vh/esh-pfi-infrastructure
1
0
Fork 0
Code Issues 7 Pull Requests Actions Packages Projects Releases Wiki Activity

fix(albok-service): 0.1.2 on nh3-docker (fd leak); add restricted wing personal/agent-feedback; Nemi credentials

Browse Source
This commit is contained in:
vh
2026-10-03 02:54:18 -07:00
parent 1fb36b32d2
commit 8a4dbf2341
6 changed files with 30 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
playbooks/albok-service-host.yaml
+5 -1
View File
@@ -20,6 +20,10 @@ steps:
sudo: true
shell: groupadd --gid 1511 albok-personal
when: "! getent group albok-personal >/dev/null"
- name: read group albok-feedback (gid 1512) — restricted wing personal/agent-feedback
sudo: true
shell: groupadd --gid 1512 albok-feedback
when: "! getent group albok-feedback >/dev/null"
- name: store root, private root and config dir (local ext4, never NFS)
sudo: true
shell: |
@@ -32,7 +36,7 @@ steps:
verify:
- name: ids are the fixed numbers
shell: |
test "$(getent passwd albok | cut -d: -f3,4)" = "1500:1500" && test "$(getent group albok-read | cut -d: -f3)" = 1510 && test "$(getent group albok-personal | cut -d: -f3)" = 1511
test "$(getent passwd albok | cut -d: -f3,4)" = "1500:1500" && test "$(getent group albok-read | cut -d: -f3)" = 1510 && test "$(getent group albok-personal | cut -d: -f3)" = 1511 && test "$(getent group albok-feedback | cut -d: -f3)" = 1512
changed_when: "false"
- name: roots are local (not NFS) and owned by 1500
sudo: true