Skip to content
Commits on Source (2)
jenkins ALL= \
NOPASSWD: /usr/sbin/debootstrap *, \
/usr/bin/tee /schroots/*, \
/usr/bin/tee -a /schroots/*, \
/usr/bin/tee /etc/schroot/chroot.d/jenkins*, \
/usr/bin/tee -a /etc/schroot/chroot.d/jenkins*, \
/bin/chmod +x /schroots/*, \
/bin/chmod +x /chroots/*, \
/bin/tar -c --exclude ./sys/\* --exclude ./proc/\* -f /schroots/*, \
/usr/sbin/chroot /schroots/*, \
/usr/sbin/chroot /chroots/*, \
/usr/sbin/chroot /media/*, \
/bin/ls -la /media/*, \
/bin/rm -rf --one-file-system /chroots/*, \
/bin/rm -rf --one-file-system /schroots/*, \
/bin/rm -rf --one-file-system /srv/live-build/*, \
/bin/rm -rf --one-file-system /srv/workspace/pbuilder/*, \
/bin/cp -v *.iso /srv/live-build/results/*, \
/bin/mv /chroots/* /schroots/*, \
/bin/mv /schroots/* /schroots/*, \
/bin/umount -l /chroots/*, \
/bin/umount -l /schroots/*, \
/bin/umount -l /media/*, \
/bin/rmdir /media/*, \
/bin/mount -o loop*, \
/bin/mount --bind *, \
/usr/bin/du *, \
/bin/kill *, \
/usr/bin/file *, \
/bin/dd if=/dev/zero of=/dev/jenkins*, \
/usr/bin/qemu-system-x86_64 *, \
/usr/bin/qemu-img *, \
/sbin/lvcreate *, /sbin/lvremove *, \
/bin/mkdir -p /media/*, \
/usr/bin/guestmount *, \
/bin/cp -rv /media/*, \
/bin/chown -R jenkins\:jenkins /var/lib/jenkins/jobs/*,\
SETENV: NOPASSWD: /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder *, \
/bin/mv /var/cache/pbuilder/*base*.tgz /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/*base*.tgz, \
/bin/rm -v /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/result/*, \
/usr/bin/dcmd rm *.changes, \
/usr/bin/dcmd rm *.dsc, \
/usr/bin/apt-get update, \
/usr/bin/killall timeout, \
/usr/sbin/slay 1111, \
/usr/sbin/slay 2222, \
/usr/sbin/slay jenkins
# keep these environment variables
Defaults env_keep += "http_proxy", env_reset
# allow member of the jenkins-adm group to sudo-to the jenkins-adm user (owner
# of jenkins script) and the jenkins user itself
%jenkins-adm ALL=(jenkins:jenkins) NOPASSWD: ALL
%jenkins-adm ALL=(jenkins-adm:jenkins-adm) NOPASSWD: ALL
# allow jenkins-adm to run everything as root
%jenkins-adm ALL= NOPASSWD: ALL
jenkins ALL= \
NOPASSWD: /usr/sbin/debootstrap *, \
/usr/bin/tee /schroots/*, \
/usr/bin/tee -a /schroots/*, \
/usr/bin/tee /etc/schroot/chroot.d/jenkins*, \
/usr/bin/tee -a /etc/schroot/chroot.d/jenkins*, \
/bin/chmod +x /schroots/*, \
/bin/chmod +x /chroots/*, \
/bin/tar -c --exclude ./sys/\* --exclude ./proc/\* -f /schroots/*, \
/usr/sbin/chroot /schroots/*, \
/usr/sbin/chroot /chroots/*, \
/usr/sbin/chroot /media/*, \
/bin/ls -la /media/*, \
/bin/rm -rf --one-file-system /chroots/*, \
/bin/rm -rf --one-file-system /schroots/*, \
/bin/rm -rf --one-file-system /srv/live-build/*, \
/bin/rm -rf --one-file-system /srv/workspace/pbuilder/*, \
/bin/cp -v *.iso /srv/live-build/results/*, \
/bin/mv /chroots/* /schroots/*, \
/bin/mv /schroots/* /schroots/*, \
/bin/umount -l /chroots/*, \
/bin/umount -l /schroots/*, \
/bin/umount -l /media/*, \
/bin/rmdir /media/*, \
/bin/mount -o loop*, \
/bin/mount --bind *, \
/usr/bin/du *, \
/bin/kill *, \
/usr/bin/file *, \
/bin/dd if=/dev/zero of=/dev/jenkins*, \
/usr/bin/qemu-system-x86_64 *, \
/usr/bin/qemu-img *, \
/sbin/lvcreate *, /sbin/lvremove *, \
/bin/mkdir -p /media/*, \
/usr/bin/guestmount *, \
/bin/cp -rv /media/*, \
/bin/chown -R jenkins\:jenkins /var/lib/jenkins/jobs/*,\
SETENV: NOPASSWD: /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder *, \
/bin/mv /var/cache/pbuilder/*base*.tgz /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/*base*.tgz, \
/bin/rm -v /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/result/*, \
/usr/bin/dcmd rm *.changes, \
/usr/bin/dcmd rm *.dsc, \
/usr/bin/apt-get update, \
/usr/bin/killall timeout, \
/usr/sbin/slay 1111, \
/usr/sbin/slay 2222, \
/usr/sbin/slay jenkins
# keep these environment variables
Defaults env_keep += "http_proxy", env_reset
# allow member of the jenkins-adm group to sudo-to the jenkins-adm user (owner
# of jenkins script) and the jenkins user itself
%jenkins-adm ALL=(jenkins:jenkins) NOPASSWD: ALL
%jenkins-adm ALL=(jenkins-adm:jenkins-adm) NOPASSWD: ALL
# allow jenkins-adm to run everything as root
%jenkins-adm ALL= NOPASSWD: ALL
jenkins ALL= \
NOPASSWD: /usr/sbin/debootstrap *, \
/usr/bin/tee /schroots/*, \
/usr/bin/tee -a /schroots/*, \
/usr/bin/tee /etc/schroot/chroot.d/jenkins*, \
/usr/bin/tee -a /etc/schroot/chroot.d/jenkins*, \
/bin/chmod +x /schroots/*, \
/bin/chmod +x /chroots/*, \
/bin/tar -c --exclude ./sys/\* --exclude ./proc/\* -f /schroots/*, \
/usr/sbin/chroot /schroots/*, \
/usr/sbin/chroot /chroots/*, \
/usr/sbin/chroot /media/*, \
/bin/ls -la /media/*, \
/bin/rm -rf --one-file-system /chroots/*, \
/bin/rm -rf --one-file-system /schroots/*, \
/bin/rm -rf --one-file-system /srv/live-build/*, \
/bin/rm -rf --one-file-system /srv/workspace/pbuilder/*, \
/bin/cp -v *.iso /srv/live-build/results/*, \
/bin/mv /chroots/* /schroots/*, \
/bin/mv /schroots/* /schroots/*, \
/bin/umount -l /chroots/*, \
/bin/umount -l /schroots/*, \
/bin/umount -l /media/*, \
/bin/rmdir /media/*, \
/bin/mount -o loop*, \
/bin/mount --bind *, \
/usr/bin/du *, \
/bin/kill *, \
/usr/bin/file *, \
/bin/dd if=/dev/zero of=/dev/jenkins*, \
/usr/bin/qemu-system-x86_64 *, \
/usr/bin/qemu-img *, \
/sbin/lvcreate *, /sbin/lvremove *, \
/bin/mkdir -p /media/*, \
/usr/bin/guestmount *, \
/bin/cp -rv /media/*, \
/bin/chown -R jenkins\:jenkins /var/lib/jenkins/jobs/*,\
SETENV: NOPASSWD: /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder *, \
/bin/mv /var/cache/pbuilder/*base*.tgz /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/*base*.tgz, \
/bin/rm -v /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/result/*, \
/usr/bin/dcmd rm *.changes, \
/usr/bin/dcmd rm *.dsc, \
/usr/bin/apt-get update, \
/usr/bin/killall timeout, \
/usr/sbin/slay 1111, \
/usr/sbin/slay 2222, \
/usr/sbin/slay jenkins
# keep these environment variables
Defaults env_keep += "http_proxy", env_reset
# allow member of the jenkins-adm group to sudo-to the jenkins-adm user (owner
# of jenkins script) and the jenkins user itself
%jenkins-adm ALL=(jenkins:jenkins) NOPASSWD: ALL
%jenkins-adm ALL=(jenkins-adm:jenkins-adm) NOPASSWD: ALL
# allow jenkins-adm to run everything as root
%jenkins-adm ALL= NOPASSWD: ALL
jenkins ALL= \
NOPASSWD: /usr/sbin/debootstrap *, \
/usr/bin/tee /schroots/*, \
/usr/bin/tee -a /schroots/*, \
/usr/bin/tee /etc/schroot/chroot.d/jenkins*, \
/usr/bin/tee -a /etc/schroot/chroot.d/jenkins*, \
/bin/chmod +x /schroots/*, \
/bin/chmod +x /chroots/*, \
/bin/tar -c --exclude ./sys/\* --exclude ./proc/\* -f /schroots/*, \
/usr/sbin/chroot /schroots/*, \
/usr/sbin/chroot /chroots/*, \
/usr/sbin/chroot /media/*, \
/bin/ls -la /media/*, \
/bin/rm -rf --one-file-system /chroots/*, \
/bin/rm -rf --one-file-system /schroots/*, \
/bin/rm -rf --one-file-system /srv/live-build/*, \
/bin/rm -rf --one-file-system /srv/workspace/pbuilder/*, \
/bin/cp -v *.iso /srv/live-build/results/*, \
/bin/mv /chroots/* /schroots/*, \
/bin/mv /schroots/* /schroots/*, \
/bin/umount -l /chroots/*, \
/bin/umount -l /schroots/*, \
/bin/umount -l /media/*, \
/bin/rmdir /media/*, \
/bin/mount -o loop*, \
/bin/mount --bind *, \
/usr/bin/du *, \
/bin/kill *, \
/usr/bin/file *, \
/bin/dd if=/dev/zero of=/dev/jenkins*, \
/usr/bin/qemu-system-x86_64 *, \
/usr/bin/qemu-img *, \
/sbin/lvcreate *, /sbin/lvremove *, \
/bin/mkdir -p /media/*, \
/usr/bin/guestmount *, \
/bin/cp -rv /media/*, \
/bin/chown -R jenkins\:jenkins /var/lib/jenkins/jobs/*,\
SETENV: NOPASSWD: /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder *, \
/bin/mv /var/cache/pbuilder/*base*.tgz /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/*base*.tgz, \
/bin/rm -v /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/result/*, \
/usr/bin/dcmd rm *.changes, \
/usr/bin/dcmd rm *.dsc, \
/usr/bin/apt-get update, \
/usr/bin/killall timeout, \
/usr/sbin/slay 1111, \
/usr/sbin/slay 2222, \
/usr/sbin/slay jenkins
# keep these environment variables
Defaults env_keep += "http_proxy", env_reset
# allow member of the jenkins-adm group to sudo-to the jenkins-adm user (owner
# of jenkins script) and the jenkins user itself
%jenkins-adm ALL=(jenkins:jenkins) NOPASSWD: ALL
%jenkins-adm ALL=(jenkins-adm:jenkins-adm) NOPASSWD: ALL
# allow jenkins-adm to run everything as root
%jenkins-adm ALL= NOPASSWD: ALL
jenkins ALL= \
NOPASSWD: /usr/sbin/debootstrap *, \
/usr/bin/tee /schroots/*, \
/usr/bin/tee -a /schroots/*, \
/usr/bin/tee /etc/schroot/chroot.d/jenkins*, \
/usr/bin/tee -a /etc/schroot/chroot.d/jenkins*, \
/bin/chmod +x /schroots/*, \
/bin/chmod +x /chroots/*, \
/bin/tar -c --exclude ./sys/\* --exclude ./proc/\* -f /schroots/*, \
/usr/sbin/chroot /schroots/*, \
/usr/sbin/chroot /chroots/*, \
/usr/sbin/chroot /media/*, \
/bin/ls -la /media/*, \
/bin/rm -rf --one-file-system /chroots/*, \
/bin/rm -rf --one-file-system /schroots/*, \
/bin/rm -rf --one-file-system /srv/live-build/*, \
/bin/rm -rf --one-file-system /srv/workspace/pbuilder/*, \
/bin/cp -v *.iso /srv/live-build/results/*, \
/bin/mv /chroots/* /schroots/*, \
/bin/mv /schroots/* /schroots/*, \
/bin/umount -l /chroots/*, \
/bin/umount -l /schroots/*, \
/bin/umount -l /media/*, \
/bin/rmdir /media/*, \
/bin/mount -o loop*, \
/bin/mount --bind *, \
/usr/bin/du *, \
/bin/kill *, \
/usr/bin/file *, \
/bin/dd if=/dev/zero of=/dev/jenkins*, \
/usr/bin/qemu-system-x86_64 *, \
/usr/bin/qemu-img *, \
/sbin/lvcreate *, /sbin/lvremove *, \
/bin/mkdir -p /media/*, \
/usr/bin/guestmount *, \
/bin/cp -rv /media/*, \
/bin/chown -R jenkins\:jenkins /var/lib/jenkins/jobs/*,\
SETENV: NOPASSWD: /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder *, \
/bin/mv /var/cache/pbuilder/*base*.tgz /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/*base*.tgz, \
/bin/rm -v /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/result/*, \
/usr/bin/dcmd rm *.changes, \
/usr/bin/dcmd rm *.dsc, \
/usr/bin/apt-get update, \
/usr/bin/killall timeout, \
/usr/sbin/slay 1111, \
/usr/sbin/slay 2222, \
/usr/sbin/slay jenkins
# keep these environment variables
Defaults env_keep += "http_proxy", env_reset
# allow member of the jenkins-adm group to sudo-to the jenkins-adm user (owner
# of jenkins script) and the jenkins user itself
%jenkins-adm ALL=(jenkins:jenkins) NOPASSWD: ALL
%jenkins-adm ALL=(jenkins-adm:jenkins-adm) NOPASSWD: ALL
# allow jenkins-adm to run everything as root
%jenkins-adm ALL= NOPASSWD: ALL
jenkins ALL= \
NOPASSWD: /usr/sbin/debootstrap *, \
/usr/bin/tee /schroots/*, \
/usr/bin/tee -a /schroots/*, \
/usr/bin/tee /etc/schroot/chroot.d/jenkins*, \
/usr/bin/tee -a /etc/schroot/chroot.d/jenkins*, \
/bin/chmod +x /schroots/*, \
/bin/chmod +x /chroots/*, \
/bin/tar -c --exclude ./sys/\* --exclude ./proc/\* -f /schroots/*, \
/usr/sbin/chroot /schroots/*, \
/usr/sbin/chroot /chroots/*, \
/usr/sbin/chroot /media/*, \
/bin/ls -la /media/*, \
/bin/rm -rf --one-file-system /chroots/*, \
/bin/rm -rf --one-file-system /schroots/*, \
/bin/rm -rf --one-file-system /srv/live-build/*, \
/bin/rm -rf --one-file-system /srv/workspace/pbuilder/*, \
/bin/cp -v *.iso /srv/live-build/results/*, \
/bin/mv /chroots/* /schroots/*, \
/bin/mv /schroots/* /schroots/*, \
/bin/umount -l /chroots/*, \
/bin/umount -l /schroots/*, \
/bin/umount -l /media/*, \
/bin/rmdir /media/*, \
/bin/mount -o loop*, \
/bin/mount --bind *, \
/usr/bin/du *, \
/bin/kill *, \
/usr/bin/file *, \
/bin/dd if=/dev/zero of=/dev/jenkins*, \
/usr/bin/qemu-system-x86_64 *, \
/usr/bin/qemu-img *, \
/sbin/lvcreate *, /sbin/lvremove *, \
/bin/mkdir -p /media/*, \
/usr/bin/guestmount *, \
/bin/cp -rv /media/*, \
/bin/chown -R jenkins\:jenkins /var/lib/jenkins/jobs/*,\
SETENV: NOPASSWD: /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder *, \
/bin/mv /var/cache/pbuilder/*base*.tgz /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/*base*.tgz, \
/bin/rm -v /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/result/*, \
/usr/bin/dcmd rm *.changes, \
/usr/bin/dcmd rm *.dsc, \
/usr/bin/apt-get update, \
/usr/bin/killall timeout, \
/usr/sbin/slay 1111, \
/usr/sbin/slay 2222, \
/usr/sbin/slay jenkins
# keep these environment variables
Defaults env_keep += "http_proxy", env_reset
# allow member of the jenkins-adm group to sudo-to the jenkins-adm user (owner
# of jenkins script) and the jenkins user itself
%jenkins-adm ALL=(jenkins:jenkins) NOPASSWD: ALL
%jenkins-adm ALL=(jenkins-adm:jenkins-adm) NOPASSWD: ALL
# allow jenkins-adm to run everything as root
%jenkins-adm ALL= NOPASSWD: ALL
jenkins ALL= \
NOPASSWD: /usr/sbin/debootstrap *, \
/usr/bin/tee /schroots/*, \
/usr/bin/tee -a /schroots/*, \
/usr/bin/tee /etc/schroot/chroot.d/jenkins*, \
/usr/bin/tee -a /etc/schroot/chroot.d/jenkins*, \
/bin/chmod +x /schroots/*, \
/bin/chmod +x /chroots/*, \
/bin/tar -c --exclude ./sys/\* --exclude ./proc/\* -f /schroots/*, \
/usr/sbin/chroot /schroots/*, \
/usr/sbin/chroot /chroots/*, \
/usr/sbin/chroot /media/*, \
/bin/ls -la /media/*, \
/bin/rm -rf --one-file-system /chroots/*, \
/bin/rm -rf --one-file-system /schroots/*, \
/bin/rm -rf --one-file-system /srv/live-build/*, \
/bin/rm -rf --one-file-system /srv/workspace/pbuilder/*, \
/bin/cp -v *.iso /srv/live-build/results/*, \
/bin/mv /chroots/* /schroots/*, \
/bin/mv /schroots/* /schroots/*, \
/bin/umount -l /chroots/*, \
/bin/umount -l /schroots/*, \
/bin/umount -l /media/*, \
/bin/rmdir /media/*, \
/bin/mount -o loop*, \
/bin/mount --bind *, \
/usr/bin/du *, \
/bin/kill *, \
/usr/bin/file *, \
/bin/dd if=/dev/zero of=/dev/jenkins*, \
/usr/bin/qemu-system-x86_64 *, \
/usr/bin/qemu-img *, \
/sbin/lvcreate *, /sbin/lvremove *, \
/bin/mkdir -p /media/*, \
/usr/bin/guestmount *, \
/bin/cp -rv /media/*, \
/bin/chown -R jenkins\:jenkins /var/lib/jenkins/jobs/*,\
SETENV: NOPASSWD: /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder *, \
/bin/mv /var/cache/pbuilder/*base*.tgz /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/*base*.tgz, \
/bin/rm -v /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/result/*, \
/usr/bin/dcmd rm *.changes, \
/usr/bin/dcmd rm *.dsc, \
/usr/bin/apt-get update, \
/usr/bin/killall timeout, \
/usr/sbin/slay 1111, \
/usr/sbin/slay 2222, \
/usr/sbin/slay jenkins
# keep these environment variables
Defaults env_keep += "http_proxy", env_reset
# allow member of the jenkins-adm group to sudo-to the jenkins-adm user (owner
# of jenkins script) and the jenkins user itself
%jenkins-adm ALL=(jenkins:jenkins) NOPASSWD: ALL
%jenkins-adm ALL=(jenkins-adm:jenkins-adm) NOPASSWD: ALL
# allow jenkins-adm to run everything as root
%jenkins-adm ALL= NOPASSWD: ALL
jenkins ALL= \
NOPASSWD: /usr/sbin/debootstrap *, \
/usr/bin/tee /schroots/*, \
/usr/bin/tee -a /schroots/*, \
/usr/bin/tee /etc/schroot/chroot.d/jenkins*, \
/usr/bin/tee -a /etc/schroot/chroot.d/jenkins*, \
/bin/chmod +x /schroots/*, \
/bin/chmod +x /chroots/*, \
/bin/tar -c --exclude ./sys/\* --exclude ./proc/\* -f /schroots/*, \
/usr/sbin/chroot /schroots/*, \
/usr/sbin/chroot /chroots/*, \
/usr/sbin/chroot /media/*, \
/bin/ls -la /media/*, \
/bin/rm -rf --one-file-system /chroots/*, \
/bin/rm -rf --one-file-system /schroots/*, \
/bin/rm -rf --one-file-system /srv/live-build/*, \
/bin/rm -rf --one-file-system /srv/workspace/pbuilder/*, \
/bin/cp -v *.iso /srv/live-build/results/*, \
/bin/mv /chroots/* /schroots/*, \
/bin/mv /schroots/* /schroots/*, \
/bin/umount -l /chroots/*, \
/bin/umount -l /schroots/*, \
/bin/umount -l /media/*, \
/bin/rmdir /media/*, \
/bin/mount -o loop*, \
/bin/mount --bind *, \
/usr/bin/du *, \
/bin/kill *, \
/usr/bin/file *, \
/bin/dd if=/dev/zero of=/dev/jenkins*, \
/usr/bin/qemu-system-x86_64 *, \
/usr/bin/qemu-img *, \
/sbin/lvcreate *, /sbin/lvremove *, \
/bin/mkdir -p /media/*, \
/usr/bin/guestmount *, \
/bin/cp -rv /media/*, \
/bin/chown -R jenkins\:jenkins /var/lib/jenkins/jobs/*,\
SETENV: NOPASSWD: /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder *, \
/bin/mv /var/cache/pbuilder/*base*.tgz /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/*base*.tgz, \
/bin/rm -v /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/result/*, \
/usr/bin/dcmd rm *.changes, \
/usr/bin/dcmd rm *.dsc, \
/usr/bin/apt-get update, \
/usr/bin/killall timeout, \
/usr/sbin/slay 1111, \
/usr/sbin/slay 2222, \
/usr/sbin/slay jenkins
# keep these environment variables
Defaults env_keep += "http_proxy", env_reset
# allow member of the jenkins-adm group to sudo-to the jenkins-adm user (owner
# of jenkins script) and the jenkins user itself
%jenkins-adm ALL=(jenkins:jenkins) NOPASSWD: ALL
%jenkins-adm ALL=(jenkins-adm:jenkins-adm) NOPASSWD: ALL
# allow jenkins-adm to run everything as root
%jenkins-adm ALL= NOPASSWD: ALL
jenkins ALL= \
NOPASSWD: /usr/sbin/debootstrap *, \
/usr/bin/tee /schroots/*, \
/usr/bin/tee -a /schroots/*, \
/usr/bin/tee /etc/schroot/chroot.d/jenkins*, \
/usr/bin/tee -a /etc/schroot/chroot.d/jenkins*, \
/bin/chmod +x /schroots/*, \
/bin/chmod +x /chroots/*, \
/bin/tar -c --exclude ./sys/\* --exclude ./proc/\* -f /schroots/*, \
/usr/sbin/chroot /schroots/*, \
/usr/sbin/chroot /chroots/*, \
/usr/sbin/chroot /media/*, \
/bin/ls -la /media/*, \
/bin/rm -rf --one-file-system /chroots/*, \
/bin/rm -rf --one-file-system /schroots/*, \
/bin/rm -rf --one-file-system /srv/live-build/*, \
/bin/rm -rf --one-file-system /srv/workspace/pbuilder/*, \
/bin/cp -v *.iso /srv/live-build/results/*, \
/bin/mv /chroots/* /schroots/*, \
/bin/mv /schroots/* /schroots/*, \
/bin/umount -l /chroots/*, \
/bin/umount -l /schroots/*, \
/bin/umount -l /media/*, \
/bin/rmdir /media/*, \
/bin/mount -o loop*, \
/bin/mount --bind *, \
/usr/bin/du *, \
/bin/kill *, \
/usr/bin/file *, \
/bin/dd if=/dev/zero of=/dev/jenkins*, \
/usr/bin/qemu-system-x86_64 *, \
/usr/bin/qemu-img *, \
/sbin/lvcreate *, /sbin/lvremove *, \
/bin/mkdir -p /media/*, \
/usr/bin/guestmount *, \
/bin/cp -rv /media/*, \
/bin/chown -R jenkins\:jenkins /var/lib/jenkins/jobs/*,\
SETENV: NOPASSWD: /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder *, \
/bin/mv /var/cache/pbuilder/*base*.tgz /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/*base*.tgz, \
/bin/rm -v /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/result/*, \
/usr/bin/dcmd rm *.changes, \
/usr/bin/dcmd rm *.dsc, \
/usr/bin/apt-get update, \
/usr/bin/killall timeout, \
/usr/sbin/slay 1111, \
/usr/sbin/slay 2222, \
/usr/sbin/slay jenkins
# keep these environment variables
Defaults env_keep += "http_proxy", env_reset
# allow member of the jenkins-adm group to sudo-to the jenkins-adm user (owner
# of jenkins script) and the jenkins user itself
%jenkins-adm ALL=(jenkins:jenkins) NOPASSWD: ALL
%jenkins-adm ALL=(jenkins-adm:jenkins-adm) NOPASSWD: ALL
# allow jenkins-adm to run everything as root
%jenkins-adm ALL= NOPASSWD: ALL
jenkins ALL= \
NOPASSWD: /usr/sbin/debootstrap *, \
/usr/bin/tee /schroots/*, \
/usr/bin/tee -a /schroots/*, \
/usr/bin/tee /etc/schroot/chroot.d/jenkins*, \
/usr/bin/tee -a /etc/schroot/chroot.d/jenkins*, \
/bin/chmod +x /schroots/*, \
/bin/chmod +x /chroots/*, \
/bin/tar -c --exclude ./sys/\* --exclude ./proc/\* -f /schroots/*, \
/usr/sbin/chroot /schroots/*, \
/usr/sbin/chroot /chroots/*, \
/usr/sbin/chroot /media/*, \
/bin/ls -la /media/*, \
/bin/rm -rf --one-file-system /chroots/*, \
/bin/rm -rf --one-file-system /schroots/*, \
/bin/rm -rf --one-file-system /srv/live-build/*, \
/bin/rm -rf --one-file-system /srv/workspace/pbuilder/*, \
/bin/cp -v *.iso /srv/live-build/results/*, \
/bin/mv /chroots/* /schroots/*, \
/bin/mv /schroots/* /schroots/*, \
/bin/umount -l /chroots/*, \
/bin/umount -l /schroots/*, \
/bin/umount -l /media/*, \
/bin/rmdir /media/*, \
/bin/mount -o loop*, \
/bin/mount --bind *, \
/usr/bin/du *, \
/bin/kill *, \
/usr/bin/file *, \
/bin/dd if=/dev/zero of=/dev/jenkins*, \
/usr/bin/qemu-system-x86_64 *, \
/usr/bin/qemu-img *, \
/sbin/lvcreate *, /sbin/lvremove *, \
/bin/mkdir -p /media/*, \
/usr/bin/guestmount *, \
/bin/cp -rv /media/*, \
/bin/chown -R jenkins\:jenkins /var/lib/jenkins/jobs/*,\
SETENV: NOPASSWD: /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder *, \
SETENV: NOPASSWD: /usr/bin/timeout -k ??.?h ??h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder *, \
/bin/mv /var/cache/pbuilder/*base*.tgz /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/*base*.tgz, \
/bin/rm -v /var/cache/pbuilder/*base*.tgz, \
/bin/rm /var/cache/pbuilder/result/*, \
/usr/bin/dcmd rm *.changes, \
/usr/bin/dcmd rm *.dsc, \
/usr/bin/apt-get update, \
/usr/bin/killall timeout, \
/usr/sbin/slay 1111, \
/usr/sbin/slay 2222, \
/usr/sbin/slay jenkins
# keep these environment variables
Defaults env_keep += "http_proxy", env_reset
# allow member of the jenkins-adm group to sudo-to the jenkins-adm user (owner
# of jenkins script) and the jenkins user itself
%jenkins-adm ALL=(jenkins:jenkins) NOPASSWD: ALL
%jenkins-adm ALL=(jenkins-adm:jenkins-adm) NOPASSWD: ALL
# allow jenkins-adm to run everything as root
%jenkins-adm ALL= NOPASSWD: ALL