Control: reassign -1 src:user-setup On 15/05/2026 at 13:53, Marc Haber wrote:
Would you consider, in this case, to drop a snippet (named zz_installer, zz_sudogroup or zz_<created-user>
I'd suggest a name containing "user-setup", the d-i component in charge of configuring users and passwords in the installed system.
saying either %sudo ALL=(ALL:ALL) ALL
So keep adding sudo membership, I guess.
or <created-user> ALL=(ALL:ALL) ALL
And stop adding sudo membership ?
That way, sudo could put the respective line %sudo ALL=(ALL:ALL) ALL in a comment in the default configuration file, making things a bit more secure on fresh installation.
How will you deal with the upgrade of existing installations which use the default configuration file (which will be silently replaced IIUC) and rely on sudo membership ? Uncomment the line or add a snippet in postinst if the group is not empty ? Not sure a NEWS entry will be enough.
