Forum Discussion
Granting sudo permissions to DevOps Agent user
Hi, We're running an agent pool hosted in an Azure VMSS. Are there any serious security concerns with granting sudo rights for the user used to run the pipelines? Of course granting as few right...
Even i have a concern on this i.e., i have configured my scale set agent to have permission for other files and applications using `facl` but when it comes to installing tools at runtime via pipeline it needs sudo privileges which in this case the AzureDevOps user doesn't have and fails to install via apt-get. Here im trying to install mysql-shell using
`sudo apt-get update
sudo apt-get install mysql-shell`
Any solution for this is really appreciated.
`sudo apt-get update
sudo apt-get install mysql-shell`
Any solution for this is really appreciated.
I ran into a similar problem with requiring installing a different CLI tool. I ended up just updating my image to have that tool installed and now I'm wondering if we should just grant the DevOps user sudo privileges to avoid this kind of situation in the future.