# sudo in fireball mode?

**URL:** <https://forum.ansible.com/t/sudo-in-fireball-mode/13034>\
**Category:** Ansible Project\
**Created:** [June 28, 2013, 12:48pm UTC](https://forum.ansible.com/t/sudo-in-fireball-mode/13034 "2013-06-28T12:48:18Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Bryan\_Larsen](https://avatars.discourse-cdn.com/v4/letter/b/9de053/32.png) [@Bryan\_Larsen](https://forum.ansible.com/u/Bryan_Larsen)\
**Post date:** [June 28, 2013, 12:48pm UTC](https://forum.ansible.com/t/sudo-in-fireball-mode/13034/1 "2013-06-28T12:48:18Z")

</div>

Why can’t we use sudo in fireball mode?

This works in fireball mode:

- command: “sudo su -l -c ‘echo hello’ {{ username }}”

This errors out:

- command: “echo hello”  
sudo\_user: “{{ username }}”  
sudo: true

This doesn’t fail, but doesn’t run as the indicated user:

- command: “touch /tmp/foo.txt”  
sudo\_user: “{{ username }}”

Is this a matter of “not implemented yet” or “will not be implementing”?

thanks,  
Bryan

---

<div class="post-metadata">

**Author:** ![Michael\_DeHaan2](https://avatars.discourse-cdn.com/v4/letter/m/da6949/32.png) [@Michael\_DeHaan2](https://forum.ansible.com/u/Michael_DeHaan2)\
**Post date:** [June 28, 2013, 1:04pm UTC](https://forum.ansible.com/t/sudo-in-fireball-mode/13034/2 "2013-06-28T13:04:23Z")

</div>

So fireball runs as the user you lay down the fireball as, because most of our sudo logic has been to deal with running sudo over SSH.

Fireball was named somewhat in gest because it’s a “1-2” kind of maneuver like a fireball in a 2D fighting game. You set up the fireball in a previous play  
and then it’s available for later.

I can see it possibly being done later, but I have some other plans to cleanup fireball mode first.

There’s really no reason it needs to use 0mq anymore, and could be a basic socket server and be just as fast, and needs to chunk file transmissions (for large file transfer) – those are things I think we’d be doing first.

Honestly, for most folks, SSH is fast enough, so I’m seeing less people using fireball than used to be – but I’m sure we’ll keep it around, but I definitely want to reduce the number of dependencies it requires.

–Michael

---

<div class="post-metadata">

**Author:** ![Bryan\_Larsen](https://avatars.discourse-cdn.com/v4/letter/b/9de053/32.png) [@Bryan\_Larsen](https://forum.ansible.com/u/Bryan_Larsen)\
**Post date:** [June 28, 2013, 6:31pm UTC](https://forum.ansible.com/t/sudo-in-fireball-mode/13034/3 "2013-06-28T18:31:42Z")

</div>

OK, I’ll remove our dependence on fireball mode. Not a big deal. Local connection is even faster than fireball, so this will probably give me a good incentive to set up a proper pull mode implementation, which has other benefits.

thanks,  
Bryan

---

<div class="post-metadata">

**Author:** ![Ann\_Sybille\_Peters](https://avatars.discourse-cdn.com/v4/letter/a/b5e925/32.png) [@Ann\_Sybille\_Peters](https://forum.ansible.com/u/Ann_Sybille_Peters)\
**Post date:** [June 28, 2013, 7:00pm UTC](https://forum.ansible.com/t/sudo-in-fireball-mode/13034/4 "2013-06-28T19:00:41Z")

</div>

you can also start multiple fireball peers running as different  
users, with sudo\_user. not ideal, but definitely useful in small  
doses.

also sprach Bryan Larsen \<bryan@larsen.st\> [2013.06.28.2031 +0200]: