Deployer: Deploying under different (root) user

[JSpock]

| Q | A |
| --- | --- |
| Issue Type | Question |
| Deployer Version | N/A |
| Local Machine OS | N/A |
| Remote Machine OS | N/A |

On production server I have user "produser" and it is in sudoers. Webapp directory is /www/application and owner of it is root (root:root). When I try to deploy there I got permission problem (cant create directories etc).
Is there any possibility to switch user before deploy? I cannot change permissions of application dir and I can not get root password

[oanhnn]

I think with your case, you should deploy to other directory and make a symlink point to it.

[antonmedv]

Use server(...)->user('root')

[JSpock]

Use server(...)->user('root')

I can't because I dont have root user password. Yes, it is kinda tricky situation and I cant figure out how to get deployer work for it. Another way is to rewrite common recipe and add sudo before every command (maybe it could be feature?)

[oanhnn]

@JSpock
Can you try with deploy_path different /www/application :smile:

task('deploy:link', function () {
    run("cd /www/application && sudo ln -sfn {{current}} current");
});
after('deploy:symlink', 'deploy:link');

[JSpock]

@oanhnn That was my first idea too, but unfortunately, it is not an option. Files must also be root:root. So main question is, how it is possible to switch user before deploy on remote machine

[kkrieger85]

I face the same/similar problem:

• Login to our server as root
• Deployment as www-data

So first step after login to server has to be to change user.

My first idea was to rewrite deploy:prepare and add command to change user after login:

/**
 * Preparing server for deployment.
 */
task('deploy:prepare', function () {
    \Deployer\Task\Context::get()->getServer()->connect();

/**
 * Preparing server for deployment.
 */
task('deploy:prepare', function () {
    \Deployer\Task\Context::get()->getServer()->connect();
    run('sudo su www-data');   

Ref: recipe/common.php:104

[antonmedv]

Please, use sudo for switching users.

[kkrieger85]

That's not the solution.

Have a look at: https://github.com/deployphp/deployer/blob/master/recipe/common.php#L104

There is no chance to switch user there between login to server and creating deploy_path

[kkrieger85]

To fix rights I use

task('fix-rights', function () {
    $httpUser = get('http_user');

    if (null === $httpUser) {
        $httpUser = run("ps axo user,comm | grep -E '[a]pache|[h]ttpd|[_]www|[w]ww-data|[n]ginx' | grep -v root | head -1 | cut -d\  -f1")->toString();
    }
    #runs as root
    run('chown -R ' . $httpUser . ':' . $httpUser . ' {{deploy_path}}');
});

after('cleanup', 'fix-rights');
after('rollback', 'fix-rights');

Updates: Smarter httpUser, fixRights after rollback, too

[antonmedv]

What's good solution.