Uploaded image for project: 'Bamboo Data Center'
  1. Bamboo Data Center
  2. BAM-2504

Add the ability to run a plan as another user

XMLWordPrintable

    • Icon: Suggestion Suggestion
    • Resolution: Won't Do
    • None
    • Permissions
    • None
    • 0
    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      When running a public continuous integration server, the potential risk is that a rogue build will interfere with

      1. bamboo
      2. another project

      While I suspect we could use remote agents to get around most of the risk of a plan interfering with bamboo; it does not help with preventing interference between projects.

      A cunning plan that I had was to allow the bamboo server to sudo to a variety of different accounts (typically one user per project.

      The launching the build would look something like

      sudo -u <project user> /home/bamboo/home/temp/launcher.sh
      

      Then the entire build would run as that user, completely isolated from the rest of the system and other plans.

      I've looked through the various plugins, and it doesn't appear I can write a plugin to intercept the build - and I don't want to have to write 4 plugins that pretty much replicate the existing builders (Ant / Maven / Maven2 / bash) - unless I can call them easily after I've sudoed - which I doubt.

            Unassigned Unassigned
            bda0663e090a Ben Walding
            Votes:
            7 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: