sudo: declare the operator account's passwordless escalation as a module

Three modules' tools act through `sudo -n` and nothing declared that the
account may; each machine said so in a hand-set line in /etc/sudoers. The
module owns the package and /etc/sudoers.d/10-mesh-operator (0440), checked
by visudo in its manifest test, and serves sudo_rules, sudo_check and
sudo_drop_ins from a Go bundle. lab stops declaring the sudo package, which
would collide with this module on the node that runs both (hq ADR 0207,
to-be 42 Phase 1).

This commit is contained in:

jochen

2026-10-04 12:50:20 +02:00

parent 44aafc9b1c

commit f015aba34a

12 changed files with 1277 additions and 5 deletions

									
										modules/sudo/go.mod
									
		+5
		
												View File
												
				@@ -0,0 +1,5 @@

				module sudo

				go 1.22

				require git.novox.be/novox/mesh-sdk/go v0.1.6