diff options
| author | Philip Wittamore <philip@wittamore.com> | 2026-07-12 11:08:50 +0200 |
|---|---|---|
| committer | Philip Wittamore <philip@wittamore.com> | 2026-07-12 11:08:50 +0200 |
| commit | 420ceb49b53a8fa9d8ba8443e42e50cd7bd7cea9 (patch) | |
| tree | 3009f0564d75e3f7d1ca38507e7ebb92deaded07 /articles/2025/Replace-sudo-with-doas-on-Artix.html | |
update
Diffstat (limited to 'articles/2025/Replace-sudo-with-doas-on-Artix.html')
| -rwxr-xr-x | articles/2025/Replace-sudo-with-doas-on-Artix.html | 92 |
1 files changed, 92 insertions, 0 deletions
diff --git a/articles/2025/Replace-sudo-with-doas-on-Artix.html b/articles/2025/Replace-sudo-with-doas-on-Artix.html new file mode 100755 index 0000000..d05bb5a --- /dev/null +++ b/articles/2025/Replace-sudo-with-doas-on-Artix.html @@ -0,0 +1,92 @@ +<!doctype html> +<html lang="EN"> + <head> + <meta charset="utf-8"> + <meta name="viewport" content="width=device-width, initial-scale=1"> + <link rel="stylesheet" href="/style.css"> + <title>Replace sudo with doas on Artix</title> + </head> + <body> + <header> + <h1>Bloggings</h1> + <a href="/index.php">Back</a> + + </header> + +<main> +<article> +<h2>Replace sudo with doas on Artix</h2> +<h3>2025-06-18</h3> +<h4>More efficient, less complicated</h4> +<p>Sudo is quite bloated and not without security problems. It is intended to cover situations +that normal Linux users will never encounter, and its configuration is messy.</p> +<p>Doas is an application from OpenBSD that is simpler and cleaner.</p> +<p>Here are the steps I took to install doas and replace sudo:</p> +<code>sudo pacman -S opendoas</code> +<p>Add my username to the group wheel:</p> +<code>sudo usermod -aG wheel philip</code> +<p>Create /etc/doas.conf and add:</p> +<code>permit setenv {PATH=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin} :wheel</code> +<p>Modify the ownership and permissions:</p> +<code>doas chown -c root:root /etc/doas.conf +doas chmod -c 0400 /etc/doas.conf +</code> +<p>You should now be able to remove sudo:</p> +<code>doas pacman -Rdd sudo</code> +<p>Create a symlink to sudo</p> +<code>ln -s $(which doas) /usr/bin/sudo</code> +<p>So now it would be nice to have the equivalent of sudoedit.</p> +<p>Create /root/scripts/doasedit (I use the micro editor):</p> +<code>#!/usr/bin/env bash + +DOASDIR="/tmp/doas-$(date +%s)" +mkdir $DOASDIR +chmod 700 $DOASDIR +DOASFILE="$DOASDIR/doas.conf" + +cp /etc/doas.conf $DOASFILE +chmod 600 $DOASFILE + +micro $DOASFILE +sync + +doas -C $DOASFILE && echo "valid config" && cp $DOASFILE /etc/doas.conf && chmod 400 /etc/doas.conf || echo "invalid config" +sync + +rm -rf $DOASDIR +</code> + +<p>Create /usr/local/bin/doasedit:</p> + +<code>#!/usr/bin/env bash +if [ "$(id -u)" != 0 ]; then + doas /root/script/doasedit +else + /root/script/doasedit +fi +</code> + +<p>Modify the permissions</p> +<code>doas chmod 700 /root/script/doasedit +doas chmod 755 /usr/local/bin/doasedit +</code> + +<p>Test doasedit:</p> +<code>doasedit</code> +<p>add this line:</p> +<code>permit nopass philip as root cmd pacman</code> +<p>save and you should see:</p> +<code>valid config</code> + +<p><a href="https://www.cjjackson.dev/posts/replacing-sudo-with-doas-on-arch-linux/">Source</a></p> + + </article> +</main> +<footer> + + <p> </p> + + <p>ยง</p> + </footer> +</body> +</html> |