ZacharyZhang-NY/omarchycn
3
4
Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases 5 Wiki Activity

installer: require target user for system finalizer

Browse Source
This commit is contained in:
Ryan Hughes
2026-06-04 18:35:01 -04:00
parent 67c401c125
commit bf14f69017
7 changed files with 19 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
install/post-install/first-run-mode.sh
+2 -3
View File
@@ -1,13 +1,12 @@
# Setup sudo-less access for the privileged first-run system one-shot. The
# install user's ~/.local/state/omarchy/first-run.mode marker is created by
# finalize.sh while running as that user.
install_user="${OMARCHY_INSTALL_USER:-${USER:-}}"
install_user="$OMARCHY_INSTALL_USER"
install_mode_is offline || exit 0
[[ -n $install_user ]] || exit 0
mkdir -p /etc/sudoers.d
cat > /etc/sudoers.d/first-run <<EOF
Cmnd_Alias FIRST_RUN_CLEANUP = /bin/rm -f /etc/sudoers.d/first-run
Cmnd_Alias FIRST_RUN_CLEANUP = /usr/bin/rm -f /etc/sudoers.d/first-run, /bin/rm -f /etc/sudoers.d/first-run
Cmnd_Alias SYMLINK_RESOLVED = /usr/bin/ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf
$install_user ALL=(ALL) NOPASSWD: /usr/bin/systemctl
$install_user ALL=(ALL) NOPASSWD: /usr/bin/ufw