[SOLVED] How to bypass makepkg restrictions in chroot?

tooooomy · 2024-05-26 23:30:45

Hello,

I'm in the process of making my own custom installation script with encrypted root. I want to use LUKS2 with memory expensive KDF Argon2id for enhanced security purposes. As for the bootloader, I chose GRUB because I'm also planning to integrate GRUB-BTRFS for rollback snapshots. However, the official support for Argon2 is expected to be added only with the next release of GRUB in November 2024. Thus, the only way for now to make everything work together is using the AUR package grub-improved-luks2-git. But after chroot-ing into /mnt, I have discovered that I'm unable to build the patched GRUB from source as the root user is not allowed to use the makepkg command.

While digging through the internet for the solution, I found a workaround with passing the non-root user to arch-chroot. Now I'm stuck upon another issue - passing the user's password to sudo.

arch-chroot -u $username /mnt -e << EOF
HOME=/home/${username}
cd $HOME && git clone https://aur.archlinux.org/grub-improved-luks2-git.git
cd grub-improved-luks2-git
echo -n "$user_pswd" | makepkg -si --noconfirm
EOF

Another possible one could be directly booting into a freshly installed system using 'systemd-nspawn'. I haven't tested this theory yet and am not sure if it's even applicable for scripting.

Last edited by tooooomy (2024-06-16 14:49:14)

seth · 2024-05-27 07:36:36

Segment the execution.
Run makepkg a regular user and then "sudo pacman -U <package name>"

You can also just "sudo -u regularjoeakatooooomy makepkg" from the root chroot.

WorMzy · 2024-05-27 08:48:34

Mod note: moving to AUR Issues

tooooomy · 2024-06-16 14:48:13

I couldn't make the grub-improved-luks2-git from the AUR work no matter what I did.

Here's an easy workaround to install and use an AUR helper in your script:

1. Temporarily give the user password-promot-free sudo permission.
2. Install the AUR helper of your choice (Paru in my case).
3. Install what you need.
4. Remove the password-promot-free sudo permission from the user.

echo "$username ALL=(ALL:ALL) NOPASSWD: ALL" >> /mnt/etc/sudoers

arch-chroot -u $username /mnt /bin/bash -c "mkdir /tmp/paru.$$ && \
                                           cd /tmp/paru.$$ && \
                                           curl "https://aur.archlinux.org/cgit/aur.git/plain/PKGBUILD?h=paru-bin" -o PKGBUILD && \
                                           makepkg -si --noconfirm"

HOME="/home/${username}" arch-chroot -u $username /mnt /usr/bin/paru --noconfirm -S package_name_you_need

sed -i "/${username} ALL=(ALL:ALL) NOPASSWD: ALL/d" /mnt/etc/sudoers

Last edited by tooooomy (2024-06-16 14:50:06)

Arch Linux

#1 2024-05-26 23:30:45

[SOLVED] How to bypass makepkg restrictions in chroot?

#2 2024-05-27 07:36:36

Re: [SOLVED] How to bypass makepkg restrictions in chroot?

#3 2024-05-27 08:48:34

Re: [SOLVED] How to bypass makepkg restrictions in chroot?

#4 2024-06-16 14:48:13

Re: [SOLVED] How to bypass makepkg restrictions in chroot?

Board footer