[Buildbot-devel] drop privileges in master?

[Dmitry Nezhevenko]

On Mon, Aug 01, 2011 at 02:13:14PM -0500, Dustin J. Mitchell wrote:
> On Mon, Aug 1, 2011 at 2:06 PM, Ian Zimmerman <itz at buug.org> wrote:
> > In other daemons, the usual solution is that the daemon opens
> > the port before doing anything else, then does a setuid() to a
> > configurable user.  Is there anything similar I can do with the
> > buildmaster?
> >
> > Or maybe there's a way to do that with inetd?  Unfortunately I
> > have almost no experience with inetd as most daemons are meant to
> > run standalone on newish Linuxen.
> 
> The usual solution is to run some sort of HTTP proxy in front of the
> buildmaster - nginx, lighttpd, etc.

+1 here. I'm running it with lighttpd frontend. And it works pretty well.
As a benefit, you can also host some related resources on same server like
build artifacts, etc.

-- 
WBR, Dmitry
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://buildbot.net/pipermail/devel/attachments/20110801/b3e439a8/attachment.bin>