Call sudo from Jenkins

Jenkinsnot-root-usersudotty

I have one build machine which has a user abc which is has limited sudo access. When I check out the source code and run my build script, it works fine. The build script contains sudo calls for which it does not say "sudo: no tty present and no askpass program specified". But when I did same thing with Jenkins on a build machine added as slave, it shows "sudo: no tty present and no askpass program specified".

I have found one solution saying to comment out Default requiretty in the file /etc/sudoers. But I don’t have access to this file.

How I can overcome this problem?

Best Answer

There are two options, comment out the Defaults requiretty setting from /etc/sudoers as you mentioned or use the pseudo-tty allocation (-t) argument for ssh.

Try the following in your jenkins script:

ssh -t 127.0.0.1 "sudo command"

Although you will have to have ssh pre-shared keys configured to yourself and run it once manually to add an entry to known hosts, alternatively add the -o StrictHostKeyChecking=no argument to ssh to ignore this.

Related Solutions

Sudo askpass: ask from other tty

sudo will read an environment variable, SUDO_ASKPASS, if it is not running from a terminal (as in your case) or if -A is set. It uses this as a command to run to get the password. For example:

echo -e '#!/bin/sh\nhead -n 1' > ~/bin/reader
chmod a+x ~/bin/reader
export SUDO_ASKPASS="$HOME/bin/reader"
sudo -A echo "I'm root\!"

Will prompt you for the password on stdin, and won't require a terminal.

In the specific case of what you are trying to do however, it might be better to allow root SSH login, but only with an SSH key and the command restricted to rsync. There is a good resource on this here.

Best Answer

Related Solutions

Sudo askpass: ask from other tty

Related Question