From badb4879b0402d43ab979b0812a3aca930dab508 Mon Sep 17 00:00:00 2001 From: Gilles Grandou Date: Tue, 9 Aug 2022 16:43:25 +0200 Subject: [PATCH] disable password for sudo on legacy distribs * new distribs have all switched to use new crypt scheme for passwords * so passwords can no longer be checked on legacy containers * as a workaround, allow sudo to be run wihout asking for password. * this is not a security hole, as anyone with docker privileges can already modify any files owned by root. --- runon.conf | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/runon.conf b/runon.conf index a18816c..642a27d 100644 --- a/runon.conf +++ b/runon.conf @@ -20,7 +20,7 @@ dockerfile = FROM centos:7 RUN yum install sudo -y RUN echo "Defaults lecture = never" >> /etc/sudoers - RUN echo "ALL ALL=(ALL) ALL" >> /etc/sudoers + RUN echo "ALL ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers pkginstall = RUN yum install {} -y packages = ksh csh xterm xorg-x11-apps xkeyboard-config git glibc-devel gtk2 gtk3 alsa-lib python2 python3 bash-completion @@ -31,7 +31,7 @@ dockerfile = RUN yum config-manager --set-enabled powertools -y RUN yum install sudo -y RUN echo "Defaults lecture = never" >> /etc/sudoers - RUN echo "ALL ALL=(ALL) ALL" >> /etc/sudoers + RUN echo "ALL ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers pkginstall = RUN yum install {} -y packages = ksh csh xterm xorg-x11-apps xkeyboard-config git glibc-devel gtk2 gtk3 alsa-lib python2 python3 bash-completion @@ -41,8 +41,10 @@ dockerfile = ARG DEBIAN_FRONTEND=noninteractive RUN apt-get update RUN apt-get -y install apt-utils + RUN apt-get -y upgrade RUN apt-get -y install sudo RUN echo "Defaults lecture = never" >> /etc/sudoers + RUN echo "ALL ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers pkginstall = RUN apt-get -y install {} packages = ksh csh xterm x11-apps build-essential git libgtk2.0 libgtk-3-0 bash-completion @@ -52,8 +54,10 @@ dockerfile = ARG DEBIAN_FRONTEND=noninteractive RUN apt-get update RUN apt-get -y install apt-utils + RUN apt-get -y upgrade RUN apt-get -y install sudo RUN echo "Defaults lecture = never" >> /etc/sudoers + RUN echo "ALL ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers pkginstall = RUN apt-get -y install {} packages = ksh csh xterm x11-apps build-essential git libgtk2.0 libgtk-3-0 bash-completion @@ -63,8 +67,10 @@ dockerfile = ARG DEBIAN_FRONTEND=noninteractive RUN apt-get update RUN apt-get -y install apt-utils + RUN apt-get -y upgrade RUN apt-get -y install sudo RUN echo "Defaults lecture = never" >> /etc/sudoers + RUN echo "ALL ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers pkginstall = RUN apt-get -y install {} packages = ksh csh xterm x11-apps build-essential git libgtk2.0 libgtk-3-0 bash-completion