/sudoers.d/syscall-monitor`：
``` ```
<runner-user> ALL=(root) NOPASSWD: /usr/bin/rsync, /opt/syscall_monitor/setup.sh, /opt/syscall_monitor/run.sh, /opt/syscall_monitor/stop.sh, /usr/bin/tail gitea-runner ALL=(root) NOPASSWD: /usr/bin/rsync, /opt/syscall_monitor/setup.sh, /opt/syscall_monitor/run.sh, /opt/syscall_monitor/stop.sh, /usr/bin/tail
``` ```
只授权这些，不要 `ALL` 通配。`rsync` 路径以 `which rsync` 为准。 只授权这些，不要 `ALL` 通配。`rsync` 路径以 `which rsync` 为准。