no message
This commit is contained in:
@@ -34,7 +34,7 @@
|
||||
4. 给 runner 用户配置免密 sudo。CD 用到的 root 命令有 4 个:rsync、setup.sh、run.sh、stop.sh,外加 tail 读 root 拥有的日志。写 `/etc/sudoers.d/syscall-monitor`:
|
||||
|
||||
```
|
||||
<runner-user> ALL=(root) NOPASSWD: /usr/bin/rsync, /opt/syscall_monitor/setup.sh, /opt/syscall_monitor/run.sh, /opt/syscall_monitor/stop.sh, /usr/bin/tail
|
||||
gitea-runner ALL=(root) NOPASSWD: /usr/bin/rsync, /opt/syscall_monitor/setup.sh, /opt/syscall_monitor/run.sh, /opt/syscall_monitor/stop.sh, /usr/bin/tail
|
||||
```
|
||||
|
||||
只授权这些,不要 `ALL` 通配。`rsync` 路径以 `which rsync` 为准。
|
||||
|
||||
Reference in New Issue
Block a user