Bug#1037295: live-config: starting Calamares installer requires a password (which is 'live')
On Fri, 30 Jun 2023 at 16:01:49 +0200, Roland Clobus wrote:
> On 10/06/2023 19:14, Simon McVittie wrote:
> > On Sat, 10 Jun 2023 at 15:10:35 +0100, Simon McVittie wrote:
> > > * Boot debian-live-12.0.0-amd64-gnome.iso (the version used for
> > > release-day testing)
> > > - KDE has a similar issue with slightly different steps to start the
> > > installer, probably all desktops' variants are affected
> >
> > GNOME, KDE and LXQT are affected.
>
> I've proposed a fix for Calamares in #1025552, which is based on your
> proposal in this ticket.
> If it is accepted there, this ticket can be regarded as a duplicate.
Bug #1037295 "live-config: starting Calamares installer requires a
password" is not a duplicate of #1025552 "calamares: dependency on
transitional policykit-1 package", they are two separate issues both
triggered by the new polkitd version in bookworm. The fix for #1025552
is to remove the transitional package policykit-1 from Build-Depends,
and replace it with polkitd.
The additional issue that you described in
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1025552#21 *is* the
same thing as bug #1037295, and you are correct to say that the solution
is to provide a JavaScript file configuring polkitd to allow the live
user to start Calamares without a password, but that's outside the scope
of #1025552.
I think it would be better to solve this in live-config rather
than in Calamares, by modifying components/1080-policykit
with polkitd configuration similar to what I suggested in
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1037295#10, because I
don't think we want installing the calamares package onto an ordinary
(non-live) system to give members of the sudo group the ability to
run it without a re-authentication prompt.
smcv
Reply to: