clush: Interactive usage - sudo with password and requiretty

[hansfn]

Hi,

I have used polysh for several years while maintaining a small data center with CentOS servers. Today I switched to clustershell/clush, since I just started maintaining a tiny data center with Debian servers and polysh isn't packaged by Debian. clush seems to be a very good replacement, but I struggle with interactive usage and sudo with password when requiretty is enabled.

If I use

clush -o '-t -t' -w node[1-10]

the normal "sudo: no tty present and no askpass program specified" error is gone when I run "sudo date", but the password isn't captured if I enter it (and the password is displayed).

If I on the same setup use polysh

./polysh.py 'node<1-10>'

there is no problem with entering the password, and there is even a command ":hide_password" that stops the password from displaying.

Is there some way clush can handle this situation? If not, consider this a feature request. Maybe the code in polysh can be reused?

Added: Polysh 0.4, Clustershell 1.6

[thiell]

Hello hansfn,

We have taken your feature request into account. You're not the first one that want improvement related to sudo!

In the short term, we plan to add a new option to clush so that it will forward any terminal inputs to remote process, allowing you to type your password for multiple sudo prompts. You will still not be able to see the sudo password prompts as that is not a full line and clush handles/aggregates remote outputs by lines only for now. I will try to push this feature in 1.7 as it's not a big modification (to be confirmed!).

Longer term, we will try to handle remote ttys and non-terminated lines better.

As for now... as a dirty workaround, you may be able to use:
echo 'password' | clush -w .... sudo -S command

[hansfn]

Thx for the quick reply. I'm fine with not seeing the sudo password prompt. It would be great if this was part of 1.7 which I understand isn't that far into the future?

I can confirm that the dirty workaround works for one-shot/non-interactive usage - thx!

[thiell]

Sorry, didn't have the chance to work on that - postponed until 1.8 sorry

[alexbozhenko]

Hello, @thiell.
Do you have ideas about this feature?
Ansible provides ability to specify both ssh and sudo pass only once, and it is very convenient.

export ANSIBLE_HOST_KEY_CHECKING=False
ansible --inventory=host1,host2,host3 \* -f 15 -m shell -a "sudo pwd" -bkK
SSH password: 
SUDO password[defaults to SSH password]: 

Some people also write small script with fabric to achieve that...
But that ansible shell module output is ugly, and doesn't have features like -L and --diff.

[underted]

Any update on adding sudo support? Could really use it. Our systems now require sudo and I've got to switch to using Ansible for adhoc commands and it isn't a great experience.