Skip to content

Support run0 for authentication #21723

@jelly

Description

@jelly

We would also like to support run0 as alternative to sudo and polkit for authentication the superuser bridge.

For this change /usr/share/cockpit/shell/manifest.json to:

    "bridges": [
        {
            "privileged": true,
            "label": "run0",
            "spawn": [
                "run0",
                "cockpit-bridge",
                "--privileged"
            ]
        },
        {
            "privileged": true,
            "label": "Sudo",
            "environ": [
                "SUDO_ASKPASS=${libexecdir}/cockpit-askpass"
            ],
            "spawn": [
                "sudo",
                "-k",
                "-A",
                "cockpit-bridge",
                "--privileged"
            ]
        },
        {
            "privileged": true,
            "label": "Polkit",
            "spawn": [
                "pkexec",
                "--disable-internal-agent",
                "cockpit-bridge",
                "--privileged"
            ]
        }
    ]

This still doesn't work, likely as our polkit policy file needs changes

Metadata

Metadata

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions