|
|
7 months ago | |
|---|---|---|
| polkit-rules | 7 months ago | |
| sysusers | 7 months ago | |
| .gitignore | 7 months ago | |
| LICENSE | 7 months ago | |
| README.md | 7 months ago | |
| build.sh | 7 months ago | |
| dragonrat-admin-tweaks.spec | 7 months ago | |
README.md
Dragonrat Admin Tweaks
Tweaks for administration of IT systems
Background
I needed to be able to set up polkit rules on atomic systems. Mostly, this was so that regular users could apply updates automatically without full admin rights. And basically the only (read "Best") way to install custom files to the read-only portion of OS is to use an RPM file. Thus, this repo is born.
Updater Role
I wanted a way to allow non-tech users to update their system automatically without them needing to intervene. And it needed to be able to happen on laptops that are not always on or even connected to the network. So something like Ansible was overly complicated. These are family laptops, so they can be "brought in" regularly. This feels like a happy middle ground. Updates can be applied regularly (and automatically) through KDE's discover app, which uses PackageKit on the backend. PackageKit uses Polkit for authorization, so it just requires some polkit rules in order to work for updater users.
The updater role shouldn't require any sudo privileges because it is designed for non-tech users. They shouldn't be using the command line anyway.