Date: Tue, 3 Dec 2013 22:47:11 -0500
From: Jim Pryor <dubiousjim@gmail.com>
To: Natanael Copa <ncopa@alpinelinux.org>
Cc: Alpine <alpine-devel@lists.alpinelinux.org>
Subject: Re: [alpine-devel] a few abuild oddities
Message-ID: <20131204034711.GL29236@zen>
Mail-Followup-To: Natanael Copa <ncopa@alpinelinux.org>,
	Alpine <alpine-devel@lists.alpinelinux.org>
References: <20131201174554.GB29236@zen>
 <20131201235659.GD29236@zen>
 <20131202142914.4438af81@ncopa-desktop.alpinelinux.org>
 <1386000265.25324.54500989.5FF25FA8@webmail.messagingengine.com>
 <20131203163409.2bfaef86@ncopa-desktop.alpinelinux.org>
Precedence: list
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20131203163409.2bfaef86@ncopa-desktop.alpinelinux.org>
User-Agent: Mutt/1.5.22 (2013-10-16)

On Tue, Dec 03, 2013 at 04:34:09PM +0100, Natanael Copa wrote:
> > Is it possible to use abuild for the full range of activities without
> > being in the abuild group? Do we just prompt with sudo or su in those
> > cases when needed? In that case the security-conscious solution will
> > just be don't add your users to the "abuild" group. The costs and
> > benefits of this would just need to be more clearly documented.
> 
> You need either be in abuild group or have sudo permissions to use
> abuild -r for letting abuild install the deps for you.

Ok, but they don't have to be permissions to use "sudo abuild -r ..."
WITHOUT PASSWORD, correct? That's the behavior I expect.
> 
> To use sudo instead of abuild-apk you can set SUDO_APK="sudo apk"
> in /etc/abuild.conf (or just export SUDO_APK="sudo apk").

Great, thanks.

> You can still build packages with abuild without needing sudo but then
> all the dependencies needs to be installed already:
>   SUDO_APK=apk abuild
> 
> The motivation behind abuild group was to make it convenient to set up
> a build server. Might be we want change the default back to sudo.


-- 
Dubiousjim
dubiousjim@gmail.com


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---