Use direct smartctl with CAP_SYS_RAWIO instead of sudo
All checks were successful
Build and Release / build-and-release (push) Successful in 1m9s

This commit is contained in:
Christoffer Martinsson 2025-11-27 13:22:13 +01:00
parent bbc8b7b1cb
commit bd22ce265b
5 changed files with 9 additions and 8 deletions

6
Cargo.lock generated
View File

@ -279,7 +279,7 @@ checksum = "a1d728cc89cf3aee9ff92b05e62b19ee65a02b5702cff7d5a377e32c6ae29d8d"
[[package]]
name = "cm-dashboard"
version = "0.1.179"
version = "0.1.180"
dependencies = [
"anyhow",
"chrono",
@ -301,7 +301,7 @@ dependencies = [
[[package]]
name = "cm-dashboard-agent"
version = "0.1.179"
version = "0.1.180"
dependencies = [
"anyhow",
"async-trait",
@ -324,7 +324,7 @@ dependencies = [
[[package]]
name = "cm-dashboard-shared"
version = "0.1.179"
version = "0.1.180"
dependencies = [
"chrono",
"serde",

View File

@ -1,6 +1,6 @@
[package]
name = "cm-dashboard-agent"
version = "0.1.180"
version = "0.1.181"
edition = "2021"
[dependencies]

View File

@ -426,8 +426,9 @@ impl DiskCollector {
async fn get_smart_data(&self, drive_name: &str) -> Result<SmartData, CollectorError> {
use tracing::info;
let output = Command::new("sudo")
.args(&["smartctl", "-a", &format!("/dev/{}", drive_name)])
// Use direct smartctl (no sudo) - service has CAP_SYS_RAWIO capability
let output = Command::new("smartctl")
.args(&["-a", &format!("/dev/{}", drive_name)])
.output()
.map_err(|e| CollectorError::SystemRead {
path: format!("SMART data for {}", drive_name),

View File

@ -1,6 +1,6 @@
[package]
name = "cm-dashboard"
version = "0.1.180"
version = "0.1.181"
edition = "2021"
[dependencies]

View File

@ -1,6 +1,6 @@
[package]
name = "cm-dashboard-shared"
version = "0.1.180"
version = "0.1.181"
edition = "2021"
[dependencies]