# \[RESOLVED\] Permissions for knife bootstrap

**URL:** <https://discourse.chef.io/t/resolved-permissions-for-knife-bootstrap/10386>\
**Category:** Chef Infra (archive)\
**Created:** [February 9, 2017, 9:20pm UTC](https://discourse.chef.io/t/resolved-permissions-for-knife-bootstrap/10386 "2017-02-09T21:20:08Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![coul](https://avatars.discourse-cdn.com/v4/letter/c/b19c9b/32.png) [@coul](https://discourse.chef.io/u/coul)\
**Post date:** [February 9, 2017, 9:20pm UTC](https://discourse.chef.io/t/resolved-permissions-for-knife-bootstrap/10386/1 "2017-02-09T21:20:08Z")

</div>

I want to bootstrap new node but get permission error. I feel like there is some tupo but I can't get where.  
my\_user has sudo privileges.

> ssh my\_user@ubuntu16.lab  
> my\_user@ubuntu16.lab's password:  
> my\_user@ubuntu16:~$ cat /etc/group | grep sudo  
> sudo:x:27:my\_user  
> exit

> knife bootstrap ubuntu16.lab -x my\_user -P --sudo --use-sudo-password  
> Doing old-style registration with the validation key at /home/pzab/chef/.chef/chef-validator.pem...  
> Delete your validation key in order to use your user credentials instead

> Connecting to ubuntu16.lab  
> my\_user@ubuntu16.lab's password:  
> ubuntu16.lab -----\> Installing Chef Omnibus (-v 12)  
> ubuntu16.lab downloading [https://omnitruck-direct.chef.io/chef/install.sh](https://omnitruck-direct.chef.io/chef/install.sh)  
> ubuntu16.lab to file /tmp/install.sh.19685/install.sh  
> ubuntu16.lab trying wget...  
> ubuntu16.lab ubuntu 16.04 x86\_64  
> ubuntu16.lab Getting information for chef stable 12 for ubuntu...  
> ubuntu16.lab downloading [https://omnitruck-direct.chef.io/stable/chef/metadata?v=12&p=ubuntu&pv=16.04&m=x86\_64](https://omnitruck-direct.chef.io/stable/chef/metadata?v=12&p=ubuntu&pv=16.04&m=x86_64)  
> ubuntu16.lab to file /tmp/install.sh.19690/metadata.txt  
> ubuntu16.lab trying wget...  
> ubuntu16.lab sha1 a8c749bfde759692abdd98ae1b841ad089fe5461  
> ubuntu16.lab sha256 4fdabf0ae37c999795bef5e97133c1b78182129edec28c17ccf9ca6661dcc754  
> ubuntu16.lab url [https://packages.chef.io/files/stable/chef/12.18.31/ubuntu/16.04/chef\_12.18.31-1\_amd64.deb](https://packages.chef.io/files/stable/chef/12.18.31/ubuntu/16.04/chef_12.18.31-1_amd64.deb)  
> ubuntu16.lab version 12.18.31  
> ubuntu16.lab downloaded metadata file looks valid...  
> ubuntu16.lab downloading [https://packages.chef.io/files/stable/chef/12.18.31/ubuntu/16.04/chef\_12.18.31-1\_amd64.deb](https://packages.chef.io/files/stable/chef/12.18.31/ubuntu/16.04/chef_12.18.31-1_amd64.deb)  
> ubuntu16.lab to file /tmp/install.sh.19690/chef\_12.18.31-1\_amd64.deb  
> ubuntu16.lab trying wget...  
> ubuntu16.lab Comparing checksum with sha256sum...  
> ubuntu16.lab Installing chef 12  
> ubuntu16.lab installing with dpkg...  
> ubuntu16.lab dpkg: error: requested operation requires superuser privilege  
> ubuntu16.lab Installation failed  
> ubuntu16.lab Version: 12

---

<div class="post-metadata">

**Author:** ![svucich](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/svucich/32/1717_2.png) [@svucich](https://discourse.chef.io/u/svucich)\
**Post date:** [February 9, 2017, 10:02pm UTC](https://discourse.chef.io/t/resolved-permissions-for-knife-bootstrap/10386/2 "2017-02-09T22:02:30Z")

</div>

The `knife bootstrap` command looks a little wrong. Have you tried the following?

```
# Remove the '--node-ssl-verify-mode none' if you have got SSL working properly
knife bootstrap NodeName -x MyUser -P 'MyPass' -N RegisteredNodeName --sudo --node-ssl-verify-mode none

```

Also, if you are using the `--use-sudo-password` - It might be prudent to have a read of the chef documentation for `knife bootstrap` as it seems that you still need to provide some data to the `-P` switch? [Here](https://docs.chef.io/knife_bootstrap.html) is the `knife bootstrap` man page from chef.

---

<div class="post-metadata">

**Author:** ![coul](https://avatars.discourse-cdn.com/v4/letter/c/b19c9b/32.png) [@coul](https://discourse.chef.io/u/coul)\
**Post date:** [February 10, 2017, 8:22am UTC](https://discourse.chef.io/t/resolved-permissions-for-knife-bootstrap/10386/3 "2017-02-10T08:22:02Z")

</div>

> [@svucich](#):
>
> --node-ssl-verify-mode none

This helped, thanks. Before it wasn't mandatory.

---

<div class="post-metadata">

**Author:** ![svucich](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/svucich/32/1717_2.png) [@svucich](https://discourse.chef.io/u/svucich)\
**Post date:** [February 12, 2017, 8:30pm UTC](https://discourse.chef.io/t/resolved-permissions-for-knife-bootstrap/10386/4 "2017-02-12T20:30:23Z")

</div>

Great to hear - Have a good day.