I'm currently running Alpine 3.24 on a headless mini PC for Pi-Hole, which I've installed using the native install script, and I'm wondering if I can uninstall sudo and replace it with doas-sudo-shim.
Pi-Hole's installer made me install sudo even though I already had doas, and I don't see the point of keeping sudo installed if I don't need it. From what I understand, doas is more secure and has a smaller attack surface.
EDIT: One of Pi-Hole's devs says doing this will break updates and Gravity; which is the name of one of Pi-Hole's main features: https://github.com/pi-hole/pi-hole/issues/6459#issuecomment-5429247641
7 Comments
mmmm@sopuli.xyz · 9 pts · 16d
For starters I'd file a bug against pihole so they support both doas and sudo or drop them altogether and make you use either sudo or doas when executing the script. A hard dependency on sudo is really weird imho.
Redjard@reddthat.com · 3 pts · 16d
I have had a desktop and a laptop on a basic compatibility script, that only implements
sudo <command>, for a long time, and not had any issues.And I installed and compiled a bunch of random stuff.
I would be very surprised if there were issues.
I recommend you set up some log file to log calls to sudo, so you can judge how much that layer is even needed.
frongt@lemmy.zip · 2 pts · 16d
Try it, find out
mrbigmouth502@piefed.zip · 4 pts · 16d
I've considered trying that to see what happens.
ExperimentalGuy@programming.dev · 3 pts · 16d
Just dew it brah
frongt@lemmy.zip · 3 pts · 16d
Someone's gotta be the first
mrbigmouth502@piefed.zip · 1 pts · 3d
One of Pi-Hole's developers says it would break updates and Gravity (one of Pi-Hole's features): https://github.com/pi-hole/pi-hole/issues/6459#issuecomment-5429247641
So there you go.