)]}'
{"README.rst":[{"author":{"_account_id":1,"name":"James E. Blair","email":"jim@acmegating.com","username":"corvus"},"change_message_id":"1aeb04d2379cfd2bbf4af01af2ecd633ce95d2da","unresolved":false,"context_lines":[{"line_number":266,"context_line":"  \u0026\u0026 echo \u0027jenkins ALL\u003d(ALL) NOPASSWD: ALL\u0027 \u003e /etc/sudoers.d/jenkins \\"},{"line_number":267,"context_line":"  \u0026\u0026 chmod 0440 /etc/sudoers.d/jenkins \u0026\u0026 mkdir ~jenkins/.ssh \\"},{"line_number":268,"context_line":"  \u0026\u0026 cp .ssh/authorized_keys ~jenkins/.ssh/ \\"},{"line_number":269,"context_line":"  \u0026\u0026 chown -R jenkins:jenkins ~jenkins/.ssh \u0026\u0026 reboot"},{"line_number":270,"context_line":""},{"line_number":271,"context_line":"Wait a few moments for the reboot to complete, then log back in with"},{"line_number":272,"context_line":"``nova ssh --login jenkins testserver`` or ``ssh jenkins@\u003cip_address\u003e``"}],"source_content_type":"text/x-rst","patch_set":3,"id":"AAAAPn%2F%2F8Ow%3D","line":269,"updated":"2013-06-17 19:52:08.000000000","message":"I think this should be:\n\n  shell in as root\n  clone openstack-infra/config\n  run install_puppet.sh\n  puppet apply ...\n\nas in devstack-vm-update-image.py.  It will do all of that in fewer commands.  Also, there\u0027s no reason that chunk of code couldn\u0027t be in a script that gets called by the image update script as well as being able to be used manually.","commit_id":"f37b8eac4569b39732abca7b02a1250033469764"},{"author":{"_account_id":1,"name":"James E. Blair","email":"jim@acmegating.com","username":"corvus"},"change_message_id":"7dcdd4fb25e7986604d9757e76fd7747703a7b68","unresolved":false,"context_lines":[{"line_number":266,"context_line":"  \u0026\u0026 echo \u0027jenkins ALL\u003d(ALL) NOPASSWD: ALL\u0027 \u003e /etc/sudoers.d/jenkins \\"},{"line_number":267,"context_line":"  \u0026\u0026 chmod 0440 /etc/sudoers.d/jenkins \u0026\u0026 mkdir ~jenkins/.ssh \\"},{"line_number":268,"context_line":"  \u0026\u0026 cp .ssh/authorized_keys ~jenkins/.ssh/ \\"},{"line_number":269,"context_line":"  \u0026\u0026 chown -R jenkins:jenkins ~jenkins/.ssh \u0026\u0026 reboot"},{"line_number":270,"context_line":""},{"line_number":271,"context_line":"Wait a few moments for the reboot to complete, then log back in with"},{"line_number":272,"context_line":"``nova ssh --login jenkins testserver`` or ``ssh jenkins@\u003cip_address\u003e``"}],"source_content_type":"text/x-rst","patch_set":3,"id":"AAAAPn%2F%2Fz3s%3D","line":269,"in_reply_to":"AAAAPn%2F%2F6ZA%3D","updated":"2013-06-20 17:11:08.000000000","message":"I think some of those concerns are based on incorrect information.  No one needs to set up a puppetmaster or modify puppet configuration.  No cron jobs will be set up.\n\nI mentioned \"puppet apply ...\" \"as in devstack-vm update-image.py\".  To be specific, I meant the following:\n \n  puppet apply --modulepath\u003d/root/config/modules:/etc/puppet/modules -e \"class {\u0027openstack_project::slave_template\u0027: install_users \u003d\u003e false, ssh_key \u003d\u003e \u0027`cat ~/.ssh/authorized_keys`\u0027, }\"\n\nWhich will not create other users and will only install the users local ssh key while requiring no puppet modification or puppet master.","commit_id":"f37b8eac4569b39732abca7b02a1250033469764"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"6bbede1477117cdefa43f45f72f450b7df807a05","unresolved":false,"context_lines":[{"line_number":266,"context_line":"  \u0026\u0026 echo \u0027jenkins ALL\u003d(ALL) NOPASSWD: ALL\u0027 \u003e /etc/sudoers.d/jenkins \\"},{"line_number":267,"context_line":"  \u0026\u0026 chmod 0440 /etc/sudoers.d/jenkins \u0026\u0026 mkdir ~jenkins/.ssh \\"},{"line_number":268,"context_line":"  \u0026\u0026 cp .ssh/authorized_keys ~jenkins/.ssh/ \\"},{"line_number":269,"context_line":"  \u0026\u0026 chown -R jenkins:jenkins ~jenkins/.ssh \u0026\u0026 reboot"},{"line_number":270,"context_line":""},{"line_number":271,"context_line":"Wait a few moments for the reboot to complete, then log back in with"},{"line_number":272,"context_line":"``nova ssh --login jenkins testserver`` or ``ssh jenkins@\u003cip_address\u003e``"}],"source_content_type":"text/x-rst","patch_set":3,"id":"AAAAPn%2F%2F6ZA%3D","line":269,"in_reply_to":"AAAAPn%2F%2F8Ow%3D","updated":"2013-06-18 13:23:58.000000000","message":"That\u0027s more or less what I tried to distill here, without dragging in puppet, third-party APT repos...\n\nNote that without further effort (setting up a puppet master, modifying puppet configuration) that would also do things like grant other people SSH and SNMP access to your test VM, possibly add cron jobs and other unclean things which make the VM easier for management within OpenStack infrastructure but may be entirely unsuitable in the context of a random developer\u0027s cloud provider account.\n\nIt\u0027s a tradeoff, agreed. The more I make this dependent on our infrastructure management toolchain, the more unnecessary infrastructure-oriented complication will be dragged in. Extracting the minimal setup out of configuration management and into a script in devstack-gate further complicates overall configuration management. Leaving them entirely separate allows for them to drift apart somewhat.\n\nI\u0027ll play around with it and see what the result might look like.","commit_id":"f37b8eac4569b39732abca7b02a1250033469764"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"cfab90a30c806a1aa2e3ac5ef789ceff9026ed41","unresolved":false,"context_lines":[{"line_number":266,"context_line":"  \u0026\u0026 echo \u0027jenkins ALL\u003d(ALL) NOPASSWD: ALL\u0027 \u003e /etc/sudoers.d/jenkins \\"},{"line_number":267,"context_line":"  \u0026\u0026 chmod 0440 /etc/sudoers.d/jenkins \u0026\u0026 mkdir ~jenkins/.ssh \\"},{"line_number":268,"context_line":"  \u0026\u0026 cp .ssh/authorized_keys ~jenkins/.ssh/ \\"},{"line_number":269,"context_line":"  \u0026\u0026 chown -R jenkins:jenkins ~jenkins/.ssh \u0026\u0026 reboot"},{"line_number":270,"context_line":""},{"line_number":271,"context_line":"Wait a few moments for the reboot to complete, then log back in with"},{"line_number":272,"context_line":"``nova ssh --login jenkins testserver`` or ``ssh jenkins@\u003cip_address\u003e``"}],"source_content_type":"text/x-rst","patch_set":3,"id":"AAAAPn%2F%2FzwE%3D","line":269,"in_reply_to":"AAAAPn%2F%2Fz3s%3D","updated":"2013-06-20 18:27:06.000000000","message":"Yes, sorry, my apprehension was based in part on a misreading of the update-image script. Rudimentary testing suggests this works as expected (though install_modules.sh also has to be run before puppet apply works). I\u0027ll get a cleaned up version in a new patchset once I\u0027ve done some more thorough tests. Thanks!","commit_id":"f37b8eac4569b39732abca7b02a1250033469764"}]}