I’m currently running Alpine 3.24 on a headless mini PC for Pi-Hole, which I’ve installed using the native install script, and I’m wondering if I can uninstall sudo and replace it with doas-sudo-shim.
Pi-Hole’s installer made me install sudo even though I already had doas, and I don’t see the point of keeping sudo installed if I don’t need it. From what I understand, doas is more secure and has a smaller attack surface.
EDIT: One of Pi-Hole’s devs says doing this will break updates and Gravity; which is the name of one of Pi-Hole’s main features: https://github.com/pi-hole/pi-hole/issues/6459#issuecomment-5429247641
For starters I’d file a bug against pihole so they support both doas and sudo or drop them altogether and make you use either sudo or doas when executing the script. A hard dependency on sudo is really weird imho.
Try it, find out
I’ve considered trying that to see what happens.
Someone’s gotta be the first
Just dew it brah
One of Pi-Hole’s developers says it would break updates and Gravity (one of Pi-Hole’s features): https://github.com/pi-hole/pi-hole/issues/6459#issuecomment-5429247641
So there you go.
I have had a desktop and a laptop on a basic compatibility script, that only implements
sudo <command>, for a long time, and not had any issues.
And I installed and compiled a bunch of random stuff.
I would be very surprised if there were issues.I recommend you set up some log file to log calls to sudo, so you can judge how much that layer is even needed.
