summaryrefslogtreecommitdiffstats
path: root/hosts/profitbricks-build7-amd64/etc/sudoers.d/jenkins
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/profitbricks-build7-amd64/etc/sudoers.d/jenkins')
-rw-r--r--hosts/profitbricks-build7-amd64/etc/sudoers.d/jenkins19
1 files changed, 19 insertions, 0 deletions
diff --git a/hosts/profitbricks-build7-amd64/etc/sudoers.d/jenkins b/hosts/profitbricks-build7-amd64/etc/sudoers.d/jenkins
new file mode 100644
index 00000000..fa4778f6
--- /dev/null
+++ b/hosts/profitbricks-build7-amd64/etc/sudoers.d/jenkins
@@ -0,0 +1,19 @@
+jenkins ALL= \
+ NOPASSWD: /usr/sbin/debootstrap *, \
+ /usr/bin/tee /schroots/*, \
+ /usr/bin/tee -a /schroots/*, \
+ /usr/bin/tee /etc/schroot/chroot.d/jenkins*, \
+ /bin/chmod +x /schroots/*, \
+ /usr/sbin/chroot /schroots/*, \
+ /bin/rm -rf --one-file-system /schroots/*, \
+ /bin/rm -rf --one-file-system /srv/live-build/*, \
+ /bin/mv /schroots/* /schroots/*, \
+ /bin/umount -l /schroots/*, \
+ /bin/mount --bind *, \
+ /usr/bin/killall timeout, \
+ /usr/sbin/slay 1111, \
+ /usr/sbin/slay 2222, \
+ /usr/sbin/slay jenkins
+
+# keep these environment variables
+Defaults env_keep += "http_proxy", env_reset