4 ms·
It's not necessarily for deploys (though you certainly could make a workflow that uses it to do so!) but I developed a dual-control plugin for sudo while at Squ
by stouset 7y ago
It's not necessarily for deploys (though you certainly could make a workflow that uses it to do so!) but I developed a dual-control plugin for sudo while at Square. We use it extensively.
https://github.com/square/sudo_pair https://github.com/square/sudo_pair
In action: https://raw.githubusercontent.com/square/sudo_pair/master/demo.gif https://raw.githubusercontent.com/square/sudo_pair/master/de...
- kortilla 7y agoDoesn’t that encourage using sudo in interactive mode rather than elevating for just the required commands?
- bin0 7y agoI suppose you're right, but the reason that's generally advised against is so people don't run stupid stuff without thinking while root. I'd guess you're less likely to do that if a peer is watching. And to stouset: that's a seriously cool project!
- throw0101a 7y ago> Doesn’t that encourage using sudo in interactive mode rather than elevating for just the required commands? It might, but policy could specify not allowing interactive mode for situations that dictate a two-man rule. Violation of said policy would necessitate a review and possible HR-related action depending on how serious the company wants to treat things.