consul service user /bin/false shell ?

[epcim]

I have testes 1.4 version from master and found the service_user created "consul" is being OOTB created with /bin/false default shell. Which causes all scripted checks effectively silent.

poise_service_user doesn't have the "shell" attribute. So the only way to make the user with effective shell is to create him first. https://github.com/poise/poise-service#poise_service_user

As I am quite new with consul I am not about to post PR as this might be resolved multiple ways.

[johnbellone]

Which checks are failing?

[epcim]

I mean consul_definition, type=check. In other words any script execution: parameters(script:'xyz.sh'). As the "service consul user" don't have a proper shell configured.

I workaround it by:

# change the user shell "so it may run scripts for checks"
user node['consul']['service_user'] do
  shell '/bin/bash'
  action :modify
end

Related, I test it with Vagrant + opscode-centos-7.1 image.

[johnbellone]

Ah, interesting. It makes sense that this doesn't work just wonder why we never caught it before.

[johnbellone]

This was fixed in recent patch.

[lock]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.