From 8a93ef0fc167a80b41fb1aba1a6b659df54a4bb7 Mon Sep 17 00:00:00 2001 From: "Dustin C. Hatch" Date: Thu, 7 Aug 2025 15:07:02 -0500 Subject: [PATCH] hosts: Remove chromie.p.b from AD domain Since it was updated to Fedora 42, Jenkins configuration management jobs have been failing to apply policy to _chromie.pyrocufflink.blue_. It claims "jenkins is not in the sudoers file," apparently because `winbind` keeps "forgetting" that _jenkins_ is a member of the _server admins_ group, which is listed in `sudoers` file. I'm getting tired of messing with `winbind` and its barrage of bugs and quirks. There's no particular reason for _chromie_ to be an AD domain member, so let's just remove it and manage its users statically. --- hosts | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/hosts b/hosts index b5882cc..f25e0b9 100644 --- a/hosts +++ b/hosts @@ -25,6 +25,9 @@ git0.pyrocufflink.blue [certbot] +[chrony] +chromie.pyrocufflink.blue + [chrony:children] kubelet pyrocufflink @@ -34,6 +37,7 @@ node-6a3f87.k8s.pyrocufflink.black node-6ed191.k8s.pyrocufflink.black [collectd] +chromie.pyrocufflink.blue [collectd:children] kubelet @@ -176,7 +180,6 @@ web0.pyrocufflink.blue pxe0.pyrocufflink.blue [pyrocufflink] -chromie.pyrocufflink.blue cloud0.pyrocufflink.blue db0.pyrocufflink.blue dc-grumbly.pyrocufflink.blue @@ -234,6 +237,9 @@ smtp1.pyrocufflink.blue [squid] +[sudo] +chromie.pyrocufflink.blue + [sudo:children] pyrocufflink vps