[GH-ISSUE #30] apache user needs to be in the wheel group ? #21

Closed
opened 2026-03-02 03:21:19 +03:00 by kerem · 5 comments
Owner

Originally created by @bozhinov on GitHub (Jan 20, 2021).
Original GitHub issue: https://github.com/clonos/control-pane/issues/30

The way I read it cloneos->cbsd_cmd needs to exec a command with elevated privs
does that mean that the user that runs the apache httpd needs to be in the wheel group ?

Originally created by @bozhinov on GitHub (Jan 20, 2021). Original GitHub issue: https://github.com/clonos/control-pane/issues/30 The way I read it cloneos->cbsd_cmd needs to exec a command with elevated privs does that mean that the user that runs the apache httpd needs to be in the wheel group ?
kerem closed this issue 2026-03-02 03:21:19 +03:00
Author
Owner

@olevole commented on GitHub (Jan 20, 2021):

In the current schema, the apache/httpd/nginx user must be a member of the cbsd group as it only interacts with cbsd commands.

This is an outdated scheme and the new implementation implies interaction through the api and the broker[1]. It will also make multi-mode installations much easier. However, this is a large refactoring that has not yet begun due to lack of human resources.

However, new functionality (for example, the planned Kubernetes module) will interact via the api, WIP.

__
[1] - https://www.bsdstore.ru/en/broker_driven_sample_ssi.html

<!-- gh-comment-id:763511042 --> @olevole commented on GitHub (Jan 20, 2021): In the current schema, the apache/httpd/nginx user must be a member of the cbsd group as it only interacts with cbsd commands. This is an outdated scheme and the new implementation implies interaction through the api and the broker[1]. It will also make multi-mode installations much easier. However, this is a large refactoring that has not yet begun due to lack of human resources. However, new functionality (for example, the planned Kubernetes module) will interact via the api, WIP. __ [1] - https://www.bsdstore.ru/en/broker_driven_sample_ssi.html
Author
Owner

@bozhinov commented on GitHub (Jan 20, 2021):

good. cause the current code makes my skin crawl even if it is only to be run over the management lan

I could land a hand if you would accept it.

<!-- gh-comment-id:763534060 --> @bozhinov commented on GitHub (Jan 20, 2021): good. cause the current code makes my skin crawl even if it is only to be run over the management lan I could land a hand if you would accept it.
Author
Owner

@olevole commented on GitHub (Jan 23, 2021):

@bozhinov I understand your pain ;-) and am very glad that the community is growing, because ClonOS is a large multi-component project. After some refactoring of the backend and finalizing api (wip) on my part, we can start this work. I am currently testing several PoC (proof-of-concept) multi-node pool-binded APIs based on beanstalkd/RMQ

<!-- gh-comment-id:765905983 --> @olevole commented on GitHub (Jan 23, 2021): @bozhinov I understand your pain ;-) and am very glad that the community is growing, because ClonOS is a large multi-component project. After some refactoring of the backend and finalizing api (**wip**) on my part, we can start this work. I am currently testing several PoC (proof-of-concept) multi-node pool-binded APIs based on beanstalkd/RMQ
Author
Owner

@olevole commented on GitHub (Jan 23, 2021):

clonos-api

<!-- gh-comment-id:765906068 --> @olevole commented on GitHub (Jan 23, 2021): ![clonos-api](https://user-images.githubusercontent.com/926409/105576476-066ff980-5d84-11eb-8199-c888523173c2.png)
Author
Owner

@bozhinov commented on GitHub (Jan 23, 2021):

Nice! ok so what's with the Go, Python, PHP and the number of database engines in use ?

<!-- gh-comment-id:765970839 --> @bozhinov commented on GitHub (Jan 23, 2021): Nice! ok so what's with the Go, Python, PHP and the number of database engines in use ?
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/control-pane#21
No description provided.