docker-splunk
docker-splunk copied to clipboard
remove sudo access in splunk image
hi team,
may i know can i change become from true to false in splunk docker image ?? this beacuse our k8s platform not allow root user running in the container, so it can't running as uid 0 or sudo here
[privilege_escalation] become = true #change to false become_method = sudo # remove this become_flags = -H -S -n -i # remove this
here is error what i have met when "become=true"
TASK [Gathering Facts] ********************************************************* fatal: [localhost]: FAILED! => { "ansible_facts": {}, "changed": false, "failed_modules": { "ansible.legacy.setup": { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python" }, "deprecations": [ { "msg": "Distribution redhat 8.5 on host localhost should use /usr/libexec/platform-python, but is using /usr/bin/python for backward compatibility with prior Ansible releases. A future Ansible release will default to using the discovered platform python for this host. See https://docs.ansible.com/ansible/2.10/reference_appendices/interpreter_discovery.html for more information", "version": "2.12" } ], "failed": true, "module_stderr": "sudo: effective uid is not 0, is /usr/bin/sudo on a file system with the 'nosuid' option set or an NFS file system without root privileges?\n", "module_stdout": "", "msg": "MODULE FAILURE\nSee stdout/stderr for the exact error", "rc": 1 } } }
MSG:
The following modules failed to execute: ansible.legacy.setup
PLAY RECAP ********************************************************************* localhost : ok=0 changed=0 unreachable=0 failed=1 skipped=0 rescued=0 ignored=0
Monday 18 April 2022 06:59:50 +0000 (0:00:00.507) 0:00:00.651 **********
Hello,
Did you manage to resolve the issue?
Yep, resloved, thanks for help
从 Windows 版邮件https://go.microsoft.com/fwlink/?LinkId=550986发送
发件人: @.> 发送时间: 2022年12月5日 18:07 收件人: @.> 抄送: @.>; @.> 主题: Re: [splunk/docker-splunk] remove sudo access in splunk image (Issue #544)
Hello,
Did you manage to resolve the issue?
― Reply to this email directly, view it on GitHubhttps://github.com/splunk/docker-splunk/issues/544#issuecomment-1337068943, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ACAEWI3U7WI6FN5NUGRA2SLWLW5E7ANCNFSM5TVHZV3Q. You are receiving this because you authored the thread.Message ID: @.***>