How do I manage my /etc folder using chezmoi?

[ayushnix]

I'm looking for recommendations on how to manage my /etc folder using chezmoi. I know there's etckeeper but I'd rather use chezmoi for this since I'm already using it for my user dotfiles.

Right now, I'm using a simple script to periodically copy some directories and files from /etc into my XDG_CONFIG_HOME folder and then manage them using chezmoi.

Is there a "better" way that I can manage them, preferably without executing chezmoi as the root user or changing permission of /etc?

[felipecrs]

I think that running as root would be a need, otherwise how could chezmoi write to /etc? In my dotfiles, I currently configure the files under /etc with sudo inside of my run_ scripts. An example:

https://github.com/felipecrs/dotfiles/blob/master/home/run_once_before_1_setup_apt_packages.sh.tmpl#L68-L74

It may not be the cleanest approach, neither the most performant and bullet proof, but it works for me.

[Lockszmith-GH]

check out comtrya - might be more suited to what you're asking than ansible.

[ronlut]

@felipecrs I see the file you referenced disappeared. Did you find a better way to do it? Care to share how you do it today? Thanks

[felipecrs]

That's a long gone approach. But here is the permalink to that file: https://github.com/felipecrs/dotfiles/blob/fb86ab241655d4991734fd7981780578b625f335/home/run_once_before_1_setup_apt_packages.sh.tmpl#L68-L74

I now use something that I call "rootmoi". I've got no time to explain it now (but I believe I did somewhere, although I can't find it).

Hopefully you will understand by checking these references:

https://github.com/felipecrs/dotfiles/blob/c3e0e400e544b3918a856cb10b55672c6ab4c827/home/dot_local/bin/executable_rootmoi.tmpl
https://github.com/felipecrs/dotfiles/blob/c3e0e400e544b3918a856cb10b55672c6ab4c827/home/.chezmoiscripts/run_after_20-run-rootmoi.sh.tmpl
https://github.com/felipecrs/dotfiles/tree/c3e0e400e544b3918a856cb10b55672c6ab4c827/root

I find it pretty neat. :)

[00sapo]

That's a long gone approach. But here is the permalink to that file: https://github.com/felipecrs/dotfiles/blob/fb86ab241655d4991734fd7981780578b625f335/home/run_once_before_1_setup_apt_packages.sh.tmpl#L68-L74

I now use something that I call "rootmoi". I've got no time to explain it now (but I believe I did somewhere, although I can't find it).

Hopefully you will understand by checking these references:

https://github.com/felipecrs/dotfiles/blob/c3e0e400e544b3918a856cb10b55672c6ab4c827/home/dot_local/bin/executable_rootmoi.tmpl https://github.com/felipecrs/dotfiles/blob/c3e0e400e544b3918a856cb10b55672c6ab4c827/home/.chezmoiscripts/run_after_20-run-rootmoi.sh.tmpl https://github.com/felipecrs/dotfiles/tree/c3e0e400e544b3918a856cb10b55672c6ab4c827/root

I find it pretty neat. :)

Hey, thanks! I used your setup and it works! I think we could make a chezmoi "extension" out of it...

[felipecrs]

I will explore this option.

[twpayne]

This is straying into the territory of managing files outside your home directory - which is an explicit non-goal for chezmoi. You might be better off with Ansible/Chef/Puppet/Salt.

[ayushnix]

The suggestion about using run_once_ scripts sounds ok for now. I'll create a run_once script that copies from chezmoi's git repo to /etc. I'll take a look at Ansible as well for this. Thanks!

[someonewithpc]

@twpayne That link is dead and seems to be referenced in multiple places, but I can't find where it's meant to point. This project looks great, but not being easily able to manage files outside $HOME seems like a major limitation. I assume that link has reasoning on why, so I can't say it's not reasonable, though

[bradenhilton]

@someonewithpc https://www.chezmoi.io/user-guide/frequently-asked-questions/design/#can-i-use-chezmoi-to-manage-files-outside-my-home-directory

[nandalopes]

@ayushnix You can take a look on my branch friends, where I manage install profiles and run_once scripts if a certain file changes:

• install profiles
• list of apt packages
• script that adds ppa sources
• apt install script

[mwoz123]

 Answered by [felipecrs](https://github.com/felipecrs)
[on Oct 9, 2021](https://github.com/twpayne/chezmoi/discussions/1510#discussioncomment-1453446)
I think that running as root would be a need, otherwise how could chezmoi write to /etc? In my dotfiles, I currently configure the files under /etc with sudo inside of my run_ scripts. An example:

https://github.com/felipecrs/dotfiles/blob/master/home/run_once_before_1_setup_apt_packages.sh.tmpl#L68-L74

Marked as answer link doesn't exist anymore :(

Updated link from @felipecrs dotfiles: run_once_before_1_setup_apt_packages.sh.tmpl#L68-L74

[nandalopes]

There's a great tool to manage /etc, etckeeper

[mwoz123]

I know it's not recommended as it put security at risk, but I managed to create such chezmoi config.

If you don't care about security - my alias from .bashrc :

alias schezmoi="sudo chezmoi --destination /etc --source /etc/chezmoi/data --working-tree /etc/chezmoi/data --config /etc/chezmoi/chezmoi.toml"

then schezmoi init ... etc

but once again be aware of security risks e.g. here simple cd gives root shell:

marcin@pc:~$ schezmoi status
[sudo] password for marcin: 
 M root/.bashrc
marcin@pc:~$ schezmoi cd
root@pc:/etc/chezmoi/data# whoami
root
root@pc:/etc/chezmoi/data# 

ouch!

you have been warned ;)

[felipecrs]

Out of curiosity, if chezmoi cd is the only flaw, it can be fixed by using a shim to filter out this option.

But, in my case, I always use sudo without passwords for my user so this isn't an additional exposure for me. ;)