build requires privilege escalation

[Atemu]

I just attempted to work around #206 by allowing local SSH but apparently a build requires privilege escalation:

$ colmena build --on HEPHAISTOS,SOTERIA --verbose
[INFO ] Using configuration: /Users/atemu/Projects/nixfiles/nixos-config/hive.nix
[INFO ] Enumerating nodes...
[INFO ] Selected 2 out of 5 hosts.
     (...) | Evaluating SOTERIA and HEPHAISTOS
     (...) | trace: warning: The option `services.xserver.xkbVariant' defined in `/Users/atemu/Projects/nixfiles/nixos-config/modules/desktop/module.nix' has been renamed to `services.xserver.xkb.variant'.
     (...) | trace: warning: The option `services.xserver.xkbOptions' defined in `/Users/atemu/Projects/nixfiles/nixos-config/modules/desktop/module.nix' has been renamed to `services.xserver.xkb.options'.
     (...) | trace: warning: The option `services.xserver.layout' defined in `/Users/atemu/Projects/nixfiles/nixos-config/modules/desktop/module.nix' has been renamed to `services.xserver.xkb.layout'.
     (...) | trace: warning: The option `services.avahi.nssmdns' defined in `/Users/atemu/Projects/nixfiles/nixos-config/common.nix' has been renamed to `services.avahi.nssmdns4'.
     (...) | trace: warning: The option `services.xserver.libinput.touchpad' defined in `/Users/atemu/Projects/nixfiles/nixos-config/modules/desktop/module.nix' has been renamed to `services.libinput.touchpad'.
     (...) | trace: warning: The option `services.xserver.libinput.mouse' defined in `/Users/atemu/Projects/nixfiles/nixos-config/modules/desktop/module.nix' has been renamed to `services.libinput.mouse'.
     (...) | trace: warning: The option `services.xserver.libinput.enable' defined in `/Users/atemu/Projects/nixfiles/nixos-config/modules/desktop/module.nix' has been renamed to `services.libinput.enable'.
     (...) | trace: warning: The option `services.xserver.displayManager.defaultSession' defined in `/Users/atemu/Projects/nixfiles/nixos-config/modules/desktop/module.nix' has been renamed to `services.displayManager.defaultSession'.
     (...) | Evaluated SOTERIA and HEPHAISTOS
HEPHAISTOS | Building HEPHAISTOS
   SOTERIA | Building SOTERIA
HEPHAISTOS | copying 0 paths...
   SOTERIA | copying 0 paths...
HEPHAISTOS | sudo: a terminal is required to read the password; either use the -S option to read from standard input or configure an askpass helper
HEPHAISTOS | sudo: a password is required
HEPHAISTOS | Build failed: Child process exited with error code: 1
   SOTERIA | /nix/store/wy7adsrx84yki9w3wh7d1rrl1ypbyka5-nixos-system-SOTERIA-23.11pre-git
   SOTERIA | Built "/nix/store/wy7adsrx84yki9w3wh7d1rrl1ypbyka5-nixos-system-SOTERIA-23.11pre-git" on target node
           | Failed: Child process exited with error code: 1
[ERROR] Failed to complete requested operation - Last 1 lines of logs:
[ERROR]  failure) Child process exited with error code: 1
[ERROR] Failed to build HEPHAISTOS - Last 6 lines of logs:
[ERROR]  created)
[ERROR]    state) Running
[ERROR]   stderr) copying 0 paths...
[ERROR]   stderr) sudo: a terminal is required to read the password; either use the -S option to read from standard input or configure an askpass helper
[ERROR]   stderr) sudo: a password is required
[ERROR]  failure) Child process exited with error code: 1
[ERROR] -----
[ERROR] Operation failed with error: Child process exited with error code: 1
Hint: Backtrace available - Use `RUST_BACKTRACE=1` environment variable to display a backtrace

I do not see a reason for Colmena to attempt privilege escalation for a mere build.

[itslychee]

Getting the same problem here as well!

[mikeodr]

Does the applying user on the remote need to have sudo privileges without password configure?

I'm hitting this myself and I think this is the problem?

[Atemu]

@mikeodr this is about build which never applies anything.