From 2b6b0bf80b022c560c3cdcae42c9ddb2c140ac01 Mon Sep 17 00:00:00 2001
From: Martin Pitt <martin@piware.de>
Date: Fri, 13 Mar 2020 08:05:23 +0100
Subject: [PATCH] build-debian-toolbox: Allow sudo with empty password

Fedora uses `nullok` in PAM config by default.
---
 build-debian-toolbox | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/build-debian-toolbox b/build-debian-toolbox
index 1bb7781..9558439 100755
--- a/build-debian-toolbox
+++ b/build-debian-toolbox
@@ -20,6 +20,9 @@ echo force-unsafe-io > /etc/dpkg/dpkg.cfg.d/unsafe-io
 
 apt-get update
 apt-get install -y libnss-myhostname sudo eatmydata libcap2-bin
+
+# allow sudo with empty password
+sed -i "s/nullok_secure/nullok/" /etc/pam.d/common-auth
 '
 
 toolbox run --container $RELEASE sh -exc '
-- 
2.39.5