list of os dependencies and commands that are being installed on linu…

[jasmingacic]

Signed-off-by: jasmingacic jasmin.gacic@gmail.com

[kke]

Some of these are actually shell builtins (bash).

[jasmingacic]

@kke I somewhat changed the doc. Also @jnummelin suggested we moved this to the main README instead of having it in a separate file. What do you think it is the best to put it?

[kke]

It's better now, but I'm not sure if listing all the commands is really necessary. Are there really systems without mv, rm, chmod, etc? It's going to be hard to keep this list up to date.

The package managers pretty much come with the distributions, I don't know if anyone would have an ubuntu without apt or rhel without yum and expect anything to work on it.

I think the essential ones are these:

• iptables - (instaling iptables could be kind of a big deal to some people? maybe we could somehow get rid of the requirement, we're not configuring anything using it anyway, just used to figure out some ip address stuff)
• sudo - (installed on alpine, installing sudo sounds like a relevant system security change)

[jasmingacic]

@jnummelin can you chime in

[jnummelin]

Are there really systems without mv, rm, chmod, etc? It's going to be hard to keep this list up to date.

This is a good point. Maybe we should limit this into what we try to setup.

iptables - (instaling iptables could be kind of a big deal to some people? maybe we could somehow get rid of the requirement, we're not configuring anything using it anyway, just used to figure out some ip address stuff)

iptables is required by kubernetes components. We've got some ideas how to get rid of it in k0s side, but no real actions yet on it.

installing sudo sounds like a relevant system security change

Yeah, maybe not a good idea to do that sort of thing on-the-fly in general. Maybe instead we could try to detect (and adapt) if the user is root or not, if not root then check whether sudo is available or not and bail out if not.

[ncopa]

• sudo - (installed on alpine, installing sudo sounds like a relevant system security change)

FWIW, I personally use doas instead of sudo on basically all my alpine boxes.

We could have an h.SudoExecf wrapper to be used instead of h.Execf("sudo ...") in rig. It could append sudo prefix if uid!=0, and maybe fallback to doas in case sudo does not exist.

[kke]

Yes that makes sense.

[jnummelin]

We could have an h.SudoExecf wrapper to be used instead of h.Execf("sudo ...") in rig. It could append sudo prefix if uid!=0, and maybe fallback to doas in case sudo does not exist.

sounds like a good idea. although not really part of this PR at all. :)

@jasmingacic could you adjust the PR based on above comments. so drop the shell build-in commands and the ones that are always there (mv, cp, ...) and focus on the bits we try to put in place (iptables, etc..)

[kke]

k0sproject/rig#29 is in the works for the sudo business.