-
Notifications
You must be signed in to change notification settings - Fork 140
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
consider not modifying the node exporter user if it already exists #183
Comments
No, we want our Ansible roles to be idempotent. We need to maintain all configurations in order for this policy to be maintained.
|
Set the node_exporter `ProtectHome=read-only` when the textfile dir is in `/home`. Fixes: #183 Signed-off-by: SuperQ <[email protected]>
I'll still need to use a fork for my own purposes, but I understand that this may not work for all. The latter part is a sweet and rapid improvement :) cheers |
Set the node_exporter `ProtectHome=read-only` when the textfile dir is in `/home`. Fixes: #183 Signed-off-by: SuperQ <[email protected]>
Set the node_exporter `ProtectHome=read-only` when the textfile dir is in `/home`. Fixes: #183 Signed-off-by: SuperQ <[email protected]>
Set the node_exporter `ProtectHome=read-only` when the textfile dir is in `/home`. Fixes: #183 Signed-off-by: SuperQ <[email protected]>
Set the node_exporter `ProtectHome=read-only` when the textfile dir is in `/home`. Fixes: #183 Signed-off-by: SuperQ <[email protected]>
Set the node_exporter `ProtectHome=read-only` when the textfile dir is in `/home`. Fixes: #183 Signed-off-by: SuperQ <[email protected]>
Set the node_exporter `ProtectHome=read-only` when the textfile dir is in `/home`. Fixes: #183 Signed-off-by: SuperQ <[email protected]>
Set the node_exporter `ProtectHome=read-only` when the textfile dir is in `/home`. Fixes: #183 Signed-off-by: SuperQ <[email protected]>
Set the node_exporter `ProtectHome=read-only` when the textfile dir is in `/home`. Fixes: #183 Signed-off-by: SuperQ <[email protected]>
Set the node_exporter `ProtectHome=read-only` when the textfile dir is in `/home`. Fixes: #183 Signed-off-by: SuperQ <[email protected]>
Using the node_exporter role without fully checking all the steps (mea culpa), I was astonished to find out that it had reduced the user I wanted to run node-exporter as to a no-login, no-home, system user. This then caused other issues with other services running under this user's name and that very much expect to have a home directory of their own.
I think the role should check whether the user already exists and not modify the user if so.
The service file should then also not include
ProtectHome=yes
as this would effectively disable it from accessing its own home, where, in my case all the metrics prom files are written to.The text was updated successfully, but these errors were encountered: