29

When running any sudo command from Jenkins I get the following error: sudo: no tty present and no askpass program specified.

I understand that I can solve this by adding a NOPASSWD entry to my /etc/sudoers file which will allow user jenkins to run commands without needing a password. I can add an entry like this:

%jenkins ALL=(ALL)NOPASSWD:/home/me/dir/script.sh

...but this leads to the following issue: https://stackoverflow.com/questions/17414330/how-to-avoid-specifying-full-path-in-sudoers-file

I can add an entry like this:

%jenkins ALL=NOPASSWD: ALL

...but this allows user jenkins to avoid the password prompt for ALL commands, which seems a bit unsafe. I'm just curious what my options are here, and if there are any best practices I should consider.

2
  • I could not get which file you are changing with this command? %jenkins ALL=(ALL)NOPASSWD:/home/vts_share/test/sudotest.sh I am trying to use sudo command also in jenkins, so I need to know which file I should run this command?
    – meakgoz
    Commented Feb 26, 2014 at 12:29
  • It was a specific file on my machine, I've edited the post to show a generic file
    – s g
    Commented Feb 28, 2014 at 17:18

2 Answers 2

14

The no tty thing (requiretty in sudoers) is the real issue.

Basically, comment out the following lines in your /etc/sudoers file:

#Defaults    requiretty
#Defaults   !visiblepw

Other ways to get it to work:

Defaults    !requiretty

Or per user:

Defaults:jenkins !requiretty

A more detailed answer is this answer to this question on the Unix & Linux Stack Exchange site:

1
  • My /etc/sudoers file does not contain either of those lines, but even after adding lines to sudoers to allow my user to use a command, I still get the "sudo: no tty present and no askpass program specified" error. Commented Feb 20, 2020 at 18:08
4

One thing you can do is to get Jenkins to run a script, for example 'run.sh', then from inside this script you can start makefiles, and make sure that there are no sudo commands inside the makefiles.

It is a bit of a hassle, but at least you are not risking changing security settings

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.