[Bug 2152298] Re: Ceph 20.2.0 - wildcards are not allowed in command arguments

[Edison Wong]

At least I give a fix like this: https://github.com/alvistack/ceph-
ceph/blob/alvistack/v20.2.4/debian/patches/0028-2152298-ceph-
smartctl.patch

```
--- a/sudoers.d/ceph-smartctl
+++ b/sudoers.d/ceph-smartctl
@@ -1,4 +1,4 @@
 ## allow ceph daemons (which run as user ceph) to collect device health metrics
 
-ceph ALL=NOPASSWD: /usr/sbin/smartctl -x --json=o /dev/*
-ceph ALL=NOPASSWD: /usr/sbin/nvme * smart-log-add --json /dev/*
+ceph ALL=(ALL) NOPASSWD: /usr/sbin/smartctl
+ceph ALL=(ALL) NOPASSWD: /usr/sbin/nvme
```

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to ceph in Ubuntu.
https://bugs.launchpad.net/bugs/2152298

Title:
  Ceph 20.2.0 - wildcards are not allowed in command arguments

Status in ceph package in Ubuntu:
  Confirmed

Bug description:
  After installing a Ceph Tentacle cluster on Ubuntu 26.04 LTS using
  ceph-by-ansible (1).

  The ceph-base package installs /etc/sudoers.d/ceph-smartctl which
  generates the following warning messages every time sudo is executed:

  $ sudo ceph -s
  /etc/sudoers.d/ceph-smartctl:3:20: wildcards are not allowed in command arguments
  ceph ALL=NOPASSWD: /usr/sbin/smartctl -x --json=o /dev/*
                     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  /etc/sudoers.d/ceph-smartctl:4:20: wildcards are not allowed in command arguments
  ceph ALL=NOPASSWD: /usr/sbin/nvme * smart-log-add --json /dev/*
                     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

  We need to get this addressed.

  Thanks,
  Alan

  
  (1) https://github.com/alanbach/ceph-by-ansible

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ceph/+bug/2152298/+subscriptions