From: Jakub Czajka <jakub@ekhem.eu.org>
Date: Sun, 21 Jun 2026 22:03:46 +0000 (+0200)
Subject: [system] Add passwordless sudo for guix system reconfigure.
X-Git-Url: https://git.ekhem.eu.org/?a=commitdiff_plain;h=09fdd1dcb548817729253756a6e0d1abae0428c1;p=guix.git

[system] Add passwordless sudo for guix system reconfigure.

Allow AI agents to build the system without asking for password.

Co-Authored-By: Claude <noreply@anthropic.com>
---

diff --git a/system.scm b/system.scm
index c25220d..21e2755 100644
--- a/system.scm
+++ b/system.scm
@@ -127,6 +127,13 @@
                        (cons* (setuid-program (program xsecurelock-auth))
                               %setuid-programs)))
 
+    (sudoers-file (let ((content (string-append "root ALL=(ALL) ALL\n"
+                                  "%wheel ALL=(ALL) ALL\n"
+                                  "dak ALL=(ALL) NOPASSWD: "
+                                  "/run/current-system/profile/bin/guix "
+                                  "system reconfigure *\n")))
+                    (plain-file "sudoers" content)))
+
     (packages (append (list gnu-make bluez pulseaudio volume)
                       dwm-desktop-packages %base-packages))