Avoid starting rabbitmq processes as root #403
Conversation
mattymo
force-pushed
the
epmd-as-rabbitmq
branch
2 times, most recently
from
5a86458
to
e95189a
Compare
|
Not sure if this makes things any easier but it should be possible to simply run any |
|
epmd will start if it's not running already if you run any rabbitmq* script. If you're running as root (which is required for rabbitmq-plugin script), it launches epmd. In many deployment scenarios, we need to enable plugins before starting any clustered mode. |
Rabbitmq-plugins must be run as root (in order to set /etc/rabbitmq/enabled_plugins), but as a consequence, it starts empd and leaves it running. This can be worked around by starting epmd as rabbitmq user before evaluating any plugins.
mattymo
force-pushed
the
epmd-as-rabbitmq
branch
from
e95189a
to
dc277a0
Compare
Starting rabbitmq-server causes rabbitmq (and dependent processes) to start as root user, causing undesirable results. epmd process stays running as root until killed by OCF scripts. It is more desirable to start rabbitmq manually when Puppet tells it to. Additionally, rabbitmq-plugins must be run as root (in order to set /etc/rabbitmq/enabled_plugins), but as a consequence, it starts epmd and leaves it running. This can be worked around by starting epmd as rabbitmq user before evaluating any plugins. Added test for ensuring all RabbitMQ related processes are running as rabbitmq user. Upstream proposed change: voxpupuli/puppet-rabbitmq#403 Change-Id: Ia6e5392c9d16d1be0ea166a61402d2103c5d4453 Closes-Bug: #1483249
|
What's the problem with running |
|
Agree with @daenney , also don't like that it's going to be the default for all users of the rabbitmq module. |
|
Closing this because of inactivity. @mattymo if this is still an issue, please feel free to re-open and rebase! |
Rabbitmq-plugins must be run as root
(in order to set /etc/rabbitmq/enabled_plugins), but as
a consequence, it starts epmd and leaves it running.
This can be worked around by starting epmd as rabbitmq
user before evaluating any plugins.