adziahelMar 11, 2025
Christian Brauner 🦊🐺

Replaced sudo with run0 and I'm very happy to have one less setuid binary to worry about.

#systemd #Linux

Mar 11, 2025 at 9:40amWeb
Show threadEmil VelikovMar 11, 2025

@brauner welcome to the club.

One thing to be mindful of - run0 lacks a config file to manage which variables are preserved. It can be easily handled via `alias foobar="run0 --setenv=foobar"`

Show threadLennart PoetteringMar 11, 2025
@xexaxo which ones do you need preserved?
Show threadSandro  Mar 11, 2025
@pid_eins @xexaxo On NixOS eg TERMINFO and TERMINFO_DIRS
Show threadEmil VelikovMar 11, 2025

@pid_eins DEBUGINFOD_URLS, if you recall my gdb/debugging confusion at ASG.

Props again to Mike for the pointer.

Show threadlinuxccMar 11, 2025
@pid_eins @xexaxo VIMINIT
Show threadJulian Andres Klode 🏳️‍🌈Mar 11, 2025

@brauner Now the question is, can you make it cache authorization for a pts?

Answering a 100 PolicyKit prompts for a 100 command runs is very time consuming

Show threadblucaMar 11, 2025
@juliank @brauner that needs a change in polkit that is pending review, then it will
Show threadJulian Andres Klode 🏳️‍🌈Mar 11, 2025
@bluca @brauner 🧙‍♂️
Show threadSandro  Mar 11, 2025
@brauner How did you handle PAM?