Page MenuHomePhabricator

Add the ML team to the POSIX group `docker` on `ml-build1001`
Open, Needs TriagePublic

Description

This is needed so people can build docker images without the need for full sudo access.

While this could be covered by sudo-to-root access, doing it via the group is cleaner and makes logs more obvious for auditing.

The users have been hand-added already, but this is not Puppetized yet.

Event Timeline

The scope here has changed a bit: docker membership is not needed on ml-lab1002, but only on ml-build1001 (which used to be ml-lab1001). The users have been hand-edited there to be in the right groups, but none of it is puppetized. Will update the bug desc. in a moment.

klausman renamed this task from Add the ML team to the POSIX group `docker` on the ML lab machines. to Add the ML team to the POSIX group `docker` on `ml-build1001`.Jul 14 2026, 11:23 AM
klausman updated the task description. (Show Details)