Investigate PAM as an alternative to sudo #19

Closed
opened 2020-07-27 21:28:19 +01:00 by tlater · 1 comment
Owner

Currently sudo is installed on the system, mostly to allow comfortable debugging and to enable rebuilds.

Debugging should soon become less of a problem, after which rebuilds should be scheduled by a dedicated build user and triggered by gitea, instead of by my own user.

At this point, I would like to remove the sudo binary and instead assign proper PAM permissions.

Currently `sudo` is installed on the system, mostly to allow comfortable debugging and to enable rebuilds. Debugging should soon become less of a problem, after which rebuilds should be scheduled by a dedicated build user and triggered by gitea, instead of by my own user. At this point, I would like to remove the `sudo` binary and instead assign proper PAM permissions.
tlater added the
Needs research
label 2021-05-17 00:38:30 +01:00
Author
Owner

Closing because this is not feasible, since nixos-rebuild --use-remote-sudo is the best way to redeploy.

Closing because this is not feasible, since `nixos-rebuild --use-remote-sudo` is the best way to redeploy.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: tlaternet/tlaternet-server#19
No description provided.