Score:0

Ubuntu

How to include apt in sudoers without password

Nerun

6/3/24, 7:05 PM

I want to authorize user daniel to use apt with any arguments without enter the password. NOT apt-get or aptitude. The APT command:

sudo apt update
sudo apt dist-upgrade
sudo apt list -a <match>
sudo apt search <match>
sudo apt install <match>
sudo apt purge <match>
sudo apt <anything>

I am trying with a custom /etc/sudoers.d/daniel and my sudoers file is unchanged and has the lines:

# See sudoers(5) for more information on "@include" directives:
@includedir /etc/sudoers.d

My /etc/sudoers.d/daniel:

# Allow daniel to execute apt without password
daniel ALL=(ALL:ALL) NOPASSWD:/usr/bin/apt

But it's not working. I tried also:

daniel ALL=(ALL:ALL) NOPASSWD:/usr/bin/apt *

But no success.

But it works for apt-fast...

daniel ALL=(ALL:ALL) NOPASSWD:/usr/bin/apt-fast

113

1 + 5

apt

sudo

apt-fast

waltinator

6/3/24, 8:37 PM

Read `man sudoers`.

Nerun

6/3/24, 10:40 PM

I read. The solution seems to be: `daniel ALL=(root) NOPASSWD:^/usr/bin/apt.*$`. But did not test it yet, i am at phone.

Nerun

6/4/24, 1:27 AM

No, doesn't work. But `/usr/bin/apt*` works for apt-get and apttude.

waltinator

6/4/24, 2:20 AM

Avoid using the wildcard, `/usr/bin/apt`. In `man sudoers`, did you read down to the end?

Nerun

6/4/24, 12:55 PM

If `daniel ALL=(ALL:ALL) NOPASSWD: /usr/bin/apt` i can execute **apt update** without password, but not **sudo apt update**. Weird. Yes i did read down to the end. What i am missing? Thank you for the help.

Score:0

Ubuntu

Nerun

6/4/24, 2:52 PM

Ok, i have found a solution to my own question.

Usually $ sudo apt (...) or just $ apt (...) need a password to be executed, as well as apt-get, aptitude and apt-fast (the latter a download accelerator).

With this solution is possible to execute any of them with sudo without password, BUT apt (not apt-get), to be executed without password, must not be executed with sudo (as in $ sudo apt update, but just $ apt update instead).

username ALL = NOPASSWD: /usr/bin/apt, /usr/bin/apt-get,\
                         /usr/bin/aptitude, /usr/bin/apt-fast

+ 0

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: How to include apt in sudoers without password

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.