one/share/pkgs/sudoers/opennebula-node-kvm

oneadmin ALL=(ALL:ALL) NOPASSWD: ONE_CEPH, ONE_NET, ONE_OVS, ONE_LVM, ONE_MEM, ONE_VGPU
oneadmin ALL=(ALL:ALL) NOPASSWD:SETENV: ONE_NETNS
F #5351: add support for NVIDIA vGPU (#1779) 2022-02-17 17:51:27 +03:00			`oneadmin ALL=(ALL:ALL) NOPASSWD: ONE_CEPH, ONE_NET, ONE_OVS, ONE_LVM, ONE_MEM, ONE_VGPU`
F OpenNebula/one#6641: Add the "string-phone" transparent proxy (#3221) This feature let's cloud admin to proxy VM connections to any service through the hypervisor. VMs uses a link local IP that is forwarded to a local proxy. This simplifies VM network requirements, e.g. to access gateway, vaults, configuration services etc... Implementation: - Use network namespaces to isolate VNET networking. ip netns command is executed through a wrapper to limit sudo access to commands. - Add tproxy.rb app to manage a group of daemons on HV nodes. - Use unix sockets for communication between proxy peers. "Inner" proxy runs in the netns without any network access. "Outer" proxy handles HV connections to services. - Use OpenNebulaNetwork.conf + 'onehost sync -f' for configuration. Proxy can be defined per network. 2024-09-26 19:19:48 +03:00			`oneadmin ALL=(ALL:ALL) NOPASSWD:SETENV: ONE_NETNS`