Execute build task in Hudson with root privilages

Posted by jensendarren on Server Fault See other posts from Server Fault or by jensendarren
Published on 2010-05-13T10:48:58Z Indexed on 2010/05/13 10:55 UTC
Read the original article Hit count: 261

Filed under:

hudson

|

sudoers

|

build

|

continuous-integration

|

security

I have a build script which executes apt-get and therefore requires root privileges. What is the best way to run this script in Hudson?

Currently the only solution I have found that works is to add an entry to the sudoers file for the user hudson like so:

hudson  ALL=(ALL) NOPASSWD:ALL

However, although my build script now runs without error in Hudson, I am not entirely comfortable with this solution. Is there a better way?

© Server Fault or respective owner

Related posts about hudson

Hudson Mercurial checkout throws exception on Debian

as seen on Server Fault - Search for 'Server Fault'
I'm trying to configure Hudson to checkout my site's sources from Mercurial but it throws an exception. The /var/lib/hudson/jobs/jobname directory does exist, and I can create a workspace directory in there (even after su hudson), but as soon as I run the Hudson job again this directory disappears… >>> More
Hudson on debian lenny

as seen on Server Fault - Search for 'Server Fault'
Hello, I installed Hudson deamon on one server (running on debian lenny testing) some time ago. All was working until I perform an upgrade. At this time Hudson isn't accessible at port 8080 (which is the default port used). I have looked for iptables problems, however port 8080 is open in INPUT and… >>> More
Configuring Jenkins for running with BitBucket

as seen on Server Fault - Search for 'Server Fault'
I'm trying to setup Jenkins on my mac mini in order to pull my iOS project source code from BitBucket and build it automatically. I've already gone through the major well know problems generating the ssh keys,uploading them in BitBucket,performing an ssh connection by console for adding the host to… >>> More
How do I configure CI hudson with PHPunit and how do I run phpunit using hudson?

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi, I am getting following error mentioned below. Help is much needed for this... kindly go through the errors. Started by an SCM change Updating https://suppliesguys.unfuddle.com/svn/suppliesguys_frontend2/Frontend-Texity/src U sites\all\modules\print\print_pdf\print_pdf.pages.inc At revision… >>> More
Tech Article: Oracle ADF Essentials - Continuous Integration with Hudson

as seen on Oracle Technology Network - Search for 'Oracle Technology Network'
The basics of installing and configuring the Hudson integration engine to continuously build and test Oracle ADF applications >>> More

Related posts about sudoers

How to generate customized sudoers files in puppet depending on the environment they're deployed to?

as seen on Server Fault - Search for 'Server Fault'
the sysadmins are present in the sudoers files of all environments, but other sudoers are not. Different environments all have slightly different sudoers. Most of the time, 90% of users are the same, and 10% vary so we cannot have only one sudoers file for everything. Right now, we are using puppet… >>> More
Installing ZFS changed my sudoers file

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
Following the wiki's advice, I installed ubuntu-zfs. However, once everything installed correctly, and I tried installing another application via apt-get, I get a weird issue with my sudoers file: max@host:~$ sudo apt-get install deluge deluge-web sudo: /etc/sudoers.d/zfs is mode 0644, should be… >>> More
How to configure sudoers with path wildcards?

as seen on Super User - Search for 'Super User'
Hi, I need sudo for a command for any path under a particular area. Example: sudo mycommand /opt/apps/myapp/... What is the sudoers syntax to allow this command to run in any path that falls under /opt/apps/myapp? This is Solaris 10 sudo. Thanks. >>> More
sudoers file cleanup and consolidation tool/script

as seen on Server Fault - Search for 'Server Fault'
Hello All, I am curious to know what other folks out there might be using to keep the sudoers file in a sane manner. I am looking for a tool, that removes redundant entries, overlapping permissions and/or present sudoers file in a organized way(like sorting by permissions/users/Aliases) User_Alias… >>> More
Add AD Domain user to sudoers from the command line

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I'm setting up an Ubuntu 11.04 server VM for use as a database server. It would make everyone's lives easier if we could have folks login using windows credentials and perhaps even make the machine work with the current AD-driven security we've got elsewhere. The first leg of this was really easy… >>> More