Jorge Acereda schreef op zo 09-01-2022 om 20:55 [+0100]: > Hi, > > New user here, so maybe I'm talking BS. > > I'm wondering if getting rid of sudo for reconfiguration is an option. > > What if instead of running all the process as root, it invoked sudo (or > doas) in the final stage, so it can perform the bits that require > permissions? A problem here is that this assumes sudo, so "guix system reconfigure" needs to guess whether to use "su", "sudo", "sudo -E", "doas", ... Looking at guix/scripts/system.scm, it appears that "guix system reconfigure" interacts with shepherd directly, so "guix system reconfigure" needs to be run as root to work; at least currently it cannot delegate this to a separate process to be run under "sudo" or the like. Greetings, Maxime.