install-guide: add steps to configure rootwrap

We need to configure rootwrap to start privsep daemon that is
used to execute privilege commands. Otherwise, all the shell
commands are not going to work.

Related-Bug: #1749342
Change-Id: I91e55f292e1ae247081e5728df70da81207e44b8
This commit is contained in:
Hongbin Lu 2018-03-18 03:36:13 +00:00
parent 6e94dc4865
commit f7e2c2defc
1 changed files with 12 additions and 0 deletions

View File

@ -55,6 +55,18 @@ Install and configure components
--config-file etc/zun/zun-config-generator.conf" zun
# su -s /bin/sh -c "cp etc/zun/zun.conf.sample \
/etc/zun/zun.conf" zun
# su -s /bin/sh -c "cp etc/zun/rootwrap.conf \
/etc/zun/rootwrap.conf" zun
# su -s /bin/sh -c "mkdir -p /etc/zun/rootwrap.d" zun
# su -s /bin/sh -c "cp etc/zun/rootwrap.d/* \
/etc/zun/rootwrap.d/" zun
#. Configure sudoers for ``zun`` users:
.. code-block:: console
# echo "zun ALL=(root) NOPASSWD: /usr/local/bin/zun-rootwrap \
/etc/zun/rootwrap.conf *" | sudo tee /etc/sudoers.d/zun-rootwrap
#. Edit the ``/etc/zun/zun.conf``: