2:43 p.m.
Hi,
If I stuck this portion into the fedora-live initscript, it would enable
sudo for the first user entered during firstboot. Does this seem like a
sensible thing to do? Does anyone have the details handy on modifying
consolehelper as well?
-----------------
# check for the first user and add it to user wheel and then to sudoers
USER=$( grep 500 /etc/passwd | cut -d: -f1 )
GROUPS=$( groups $USER )
if ! groups $USER | grep -q wheel ; then
usermod -G wheel $USER
echo "%wheel ALL=(ALL) ALL" >> /etc/sudoers
fi
EOF
------------
Rahul
2:55 p.m.
On Wednesday 01 October 2008, Rahul Sundaram wrote:
Hi,
If I stuck this portion into the fedora-live initscript, it would enable
sudo for the first user entered during firstboot. Does this seem like a
sensible thing to do? Does anyone have the details handy on modifying
consolehelper as well?
-----------------
# check for the first user and add it to user wheel and then to sudoers
USER=$( grep 500 /etc/passwd | cut -d: -f1 )
GROUPS=$( groups $USER )
if ! groups $USER | grep -q wheel ; then
usermod -G wheel $USER
echo "%wheel ALL=(ALL) ALL" >> /etc/sudoers
fi
EOF
------------
Rahul
I prefer not putting user in wheel, but just putting:
nbecker ALL=(ALL) NOPASSWD: ALL
3:18 p.m.
On Wed, 2008-10-01 at 20:13 +0530, Rahul Sundaram wrote:
Hi,
If I stuck this portion into the fedora-live initscript, it would enable
sudo for the first user entered during firstboot. Does this seem like a
sensible thing to do? Does anyone have the details handy on modifying
consolehelper as well?
-----------------
# check for the first user and add it to user wheel and then to sudoers
USER=$( grep 500 /etc/passwd | cut -d: -f1 )
GROUPS=$( groups $USER )
if ! groups $USER | grep -q wheel ; then
usermod -G wheel $USER
echo "%wheel ALL=(ALL) ALL" >> /etc/sudoers
fi
EOF
If you go the %wheel route, don't echo it onto the bottom of the file,
sed the line that's already in there with a hash in front of it.
----8<----
## Allows people in group wheel to run all commands
# %wheel ALL=(ALL) ALL
----8<----
Otherwise, you've got both the commented and uncommented versions of
that line in there, and the actual active one is nowhere near the
explanation comment.
However, I'd keep an eye on this:
https://bugzilla.redhat.com/show_bug.cgi?id=135592
Sounds like its being considered, and might also include an "enable sudo
for this user" option.
--
Jarod Wilson
jarod(a)wilsonet.com
5:06 p.m.
Till Maas wrote:
On Wed October 1 2008, Rahul Sundaram wrote:
> usermod -G wheel $USER
>
Maybe you want to add "-a" to add the group wheel, instead of replacing all
other groups.
Fair point. Along with Jarod Wilson's suggestion as well. How
about the
following?
-----------------
# check for the first user and add it to user wheel and then to sudoers
USER=$( grep 500 /etc/passwd | cut -d: -f1 )
GROUPS=$( groups $USER )
if ! groups $USER | grep -q wheel ; then
usermod -a -G wheel $USER
sed -i 's/# %wheel ALL=(ALL) ALL/ %wheel ALL=(ALL) ALL/'
/etc/sudoers
fi
EOF
------------
Rahul
3:41 p.m.
On 01.10.2008 16:43, Rahul Sundaram wrote:
If I stuck this portion into the fedora-live initscript, it would enable
sudo for the first user entered during firstboot. Does this seem like a
sensible thing to do? Does anyone have the details handy on modifying
consolehelper as well?
The official RPM Fusion spin should IMHO be a Fedora + add-on packages
and nothing else.
Yes, we could do fancy things like enabling sudo by default and hundred
other things where Fedora sucks. But that's somethings that is IMHO just
as bad as replacing packages from Fedora (which we don't do) or shipping
packages that could be in Fedora (which also is unwanted), as it makes
us different from Fedora and makes Omeaga just another distro in the
linux world. That doesn't help anybody, as there are already more than
enough distros; even worse, it creates confusion for the users, as docs
and howtos that work for Omega might now work for Fedora now (or vice
versa if we do bigger changes like just enabling sudo)
IOW: that way lie big and scary dragons -- RPM Fusion IMHO should not go
there with it's main spin. If you want to enable sudo by default work
towards that within the Fedora project.
Just my 2 cent, as always.
Cu
knurd
4:28 p.m.
Thorsten Leemhuis wrote:
On 01.10.2008 16:43, Rahul Sundaram wrote:
>
> If I stuck this portion into the fedora-live initscript, it would
> enable sudo for the first user entered during firstboot. Does this
> seem like a sensible thing to do? Does anyone have the details handy
> on modifying consolehelper as well?
The official RPM Fusion spin should IMHO be a Fedora + add-on packages
and nothing else.
Yes, we could do fancy things like enabling sudo by default and
hundred other things where Fedora sucks. But that's somethings that is
IMHO just as bad as replacing packages from Fedora (which we don't do)
I kind
of see your point but I think there is room for minor
improvements such as these. There is a difference between replacing
packages and doing these simple configuration changes. Replacement
packages (often) break your upgrade experience. I would like to do a
compose with sudo enabled like this and get feedback from more users.
It might help/push Fedora to do it as well soon.
Rahul
5:17 p.m.
Rahul Sundaram wrote:
Thorsten Leemhuis wrote:
> On 01.10.2008 16:43, Rahul Sundaram wrote:
>>
>> If I stuck this portion into the fedora-live initscript, it would
>> enable sudo for the first user entered during firstboot. Does this
>> seem like a sensible thing to do? Does anyone have the details handy
>> on modifying consolehelper as well?
>
> The official RPM Fusion spin should IMHO be a Fedora + add-on packages
> and nothing else.
>
>
> Yes, we could do fancy things like enabling sudo by default and
> hundred other things where Fedora sucks. But that's somethings that is
> IMHO just as bad as replacing packages from Fedora (which we don't do)
I kind of see your point but I think there is room for minor
improvements such as these.
I think that if this improvement is worth the trouble, it should go into
the firstboot application (upstream), even if only as a configurable
firstboot option.
Kind regards,
Jeroen van Meeuwen
-kanarip
5:42 p.m.
Jeroen van Meeuwen wrote:
Rahul Sundaram wrote:
> Thorsten Leemhuis wrote:
>> On 01.10.2008 16:43, Rahul Sundaram wrote:
>>>
>>> If I stuck this portion into the fedora-live initscript, it would
>>> enable sudo for the first user entered during firstboot. Does this
>>> seem like a sensible thing to do? Does anyone have the details
>>> handy on modifying consolehelper as well?
>>
>> The official RPM Fusion spin should IMHO be a Fedora + add-on
>> packages and nothing else.
>>
>>
>> Yes, we could do fancy things like enabling sudo by default and
>> hundred other things where Fedora sucks. But that's somethings that
>> is IMHO just as bad as replacing packages from Fedora (which we
>> don't do)
> I kind of see your point but I think there is room for minor
> improvements such as these.
I think that if this improvement is worth the trouble, it should go
into the firstboot application (upstream), even if only as a
configurable firstboot option.
Sure, there is no disagreement on the ideal path.
There has been RFE's
(sometimes with patches) for similar things a long time. The
traditional problem is a very diffused userbase where anything except
status quo tends to meet with opposition. The recent change to add sbin
to path being a recent example where somebody decides to go ahead and do
it anyway. Hopefully that happens with sudo as well. Meanwhile I will
do two different composes. One with configuration changes and another
without to gather feedback from users.
Rahul
7:44 p.m.
nice patch in
https://bugzilla.redhat.com/show_bug.cgi?id=135592
but way after all those 4 years the bug is still assigned!!
8:22 p.m.
On Wed, 2008-10-01 at 22:44 +0300, مؤيد السعدي wrote:
nice patch in
https://bugzilla.redhat.com/show_bug.cgi?id=135592
but way after all those 4 years the bug is still assigned!!
It was closed over two years ago, I just now reopened it, and have
offered to forward-port the patch, as/if necessary. Sounds like its got
a bit more traction this time around... Not sure if its got a prayer for
F10, or if it'll have to be F11 material though.
--
Jarod Wilson
jarod(a)wilsonet.com
3:47 a.m.
On Wed, 2008-10-01 at 23:12 +0530, Rahul Sundaram wrote:
Jeroen van Meeuwen wrote:
> Rahul Sundaram wrote:
>> Thorsten Leemhuis wrote:
>>> On 01.10.2008 16:43, Rahul Sundaram wrote:
>>>>
>>>> If I stuck this portion into the fedora-live initscript, it would
>>>> enable sudo for the first user entered during firstboot. Does this
>>>> seem like a sensible thing to do? Does anyone have the details
>>>> handy on modifying consolehelper as well?
>>>
>>> The official RPM Fusion spin should IMHO be a Fedora + add-on
>>> packages and nothing else.
>>>
>>>
>>> Yes, we could do fancy things like enabling sudo by default and
>>> hundred other things where Fedora sucks. But that's somethings that
>>> is IMHO just as bad as replacing packages from Fedora (which we
>>> don't do)
>> I kind of see your point but I think there is room for minor
>> improvements such as these.
>
> I think that if this improvement is worth the trouble, it should go
> into the firstboot application (upstream), even if only as a
> configurable firstboot option.
Sure, there is no disagreement on the ideal path. There has been RFE's
(sometimes with patches) for similar things a long time. The
traditional problem is a very diffused userbase where anything except
status quo tends to meet with opposition.
It's not "not changing the status quo", it's a matter of
"experienced
users vs. newbies lacking the knowledge to understand the status quo".
The recent change to add sbin to path being a recent example
where somebody decides to go ahead and do
it anyway.
Correct, a masterpiece of where uneducated newbies are outsmarting
themselves and are throwing away well-thought out principles which have
developed over a long period of development for good reasons.
To me, this /sbin PATH thing is a regression and a Fedora mistake.
Fortunately, it's unimportant enough to fret about it.
Hopefully that happens with sudo as well.
Well, ... see
above.
Ralf
5:22 p.m.
--- On Wed, 10/1/08, Rahul Sundaram <metherid(a)gmail.com> wrote:
From: Rahul Sundaram <metherid(a)gmail.com>
Subject: Re: Omega - Sudo for first user?
To: "RPM Fusion developers discussion list"
<rpmfusion-developers(a)lists.rpmfusion.org>
Date: Wednesday, October 1, 2008, 12:28 PM
Thorsten Leemhuis wrote:
> On 01.10.2008 16:43, Rahul Sundaram wrote:
>>
>> If I stuck this portion into the fedora-live
initscript, it would
>> enable sudo for the first user entered during
firstboot. Does this
>> seem like a sensible thing to do? Does anyone have
the details handy
>> on modifying consolehelper as well?
>
> The official RPM Fusion spin should IMHO be a Fedora +
add-on packages
> and nothing else.
>
>
> Yes, we could do fancy things like enabling sudo by
default and
> hundred other things where Fedora sucks. But
that's somethings that is
> IMHO just as bad as replacing packages from Fedora
(which we don't do)
I kind of see your point but I think there is room for
minor
improvements such as these. There is a difference between
replacing
packages and doing these simple configuration changes.
Replacement
packages (often) break your upgrade experience. I would
like to do a
compose with sudo enabled like this and get feedback from
more users.
It might help/push Fedora to do it as well soon.
Rahul
I agree with knurd on this. Think about end-users. Fedora forums are the first places they
go when they have problems/want to ask questions.
My experience about repo queries in Fedora forums tells me whenever someone posts a
problem it takes some message traffic until that someone explains his repo config and then
people have to dig into his config files to extract the repo-specific-problem. To avoid
this, I think, we should keep the Fedora-compliance as the first rule. Livna had a very
good reputation by obeying this rule.
Again as knurd said, not changing the original Fedora setup will keep the
"backward" compatibility of "Omega" documentation/howto's sane
with Fedora. e.g. I'm almost sure that this will save a lot of message traffic in the
forums/blogs.
As someone who just made his leap from the end-user side to the devel side I think we
should care about such things.
oget
P.S: I like this "Omega" idea by the way.
5:25 p.m.
On 01.10.2008 18:28, Rahul Sundaram wrote:
Thorsten Leemhuis wrote:
> On 01.10.2008 16:43, Rahul Sundaram wrote:
>> If I stuck this portion into the fedora-live initscript, it would
>> enable sudo for the first user entered during firstboot. Does this
>> seem like a sensible thing to do? Does anyone have the details handy
>> on modifying consolehelper as well?
> The official RPM Fusion spin should IMHO be a Fedora + add-on packages
> and nothing else.
>
> Yes, we could do fancy things like enabling sudo by default and
> hundred other things where Fedora sucks. But that's somethings that is
> IMHO just as bad as replacing packages from Fedora (which we don't do)
I kind of see your point but I think there is room for minor
improvements such as these.
Over time it'll be very hard to track a line what's acceptable and what
not. Thus I don't want to even go one step into that direction with the
main spin.
For me it's a bit similar (but not identical!) to CentOS -- they don't
fix known upstream bugs to make sure they don't differ from upstream at
all. Sure, they know that the centos users will run into those bugs
(just like RHEL users), but nevertheless it's a good thing if you look
at the overall picture.
And it will be a good thing for us as well if the main RPM Fusion spin
just works like a Fedora spin where the user installed those RPM Fusion
packages that the RPM Fusion spin contains.
There is a difference between replacing
packages and doing these simple configuration changes.
I bet a whole lot of Fedora developers will disagree -- especially when
they get the first bug reports from a RPM Fusion spin that changed the
configuration in a ways that are responsible for the bug that is being
reported.
Replacement
packages (often) break your upgrade experience. I would like to do a
compose with sudo enabled like this and get feedback from more users.
It might help/push Fedora to do it as well soon.
I didn't want to stop you. But as I said above: the official RPM Fusion
spin IMHO should not differ from Fedora apart from containing those add
on packages.
Or, IOW, to make the point I'm trying to make more clear: There imho is
room (¹) in RPM Fusion for a spin that does more things than shipping
add-on packages (like enabling sudo by default). But I really want to
see the main spin first -- a spin that looks and feels exactly like a
Fedora apart from the stuff that is done by add-on packages.
CU
knurd
(¹) just like we left room for specialized/dedicated repos within RPM
Fusion that might replace packages from Fedora (like a kde-redhat)
5897
days inactive
5898
days old
rpmfusion-developers@lists.rpmfusion.org
14 comments
9 participants
participants (9)
-
Jarod Wilson -
Jeroen van Meeuwen -
Neal Becker -
Orcan Ogetbil -
Rahul Sundaram -
Ralf Corsepius -
Thorsten Leemhuis -
Till Maas -
مؤيد السعدي