From: Seena Fallah <seenafallah@gmail.com>
Date: Thu, 16 May 2024 22:11:58 +0000 (+0200)
Subject: ceph-container: use ceph user and group
X-Git-Url: http://git.apps.os.sepia.ceph.com/?a=commitdiff_plain;h=2485f9f7d51e74e1dadca8f1e36f2133ac9bbddf;p=ceph-ansible.git

ceph-container: use ceph user and group

Use --setuser and --setgroup to ceph to run daemons with ceph user.

Signed-off-by: Seena Fallah <seenafallah@gmail.com>
(cherry picked from commit 7016c6df3cf5fc28f8b931ef9083de9dcf5e6e9c)
---

diff --git a/group_vars/all.yml.sample b/group_vars/all.yml.sample
index 988158133..325846ebe 100644
--- a/group_vars/all.yml.sample
+++ b/group_vars/all.yml.sample
@@ -493,6 +493,8 @@ dummy:
 #    CONTAINER_IMAGE: "{{ ceph_docker_registry }}/{{ ceph_docker_image }}:{{ ceph_docker_image_tag }}"
 #    TCMALLOC_MAX_TOTAL_THREAD_CACHE_BYTES: "{{ ceph_tcmalloc_max_total_thread_cache }}"
 #  args:
+#    - --setuser=ceph
+#    - --setgroup=ceph
 #    - --default-log-to-file=false
 #    - --default-log-to-stderr=true
 #    - --default-log-stderr-prefix="debug "
diff --git a/roles/ceph-defaults/defaults/main.yml b/roles/ceph-defaults/defaults/main.yml
index 8ab19b402..09904f9ad 100644
--- a/roles/ceph-defaults/defaults/main.yml
+++ b/roles/ceph-defaults/defaults/main.yml
@@ -485,6 +485,8 @@ ceph_common_container_params:
     CONTAINER_IMAGE: "{{ ceph_docker_registry }}/{{ ceph_docker_image }}:{{ ceph_docker_image_tag }}"
     TCMALLOC_MAX_TOTAL_THREAD_CACHE_BYTES: "{{ ceph_tcmalloc_max_total_thread_cache }}"
   args:
+    - --setuser=ceph
+    - --setgroup=ceph
     - --default-log-to-file=false
     - --default-log-to-stderr=true
     - --default-log-stderr-prefix="debug "