devteam/sharenet
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Remove sudo access from SERVICE_USER in guides
Some checks are pending
CI/CD Pipeline / Test Backend (push) Waiting to run
Details
CI/CD Pipeline / Test Frontend (push) Waiting to run
Details
CI/CD Pipeline / Build and Push Docker Images (push) Blocked by required conditions
Details
CI/CD Pipeline / Deploy to Production (push) Blocked by required conditions
Details

Browse source
This commit is contained in:
continuist 2025-06-28 13:33:12 -04:00
parent 2ee91f95e0
commit fdaec65250
2 changed files with 2 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
CI_CD_PIPELINE_SETUP_GUIDE.md
View file

@ -385,7 +385,6 @@ sudo apt install -y \
```bash ```bash
sudo useradd -r -s /bin/bash -m -d /home/SERVICE_USER SERVICE_USER sudo useradd -r -s /bin/bash -m -d /home/SERVICE_USER SERVICE_USER
sudo usermod -aG sudo SERVICE_USER
echo "SERVICE_USER:$(openssl rand -base64 32)" | sudo chpasswd echo "SERVICE_USER:$(openssl rand -base64 32)" | sudo chpasswd
``` ```
@ -1059,7 +1058,6 @@ sudo apt install -y \
```bash ```bash
sudo useradd -r -s /bin/bash -m -d /home/SERVICE_USER SERVICE_USER sudo useradd -r -s /bin/bash -m -d /home/SERVICE_USER SERVICE_USER
sudo usermod -aG sudo SERVICE_USER
echo "SERVICE_USER:$(openssl rand -base64 32)" | sudo chpasswd echo "SERVICE_USER:$(openssl rand -base64 32)" | sudo chpasswd
``` ```

5
PRODUCTION_LINODE_MANUAL_SETUP.md
View file

@ -212,21 +212,20 @@ sudo apt install -y \
```bash ```bash
sudo useradd -r -s /bin/bash -m -d /home/SERVICE_USER SERVICE_USER sudo useradd -r -s /bin/bash -m -d /home/SERVICE_USER SERVICE_USER
sudo usermod -aG sudo SERVICE_USER
echo "SERVICE_USER:$(openssl rand -base64 32)" | sudo chpasswd echo "SERVICE_USER:$(openssl rand -base64 32)" | sudo chpasswd
``` ```
**What this does**: **What this does**:
- Creates a dedicated service account named `SERVICE_USER` - Creates a dedicated service account named `SERVICE_USER`
- Gives it sudo privileges for administrative tasks
- Generates a random 32-character password - Generates a random 32-character password
- **Note**: This user has no sudo privileges for security (principle of least privilege)
**Expected output**: No output (successful user creation is silent). **Expected output**: No output (successful user creation is silent).
**If something goes wrong**: **If something goes wrong**:
- If user already exists: `sudo userdel -r SERVICE_USER` then retry - If user already exists: `sudo userdel -r SERVICE_USER` then retry
- Check user creation: `id SERVICE_USER` - Check user creation: `id SERVICE_USER`
- Verify sudo access: `sudo -u SERVICE_USER sudo -l` - Verify user exists: `getent passwd SERVICE_USER`
#### 2.2 Verify Service Account #### 2.2 Verify Service Account