Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add run0 support #150

Merged
merged 8 commits into from
Nov 24, 2024
Merged

Add run0 support #150

merged 8 commits into from
Nov 24, 2024

Conversation

jschpp
Copy link
Contributor

@jschpp jschpp commented Nov 17, 2024

should be enough to fix #116

@jschpp
Copy link
Contributor Author

jschpp commented Nov 17, 2024

Though I have no idea how to add run0 to default.nix 😅

@ifd3f ifd3f self-assigned this Nov 18, 2024
@ifd3f
Copy link
Owner

ifd3f commented Nov 18, 2024

I'll look at this in the morning.

note that this is failing -- i will figure out how to add run0 to the vm
next
@ifd3f
Copy link
Owner

ifd3f commented Nov 19, 2024

I've added a NixOS test for run0, but in order to enable run0, we need to update NixOS, and that's been blocked on an issue. I've created #151 to track the version update. I'll try to push out a PR that fixes that Soon(tm)

@ifd3f
Copy link
Owner

ifd3f commented Nov 19, 2024

@jschpp do you know what configs are typically needed to make run0 passwordless? I tried following https://warlord0blog.wordpress.com/2024/07/30/passwordless-run0/ but it appears to not have worked.

@jschpp
Copy link
Contributor Author

jschpp commented Nov 19, 2024

@ifd3f I've tried the polkit rule in the blog article you mentioned. At least on my Desktop it seems to work.
The only thing I did was adding the /etc/polkit-1/rules.d/10-systemd-nopasswd.rules file.
I didn't need to add the pam option.

[ 11:12:01 ] ❯ id
uid=1000(schoepp) gid=1000(schoepp) Gruppen=1000(schoepp),998(wheel)

~ 
[ 11:12:07 ] ❯ run0 cat /etc/polkit-1/rules.d/10-systemd-nopasswd.rules
polkit.addRule(function(action, subject) {
    if (action.id == "org.freedesktop.systemd1.manage-units") {
        if (subject.isInGroup("wheel")) {
            return polkit.Result.YES;
        }
    }
});

~ 
[ 11:12:17 ] ❯ run0 ls /etc/polkit-1/rules.d/
10-systemd-nopasswd.rules

~ 
[ 11:12:22 ] ❯ 

@ifd3f ifd3f enabled auto-merge November 24, 2024 04:27
@ifd3f
Copy link
Owner

ifd3f commented Nov 24, 2024

Yea I give up on making the run0 check work. Let's merge this as-is

@ifd3f ifd3f merged commit a2a9dc0 into ifd3f:main Nov 24, 2024
12 checks passed
@jschpp jschpp deleted the add_run0_support branch November 24, 2024 10:28
@jschpp
Copy link
Contributor Author

jschpp commented Nov 24, 2024

I'm sorry I couldn't help more. But thank you for merging this. This was pretty much the last thing still holding me back from removing sudo.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

run0 support
2 participants