Run SENSR without sudo
SENSR runs using sudo rights and is configured through the file config.json
. While those are practical, they can be an issue for running SENSR in a secure environment. This page describes the steps necessary to run SENSR without using sudo rights or storing a password in plain text in the config.json
file.
Configure sudo group, on every host running SENSR (both master and algo). Register default user to sudo group, by running:
echo "$USER ALL=(ALL) NOPASSWD: ALL" | sudo tee -a /etc/sudoers
Register SSH key on master
- Create a SSH keypair by running
ssh-keygen -t ed25519 -N ""
- To allow connections from master, iteratively run following command from the master node,
ssh-copy-id [USER]@[IP ADDRESS]
For example, with a Master node connected to two algo nodes with users called host1 and host2 located at 192.168.1.100 and 192.168.1.101
```bash
ssh-copy-id host1@192.168.1.100
# You will be prompted with host1's password
ssh-copy-id host2@192.168.1.101
# You will be prompted with host2's password
```
- Create a cluster.json file as instructed here, in the password field, use any random string.