Become and Permission Problems¶
Section status: outline
This page is scoped but not yet written in full prose. The sections below define what it will cover.
Why This Exists¶
SSH auth succeeding and become succeeding are two independent checks — a task can fail here with a working connection, and the fix is entirely different from an SSH fix.
What It Will Cover¶
Missing sudo password—become_ask_passneeded, or the remote user needs passwordless sudo configured (NOPASSWDin sudoers) for automation usesudo: a password is requiredcombined with pipelining enabled — the classicrequirettysudoers interaction, and the fix (Defaults !requirettyor targeted per-command)- A task succeeding at the SSH layer but failing with
Permission deniedon a specific file — distinguishing "the become user lacks rights to this path" from "the SSH user itself lacks rights," using-vvvto see exactly which user each step ran as become_usertargeting a non-root service account correctly, and what breaks when a task assumes root implicitly
Interview Questions¶
- A task fails with
Missing sudo password— what are the two possible fixes, and how do you choose between them? - Why does enabling pipelining sometimes surface a previously-hidden
becomefailure?
Next¶
Continue to YAML and Variable Errors.