From fd50f2bcb8902a688eb0b5ab27af13af2cb0fa80 Mon Sep 17 00:00:00 2001 From: Seth Hoenig Date: Tue, 11 Jul 2023 16:00:15 -0500 Subject: [PATCH] e2e: do not set a user for raw_exec tasks (#17901) Cannot set a user for raw_exec tasks, because doing so does not work with the 0700 root owned client data directory that we setup in the e2e cluster in accordance with the Nomad hardening guide. --- e2e/example/input/env.hcl | 1 - e2e/example/input/sleep.hcl | 1 - e2e/servicediscovery/input/checks_task_restart_main.nomad | 1 - 3 files changed, 3 deletions(-) diff --git a/e2e/example/input/env.hcl b/e2e/example/input/env.hcl index 6b1fa3c91..92cde35d8 100644 --- a/e2e/example/input/env.hcl +++ b/e2e/example/input/env.hcl @@ -23,7 +23,6 @@ job "env" { } task "task" { - user = "nobody" driver = "raw_exec" config { diff --git a/e2e/example/input/sleep.hcl b/e2e/example/input/sleep.hcl index 42c6c6aa9..4a1f97a55 100644 --- a/e2e/example/input/sleep.hcl +++ b/e2e/example/input/sleep.hcl @@ -28,7 +28,6 @@ job "sleep" { } task "task" { - user = "nobody" driver = "raw_exec" config { diff --git a/e2e/servicediscovery/input/checks_task_restart_main.nomad b/e2e/servicediscovery/input/checks_task_restart_main.nomad index 76d39b973..3d3db49e7 100644 --- a/e2e/servicediscovery/input/checks_task_restart_main.nomad +++ b/e2e/servicediscovery/input/checks_task_restart_main.nomad @@ -35,7 +35,6 @@ job "checks_task_restart" { task "python" { driver = "raw_exec" - user = "nobody" config { command = "python3" args = ["-m", "http.server", "${NOMAD_PORT_http}", "--directory", "/tmp"]