Starting Talend Remote Engine without root privilege - Cloud

Talend Remote Engine User Guide for Linux

EnrichVersion
Cloud
EnrichProdName
Talend Cloud
EnrichPlatform
Talend Remote Engine
task
Design and Development
Installation and Upgrade

The user that starts Talend Remote Engine needs to be allowed to start processes as other users without having to enter a password.

Procedure

  1. Change the sudoers file on the machine that runs Talend Remote Engine, using the sudo visudo command.
  2. Edit sudoers.

    Example

    # ...
    # User alias specification
    User_Alias JOB_SERVER = jerry
    
    # Cmnd alias specification
    Cmnd_Alias RUN_JOB = /bin/ps, /usr/bin/java, /bin/sh, /bin/grep, /bin/kill
    
    # ...
    # Add after the line: %sudo	ALL=(ALL:ALL) ALL
    JOB_SERVER      ALL=(jules,jim) NOPASSWD: RUN_JOB

    In this example, it is assumed that user Jerry will start Talend Remote Engine and the tasks may have to run under the existing users, Jules and Jim.

    The Talend Remote Engine process started by Jerry will need to be able to execute the following commands as Jules or Jim:

    /bin/ps
    /usr/bin/java
    /bin/sh
    /bin/grep
    /bin/kill

    For security reasons, do not allow more commands.