build-debian-toolbox: Allow sudo with empty password

Fedora uses `nullok` in PAM config by default.

diff --git a/build-debian-toolbox b/build-debian-toolbox
index 1bb7781c33e0b6b4777182524f216d91a92ac4ec..95584390a5975d01593dba10ed0c1858cb741507 100755 (executable)
--- a/build-debian-toolbox
+++ b/build-debian-toolbox
@@ -20,6 +20,9 @@ echo force-unsafe-io > /etc/dpkg/dpkg.cfg.d/unsafe-io
 
 apt-get update
 apt-get install -y libnss-myhostname sudo eatmydata libcap2-bin
+
+# allow sudo with empty password
+sed -i "s/nullok_secure/nullok/" /etc/pam.d/common-auth
 '
 
 toolbox run --container $RELEASE sh -exc '