<div dir="ltr">Hi<div class="gmail_extra"><br><div class="gmail_quote">On 23 July 2013 10:52, Robert Collins <span dir="ltr"><<a href="mailto:robertc@robertcollins.net" target="_blank">robertc@robertcollins.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">So I'd like to change things to say:<br>
- either run sudo disk-image-create or<br></blockquote><div><br></div><div style>This is probably the simplest option, but it does increase the amount of code we're running with elevated privileges, which might be a concern, but probably isn't, given the ratio of stuff that currently runs without sudo, to the stuff that does.</div>
<div style>I think we also need to do a little work to make this option functional, a quick test just now suggests we are doing something wrong with ELEMENTS_PATH at least.</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
- setup passwordless sudo or<br>
</blockquote><div><br></div><div style>Doesn't sound like a super awesome option to me, it places an ugly security problem on anyone wanting to set this up anywhere, imo.</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
- don't run unattended.<br></blockquote><div><br></div><div style>I like being able to run a build while I read email or do some reviews, so I do not like this option ;)</div><div style><br></div><div style>I think if we make option 1 work, then option 2 is a viable option for people who want it, they have a single command to allow in sudoers. Option 3 essentially works in all scenarios :)</div>
<div> </div><div style>FWIW I do quite like the implicit auditing of sudo commands that is currently required to manually create the sudoers file, but I take your point that it's probably unnecessary work at this point.</div>
<div style><br></div><div style>Cheers,</div><div style><br></div><div style>Chris</div></div></div></div>