Change in osmo-ci[master]: ansible: ogt: Deploy osmo-gsm-tester_netns_exec.sh

This is merely a historical archive of years 2008-2021, before the migration to mailman3.

A maintained and still updated list archive can be found at https://lists.osmocom.org/hyperkitty/list/gerrit-log@lists.osmocom.org/.

Pau Espin Pedrol gerrit-no-reply at lists.osmocom.org
Fri Oct 26 19:25:54 UTC 2018


Pau Espin Pedrol has submitted this change and it was merged. ( https://gerrit.osmocom.org/11465 )

Change subject: ansible: ogt: Deploy osmo-gsm-tester_netns_exec.sh
......................................................................

ansible: ogt: Deploy osmo-gsm-tester_netns_exec.sh

Related: OS#2308
Change-Id: I587dd5630b211a906351f064c718f8f4c5fe6273
---
A ansible/roles/gsm-tester/files/osmo-gsm-tester_netns_exec.sh
M ansible/roles/gsm-tester/tasks/main.yml
2 files changed, 18 insertions(+), 0 deletions(-)

Approvals:
  Harald Welte: Looks good to me, approved
  Pau Espin Pedrol: Verified



diff --git a/ansible/roles/gsm-tester/files/osmo-gsm-tester_netns_exec.sh b/ansible/roles/gsm-tester/files/osmo-gsm-tester_netns_exec.sh
new file mode 100755
index 0000000..336b746
--- /dev/null
+++ b/ansible/roles/gsm-tester/files/osmo-gsm-tester_netns_exec.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+netns="$1"
+shift
+#TODO: Later on I may want to call myself with specific ENV and calling sudo in order to run inside the netns but with dropped privileges
+ip netns exec $netns "$@"
diff --git a/ansible/roles/gsm-tester/tasks/main.yml b/ansible/roles/gsm-tester/tasks/main.yml
index 61db8e9..4f57b17 100644
--- a/ansible/roles/gsm-tester/tasks/main.yml
+++ b/ansible/roles/gsm-tester/tasks/main.yml
@@ -237,6 +237,19 @@
     dest: /etc/sudoers.d/osmo-gsm-tester_setcap_net_admin
     mode: 0440
 
+- name: create a wrapper script to run processes on modem netns
+  copy:
+    src: osmo-gsm-tester_netns_exec.sh
+    dest: /usr/local/bin/osmo-gsm-tester_netns_exec.sh
+    mode: 755
+
+- name: allow osmo-gsm-tester sudo osmo-gsm-tester_netns_exec.sh
+  copy:
+    content: |
+      %osmo-gsm-tester ALL=(root) NOPASSWD: /usr/local/bin/osmo-gsm-tester_netns_exec.sh
+    dest: /etc/sudoers.d/osmo-gsm-tester_netns_exec
+    mode: 0440
+
 - name: logrotate limit filesizes to 10M
   copy:
     content: "maxsize 10M"

-- 
To view, visit https://gerrit.osmocom.org/11465
To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings

Gerrit-Project: osmo-ci
Gerrit-Branch: master
Gerrit-MessageType: merged
Gerrit-Change-Id: I587dd5630b211a906351f064c718f8f4c5fe6273
Gerrit-Change-Number: 11465
Gerrit-PatchSet: 2
Gerrit-Owner: Pau Espin Pedrol <pespin at sysmocom.de>
Gerrit-Reviewer: Harald Welte <laforge at gnumonks.org>
Gerrit-Reviewer: Pau Espin Pedrol <pespin at sysmocom.de>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osmocom.org/pipermail/gerrit-log/attachments/20181026/6af24943/attachment.htm>


More information about the gerrit-log mailing list