topgrade icon indicating copy to clipboard operation
topgrade copied to clipboard

sudoloop

Open Dev380 opened this issue 9 months ago • 2 comments

Would it be beneficial for topgrade to call --sudoloop for yay/paru AUR managers? This makes it so sudo doesn't time out and just runs indefinitely. If so, would it only be enabled for --yes upgrades?

Dev380 avatar May 03 '24 04:05 Dev380

It seems that this is a quite risky option: https://www.reddit.com/r/archlinux/comments/dnxjbx/comment/f5harho/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button

This is a really bad idea, as sudo credentials are cached by the TTY and if you walk away from the computer while yay is running, another person can come by, CTRL+C the running program, and gain access to a sudo session.


If so, would it only be enabled for --yes upgrades?

--yes is used to confirm the update, which does not seem suitable for this option. If we are going to add it, having a dedicated configuration entry would make sense to me, i.e., something like:

[linux]
yay_paru_sudo_loop = true 

SteveLauC avatar May 18 '24 08:05 SteveLauC

I would really appreciate this. I run topgrade weekly and oftentimes I walk away from the computer while it's running, only to find that I needed to enter my sudo password again because an AUR package was building and now I need to restart the whole update process.

dotaxis avatar Aug 03 '24 20:08 dotaxis