sudo.go

package steps

import "go.bigb.es/auxilia/legatus"

// SudoPolicy decides whether a step's privileged commands are sudo-wrapped. The

// zero value, SudoDefault, preserves each step's historical behavior — so adding

// the field to an existing step changes nothing — while the other values are

// explicit overrides. SudoIfNonRoot resolves against the host's login user: sudo

// only when connecting as a non-root user (root needs none and may lack the sudo

// binary), which is the common fleet shape of a non-root relay + root targets.

type SudoPolicy uint8

const (

	// SudoDefault uses the step's built-in default (the dflt passed to resolve).

	SudoDefault SudoPolicy = iota

	// SudoAlways always sudo-wraps.

	SudoAlways

	// SudoNever never sudo-wraps.

	SudoNever

	// SudoIfNonRoot sudo-wraps only when the host login user is non-root.

	SudoIfNonRoot

)

// resolve reports whether to sudo-wrap, given the step's built-in default.

// SudoIfNonRoot reads the host's User (empty or "root" ⇒ no sudo).

func (p SudoPolicy) resolve(h *legatus.Host, dflt bool) bool {

	switch p {

	case SudoAlways:

		return true

	case SudoNever:

		return false

	case SudoIfNonRoot:

		return h != nil && h.User != "" && h.User != "root"

	default: // SudoDefault

		return dflt

	}

}