Investigate PAM as an alternative to sudo #19

Closed
opened 2020-07-27 21:28:19 +01:00 by tlater · 1 comment

Currently sudo is installed on the system, mostly to allow comfortable debugging and to enable rebuilds.

Debugging should soon become less of a problem, after which rebuilds should be scheduled by a dedicated build user and triggered by gitea, instead of by my own user.

At this point, I would like to remove the sudo binary and instead assign proper PAM permissions.

Currently `sudo` is installed on the system, mostly to allow comfortable debugging and to enable rebuilds. Debugging should soon become less of a problem, after which rebuilds should be scheduled by a dedicated build user and triggered by gitea, instead of by my own user. At this point, I would like to remove the `sudo` binary and instead assign proper PAM permissions.
tlater added the
Needs research
label 2021-05-17 00:38:30 +01:00
Poster
Owner

Closing because this is not feasible, since nixos-rebuild --use-remote-sudo is the best way to redeploy.

Closing because this is not feasible, since `nixos-rebuild --use-remote-sudo` is the best way to redeploy.
Sign in to join this conversation.
No Milestone
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: tlaternet/tlaternet-server#19
There is no content yet.