I’m currently running Alpine 3.24 on a headless mini PC for Pi-Hole, which I’ve installed using the native install script, and I’m wondering if I can uninstall sudo and replace it with doas-sudo-shim.

Pi-Hole’s installer made me install sudo even though I already had doas, and I don’t see the point of keeping sudo installed if I don’t need it. From what I understand, doas is more secure and has a smaller attack surface.

  • mmmm@sopuli.xyz
    9·
    4 days ago

    For starters I’d file a bug against pihole so they support both doas and sudo or drop them altogether and make you use either sudo or doas when executing the script. A hard dependency on sudo is really weird imho.

  • redjard@reddthat.com
    3·
    3 days ago

    I have had a desktop and a laptop on a basic compatibility script, that only implements sudo <command>, for a long time, and not had any issues.
    And I installed and compiled a bunch of random stuff.
    I would be very surprised if there were issues.

    I recommend you set up some log file to log calls to sudo, so you can judge how much that layer is even needed.