Cmnd_Alias P4_SVC = /usr/bin/systemctl start node_exporter, \ /usr/bin/systemctl stop node_exporter, \ /usr/bin/systemctl restart node_exporter, \ /usr/bin/systemctl status node_exporter, \ /usr/bin/systemctl cat node_exporter, \ /usr/bin/systemctl enable node_exporter, \ /usr/bin/systemctl disable node_exporter, \ /usr/bin/systemctl is-enabled node_exporter, \ /usr/bin/systemctl start p4d_*, \ /usr/bin/systemctl stop p4d_*, \ /usr/bin/systemctl restart p4d_*, \ /usr/bin/systemctl status p4d_*, \ /usr/bin/systemctl cat p4d_*, \ /usr/bin/systemctl enable p4d_*, \ /usr/bin/systemctl disable p4d_*, \ /usr/bin/systemctl is-enabled p4d_*, \ /usr/bin/systemctl start p4dtg_*, \ /usr/bin/systemctl stop p4dtg_*, \ /usr/bin/systemctl restart p4dtg_*, \ /usr/bin/systemctl status p4dtg_*, \ /usr/bin/systemctl cat p4dtg_*, \ /usr/bin/systemctl enable p4dtg_*, \ /usr/bin/systemctl disable p4dtg_*, \ /usr/bin/systemctl is-enabled p4dtg_*, \ /usr/bin/systemctl start p4broker_*, \ /usr/bin/systemctl stop p4broker_*, \ /usr/bin/systemctl restart p4broker_*, \ /usr/bin/systemctl status p4broker_*, \ /usr/bin/systemctl cat p4broker_*, \ /usr/bin/systemctl enable p4broker_*, \ /usr/bin/systemctl disable p4broker_*, \ /usr/bin/systemctl is-enabled p4broker_*, \ /usr/bin/systemctl start p4p_*, \ /usr/bin/systemctl stop p4p_*, \ /usr/bin/systemctl restart p4p_*, \ /usr/bin/systemctl status p4p_*, \ /usr/bin/systemctl cat p4p_*, \ /usr/bin/systemctl enable p4p_*, \ /usr/bin/systemctl disable p4p_*, \ /usr/bin/systemctl is-enabled p4p_*, \ /usr/bin/systemctl start p4prometheus, \ /usr/bin/systemctl stop p4prometheus, \ /usr/bin/systemctl restart p4prometheus, \ /usr/bin/systemctl status p4prometheus, \ /usr/bin/systemctl cat p4prometheus, \ /usr/bin/systemctl enable p4prometheus, \ /usr/bin/systemctl disable p4prometheus, \ /usr/bin/systemctl is-enabled p4prometheus, \ /usr/bin/systemctl start helix-auth, \ /usr/bin/systemctl stop helix-auth, \ /usr/bin/systemctl restart helix-auth, \ /usr/bin/systemctl status helix-auth, \ /usr/bin/systemctl cat helix-auth, \ /usr/bin/systemctl enable helix-auth, \ /usr/bin/systemctl disable helix-auth, \ /usr/bin/systemctl is-enabled helix-auth, \ /usr/bin/lslocks, \ /usr/bin/getcap, \ /usr/bin/setcap, \ /usr/sbin/setcap, \ /usr/sbin/getcap, \ /sbin/getcap, \ /sbin/setcap, \ /bin/getcap, \ /bin/setcap __OSUSER__ __HOSTNAME__ = (root) NOPASSWD: P4_SVC
| # | Change | User | Description | Committed | |
|---|---|---|---|---|---|
| #1 | 32803 | Russell C. Jackson (Rusty) |
Modernize russell_jackson SDP fork from upstream 2025.2. - Port modern p4d features: partitioned/readonly clients, upgrade-safety (p4 storage -w / p4 upgrades polling), checkpoint/replica/edge tooling, proxy & broker SSL trust, modern p4login, dir-ownership preflight. - Add scripts: get_p4_binaries.sh (renamed from helix), ccheck.sh, verify_sdp.sh, sdp_health_check.sh, journal_watch.sh, load_checkpoint.sh, refresh_P4ROOT, request_replica_checkpoint.sh, keep_offline_db_current.sh, gen_sudoers.sh, etc. - Migrate configurables to configurables.cfg applied via ccheck.sh -fix; slim configure_new_server.sh to setup-only. - upgrade.sh: dry-run default, verified clean rollback point. - Fixes from multi-agent review (rsync byte/KB+comma, cfg field counts, version thresholds, etc.). See SDP_PORT_SCOPE.md for the full manifest. |