Skip to content

[Nexthop] Add default netops user#998

Closed
travisb-nexthop wants to merge 1 commit intofacebook:mainfrom
nexthop-ai:distro_image_netops_user
Closed

[Nexthop] Add default netops user#998
travisb-nexthop wants to merge 1 commit intofacebook:mainfrom
nexthop-ai:distro_image_netops_user

Conversation

@travisb-nexthop
Copy link
Contributor

Pre-submission checklist

  • I've ran the linters locally and fixed lint errors related to the files I modified in this PR. You can install the linters by running pip install -r requirements-dev.txt && pre-commit install
  • pre-commit run

Summary

Add a non-root user as the default shared user on FBOSS Distro systems. Create it with the netops password as part of a passwordless sudoers group to give users a non-root user to use.

The root user is dealt with differently by many components in standard CentOS. This creates friction when using the root user. Further, mistakes made as the root user can have a very large blast radius. A default non-root user avoids these various small issues.

Test Plan

Login as netops and verify sudo access:

$ sudo cat /etc/sudoers
...
[netops@gold407 ~]$ ls -l /etc/sudoers
-r--r----- 1 root root 4328 Nov 18 11:09 /etc/sudoers

The netops user is what Meta uses internally as the shared user on FBOSS
systems. Create it with the netops password as part of a passwordless
sudoers group to give users a non-root user to log in as.

Login as netops and verify sudo access:
```
$ sudo cat /etc/sudoers
...
[netops@gold407 ~]$ ls -l /etc/sudoers
-r--r----- 1 root root 4328 Nov 18 11:09 /etc/sudoers
```
@meta-cla meta-cla bot added the CLA Signed label Mar 12, 2026
@travisb-nexthop travisb-nexthop marked this pull request as ready for review March 12, 2026 22:27
@travisb-nexthop travisb-nexthop requested a review from a team as a code owner March 12, 2026 22:27
@meta-codesync
Copy link
Contributor

meta-codesync bot commented Mar 16, 2026

@kevin645 has imported this pull request. If you are a Meta employee, you can view this in D96798787.

@meta-codesync
Copy link
Contributor

meta-codesync bot commented Mar 16, 2026

@kevin645 merged this pull request in 50573bc.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant