Starting Talend Remote Engine without root privilege - Cloud

Talend Remote Engine User Guide for Linux

Version
Cloud
Language
English
Operating system
Linux
Product
Talend Cloud
Module
Talend Remote Engine
Content
Design and Development
Installation and Upgrade
Last publication date
2024-02-23

The user that starts Talend Remote Engine needs to be allowed to start processes as other users without having to enter a password.

Procedure

  1. Change the sudoers file on the machine that runs Talend Remote Engine, using the sudo visudo command.
  2. Edit sudoers.

    Example

    # ...
    # User alias specification
    User_Alias JOB_SERVER = jerry
    
    # Cmnd alias specification
    Cmnd_Alias RUN_JOB = /bin/ps, /usr/bin/java, /bin/sh, /bin/grep, /bin/kill
    
    # ...
    # Add after the line: %sudo	ALL=(ALL:ALL) ALL
    JOB_SERVER      ALL=(jules,jim) NOPASSWD: RUN_JOB

    In this example, it is assumed that user Jerry will start Talend Remote Engine and the tasks may have to run under the existing users, Jules and Jim.

    The Talend Remote Engine process started by Jerry will need to be able to execute the following commands as Jules or Jim:

    /bin/ps
    /usr/bin/java
    /bin/sh
    /bin/grep
    /bin/kill

    For security reasons, do not allow more commands.