fix: remove sudo from provisioning, add PATH to user shell#12
Merged
ethannortharc merged 1 commit intomainfrom Mar 11, 2026
Merged
fix: remove sudo from provisioning, add PATH to user shell#12ethannortharc merged 1 commit intomainfrom
ethannortharc merged 1 commit intomainfrom
Conversation
incus exec already runs as root, so sudo is redundant. On NixOS 25.11, sudo fails with PAM authentication errors, breaking all file writes. Also set PATH in exec_as_user so NixOS binaries are found in user shell. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
4 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
sudofrom provisioning commands —incus execalready runs as rootsudofail with "Authentication service cannot retrieve authentication info"/run/current-system/sw/bin) toexec_as_userso user shell finds binariesdevbox shellafter provisioningTest plan
devbox create --name test --tools goon Incus/Linux writes all config files successfullydevbox shell testopens a working shell session🤖 Generated with Claude Code