## allow ceph-osd (which runs as user ceph) to collect device health metrics ceph ALL=NOPASSWD: /usr/sbin/smartctl -a --json /dev/*