no message
Some checks failed
CI / lint-and-build (push) Successful in 7s
CD / deploy (push) Failing after -4s

This commit is contained in:
2026-06-14 08:23:12 +08:00
parent fd57638374
commit f9b32208e4

View File

@@ -34,7 +34,7 @@
4. 给 runner 用户配置免密 sudo。CD 用到的 root 命令有 4 个rsync、setup.sh、run.sh、stop.sh外加 tail 读 root 拥有的日志。写 `/etc/sudoers.d/syscall-monitor`
```
<runner-user> ALL=(root) NOPASSWD: /usr/bin/rsync, /opt/syscall_monitor/setup.sh, /opt/syscall_monitor/run.sh, /opt/syscall_monitor/stop.sh, /usr/bin/tail
gitea-runner ALL=(root) NOPASSWD: /usr/bin/rsync, /opt/syscall_monitor/setup.sh, /opt/syscall_monitor/run.sh, /opt/syscall_monitor/stop.sh, /usr/bin/tail
```
只授权这些,不要 `ALL` 通配。`rsync` 路径以 `which rsync` 为准。