Skip to content

Commit 868e45f

Browse files
committed
kea: T7281: Preserve systemd unit environment in VRF exec
1 parent 25efe38 commit 868e45f

3 files changed

Lines changed: 4 additions & 3 deletions

File tree

src/etc/sudoers.d/vyos

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,6 +48,7 @@ Cmnd_Alias DIAGNOSTICS = /bin/ip vrf exec * /bin/ping *, \
4848
Cmnd_Alias KEA_IP6_ROUTES = /sbin/ip -6 route replace *,\
4949
/sbin/ip -6 route del *
5050
Cmnd_Alias KEA_DHCP = /bin/ip vrf exec * /usr/sbin/kea-dhcp*,\
51+
/usr/bin/chown * /var/run/kea/*,\
5152
/usr/bin/chown * /run/kea/*
5253
%operator ALL=NOPASSWD: DATE, IPTABLES, ETHTOOL, IPFLUSH, HWINFO, \
5354
PPPOE_CMDS, PCAPTURE, /usr/sbin/wanpipemon, \
@@ -64,4 +65,4 @@ Cmnd_Alias KEA_DHCP = /bin/ip vrf exec * /usr/sbin/kea-dhcp*,\
6465
%sudo ALL=NOPASSWD: /usr/bin/mokutil
6566

6667
_kea ALL=NOPASSWD: KEA_IP6_ROUTES
67-
_kea ALL=NOPASSWD: KEA_DHCP
68+
_kea ALL=NOPASSWD:SETENV: KEA_DHCP

src/etc/systemd/system/isc-kea-dhcp4-server@.service

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ RuntimeDirectoryMode=0750
1818
LogsDirectory=kea
1919
LogsDirectoryMode=0750
2020
StateDirectory=kea
21-
ExecStart=sudo /bin/ip vrf exec %i /usr/sbin/kea-dhcp4 -c /var/run/kea/kea-%i-dhcp4.conf
21+
ExecStart=sudo -E /bin/ip vrf exec %i /usr/sbin/kea-dhcp4 -c /var/run/kea/kea-%i-dhcp4.conf
2222
ExecStartPost=/bin/sh -c 'sleep 10 && sudo /usr/bin/chown _kea:_kea /var/run/kea/dhcp4-%i-ctrl* && sudo /usr/bin/chown _kea:_kea /var/run/kea/kea-%i-dhcp4* && sudo /usr/bin/chown _kea:_kea /run/kea/logger_lockfile'
2323
Restart=on-failure
2424

src/etc/systemd/system/isc-kea-dhcp6-server@.service

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ RuntimeDirectoryMode=0750
1818
LogsDirectory=kea
1919
LogsDirectoryMode=0750
2020
StateDirectory=kea
21-
ExecStart=sudo /bin/ip vrf exec %i /usr/sbin/kea-dhcp6 -c /var/run/kea/kea-%i-dhcp6.conf
21+
ExecStart=sudo -E /bin/ip vrf exec %i /usr/sbin/kea-dhcp6 -c /var/run/kea/kea-%i-dhcp6.conf
2222
ExecStartPost=/bin/sh -c 'sleep 10 && sudo /usr/bin/chown _kea:_kea /var/run/kea/dhcp6-%i-ctrl* && sudo /usr/bin/chown _kea:_kea /var/run/kea/kea-%i-dhcp6* && sudo /usr/bin/chown _kea:_kea /run/kea/logger_lockfile'
2323
Restart=on-failure
2424

0 commit comments

Comments
 (0)