Running as root or not

[michaeldjcox]

Hi,

I'm perfecting my WFE plugin for linux and noted from another thread that some people run sagetv as root (I guess this is what you get by default) and some people (following best practice) run sagetv as another user.

I've got my plugin working where everything runs as root. I know want to test where sagetv runs as a different user.

Is there a step by step guide for doing this anywhere?

Michael

[kireol]

Here's what I did

sudo useradd --system -d /opt/sagetv/server/ -s /bin/false -g video -c "sagetv" sagetv
sudo chown -R sagetv.video /opt/sagetv/server

The first line creates a new user; sagetv. sagetv will then be a new user and in group video. your capture card is in /dev/videoX where X is the number of the device. /dev/video0 is group video, so sagetv will have access to it.

The second line allows the sagetv user to write to the folders that sagetv is using.


hope this helps

[drewg]

Originally Posted by kireol

Here's what I did

sudo useradd --system -d /opt/sagetv/server/ -s /bin/false -g video -c "sagetv" sagetv
sudo chown -R sagetv.video /opt/sagetv/server

I did that as well, though I actually gave sage a shell.

There's also the matter of starting sagetv at system boot. I don't know what the .deb installs. I took the mythtv startup script and modified it to start sage back in the 8.04 days, and am still using it:

% cat /etc/init.d/sagetv
#!/bin/sh
### BEGIN INIT INFO
# Provides:          sagetv
# Required-Start:    $network $local_fs
# Required-Stop:     $network $local_fs
# Default-Start:     2 3 4 5
# Default-Stop:      0 1 6
# Short-Description: Start/Stop the SageTV server.
### END INIT INFO

PATH=/opt/jre/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/opt/comskip
DAEMON=/home/sagetv/server/startsage
NAME="sagetv"
DESC="SageTV server"

test -x $DAEMON || exit 0

set -e

USER=sagetv
RUNDIR=/var/run/sagetv
#ARGS="--daemon --logfile /var/log/mythtv/mythbackend.log --pidfile $RUNDIR/$NAME.pid"
EXTRA_ARGS=""
NICE=0

ARGS="$ARGS $EXTRA_ARGS"

mkdir -p $RUNDIR
chown -R $USER $RUNDIR


case "$1" in
  start)
        echo -n "Starting $DESC: $NAME"
#       start-stop-daemon --start  \
#               --chuid $USER --nicelevel $NICE --exec $DAEMON -- $ARGS
        su - $USER -c /home/sagetv/server/startsage
        echo "."
        ;;
  stop)
        echo -n "Stopping $DESC: $NAME "
        /home/sagetv/server/stopsage
        echo "."
        ;;
  restart|force-reload)
        echo -n "Restarting $DESC: $NAME"
        /home/sagetv/server/stopsage
        echo "."
        sleep 3
#       start-stop-daemon --start  \
#               --chuid $USER --nicelevel $NICE --exec $DAEMON -- $ARGS
        su - $USER -c /home/sagetv/server/startsage
        echo "."
        ;;
  *)
        N=/etc/init.d/$NAME
        echo "Usage: $N {start|stop|restart|force-reload}" >&2
        exit 1
        ;;
esac

exit 0

% ls -l /etc/rc*.d/* | grep sagetv
lrwxrwxrwx 1 root root  16 Sep  5 15:14 /etc/rc0.d/K99sagetv -> ../init.d/sagetv*
lrwxrwxrwx 1 root root  16 Sep  5 15:14 /etc/rc1.d/K99sagetv -> ../init.d/sagetv*
lrwxrwxrwx 1 root root  16 Sep  5 15:12 /etc/rc2.d/S99sagetv -> ../init.d/sagetv*

[kireol]

Originally Posted by drewg

I did that as well, though I actually gave sage a shell.

There's also the matter of starting sagetv at system boot. I don't know what the .deb installs. I took the mythtv startup script and modified it to start sage back in the 8.04 days, and am still using it:

% cat /etc/init.d/sagetv
#!/bin/sh
### BEGIN INIT INFO
# Provides:          sagetv
# Required-Start:    $network $local_fs
# Required-Stop:     $network $local_fs
# Default-Start:     2 3 4 5
# Default-Stop:      0 1 6
# Short-Description: Start/Stop the SageTV server.
### END INIT INFO

PATH=/opt/jre/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/opt/comskip
DAEMON=/home/sagetv/server/startsage
NAME="sagetv"
DESC="SageTV server"

test -x $DAEMON || exit 0

set -e

USER=sagetv
RUNDIR=/var/run/sagetv
#ARGS="--daemon --logfile /var/log/mythtv/mythbackend.log --pidfile $RUNDIR/$NAME.pid"
EXTRA_ARGS=""
NICE=0

ARGS="$ARGS $EXTRA_ARGS"

mkdir -p $RUNDIR
chown -R $USER $RUNDIR


case "$1" in
  start)
        echo -n "Starting $DESC: $NAME"
#       start-stop-daemon --start  \
#               --chuid $USER --nicelevel $NICE --exec $DAEMON -- $ARGS
        su - $USER -c /home/sagetv/server/startsage
        echo "."
        ;;
  stop)
        echo -n "Stopping $DESC: $NAME "
        /home/sagetv/server/stopsage
        echo "."
        ;;
  restart|force-reload)
        echo -n "Restarting $DESC: $NAME"
        /home/sagetv/server/stopsage
        echo "."
        sleep 3
#       start-stop-daemon --start  \
#               --chuid $USER --nicelevel $NICE --exec $DAEMON -- $ARGS
        su - $USER -c /home/sagetv/server/startsage
        echo "."
        ;;
  *)
        N=/etc/init.d/$NAME
        echo "Usage: $N {start|stop|restart|force-reload}" >&2
        exit 1
        ;;
esac

exit 0

% ls -l /etc/rc*.d/* | grep sagetv
lrwxrwxrwx 1 root root  16 Sep  5 15:14 /etc/rc0.d/K99sagetv -> ../init.d/sagetv*
lrwxrwxrwx 1 root root  16 Sep  5 15:14 /etc/rc1.d/K99sagetv -> ../init.d/sagetv*
lrwxrwxrwx 1 root root  16 Sep  5 15:12 /etc/rc2.d/S99sagetv -> ../init.d/sagetv*

This is mine

#! /bin/sh

SAGEJAVADIR=/opt/jre/bin/java
SAGEPATH=/opt/sagetv/server
SAGEUSER=sagetv


case "$1" in
        start)
           echo -n "Starting SageTV server "
           touch /var/run/sagetv.pid && chown $SAGEUSER /var/run/sagetv.pid
           sudo -u $SAGEUSER PATH=$SAGEJAVADIR:$PATH $SAGEPATH/startsage 2> /dev/null
           ;;
        stop)  
                echo -n "Shutting down SageTV "
                $SAGEPATH/stopsage
                ;;
        restart)
                $0 stop
                $0 start
                ;;
        *)
                echo "Usage: $0 {start|stop|restart}"
                exit 1
                ;;
esac

[RocKKer]

Here is the .deb package startup script:

#! /bin/sh
### BEGIN INIT INFO
# Provides:          sagetv
# Required-Start:    $local_fs $remote_fs $network
# Required-Stop:     $local_fs $remote_fs $network
# Default-Start:     2 3 4 5
# Default-Stop:      S 0 1 6
# Short-Description: SageTV Server
# Description:       This is the init script for the SageTV service
#                    that handles clients and recordings.
### END INIT INFO
#
# Author:       Jean-Francois Thibert <jeanfrancois@sagetv.com>.
#
# Version:      @(#)sagetv  6.5  Jan-2009
#

set -e

PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
DESC="SageTV Server"
NAME=sagetv
SCRIPTNAME=/etc/init.d/$NAME

# Gracefully exit if the package has been removed.
test -x /opt/sagetv/server/startsage || exit 0

#
#       Function that starts the daemon/service.
#
d_start() {
        nohup /opt/sagetv/server/startsage
}

#
#       Function that stops the daemon/service.
#
d_stop() {
        /opt/sagetv/server/stopsage
}

case "$1" in
  start)
        echo -n "Starting $DESC: $NAME"
        d_start
        echo "."
        ;;
  stop)
        echo -n "Stopping $DESC: $NAME"
        d_stop || true
        echo "."
        ;;
  restart|force-reload)
        echo -n "Restarting $DESC: $NAME"
        d_stop || true
        sleep 3
        d_start
        echo "."
        ;;
  *)
        echo "Usage: $SCRIPTNAME {start|stop|restart|force-reload}" >&2
        exit 3
        ;;
esac

exit 0

[michaeldjcox]

Thanks guys