Skip to content

Add sudoers configuration for homebridge user in Debian Trixie #178

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
NorthernMan54 merged 8 commits into from
Dec 9, 2025
Merged

Add sudoers configuration for homebridge user in Debian Trixie #178

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
0e0f161
Initial plan
Copilot Dec 9, 2025
9f40c73
Fix sudo permissions for homebridge user shutdown/restart commands
Copilot Dec 9, 2025
1bdc7c5
Improve sudoers security: restrict to root user only
Copilot Dec 9, 2025
e6f6f76
Remove trailing empty line from sudoers file
Copilot Dec 9, 2025
dec2ce3
Add /usr/sbin paths for better compatibility
Copilot Dec 9, 2025
455d11a
Add comments to explain sudoers configuration
Copilot Dec 9, 2025
d6b889e
Add one-liner patch command for existing installations
Copilot Dec 9, 2025
f6c54f8
Simplify patch command with curl-based approach
Copilot Dec 9, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
41 changes: 41 additions & 0 deletions TRIXIE_SUDO_PATCH.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,41 @@
# Trixie Sudo Permissions Patch

If you have already installed a Homebridge Raspberry Pi image and upgraded to Debian Trixie, you may experience issues with the restart/shutdown functionality in the Homebridge UI.

## Quick Fix (One-liner)

Run the following command to patch your existing installation:

```bash
curl -fsSL https://raw.githubusercontent.com/homebridge/homebridge-raspbian-image/latest/stage3_homebridge/01-homebridge/files/010_homebridge-nopasswd | sudo tee /etc/sudoers.d/010_homebridge-nopasswd > /dev/null && sudo chmod 0440 /etc/sudoers.d/010_homebridge-nopasswd && sudo visudo -c
```

### Alternative (if you prefer to see the content first):

```bash
sudo bash -c 'cat > /etc/sudoers.d/010_homebridge-nopasswd << "EOF"
# Allow homebridge user to run shutdown/reboot commands without password
# Both /sbin and /usr/sbin paths are included for compatibility across Debian versions
homebridge ALL=(root) NOPASSWD: /sbin/shutdown, /sbin/reboot, /sbin/poweroff, /usr/sbin/shutdown, /usr/sbin/reboot, /usr/sbin/poweroff
EOF
chmod 0440 /etc/sudoers.d/010_homebridge-nopasswd && visudo -c'
```

This command will:
1. Create the sudoers configuration file for the homebridge user
2. Set the correct permissions (0440)
3. Validate the sudoers syntax

## What This Fixes

This patch allows the homebridge user to run shutdown, reboot, and poweroff commands without requiring a password, which is necessary for the Homebridge UI's restart and shutdown features to work properly in Debian Trixie.

## Verification

After applying the patch, you can verify it worked by checking:

```bash
sudo -l -U homebridge
```

You should see output showing that the homebridge user can run shutdown, reboot, and poweroff commands without a password.
4 changes: 4 additions & 0 deletions stage3_homebridge/01-homebridge/00-run.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,10 @@ install -m 755 files/20-hb-nginx-check "${ROOTFS_DIR}/etc/hb-service/homebridge/
install -m 644 files/first-boot-homebridge.service "${ROOTFS_DIR}/etc/systemd/system/"
install -m 755 files/first-boot-homebridge "${ROOTFS_DIR}/usr/local/sbin/"

# Sudoers configuration for homebridge user
install -v -d "${ROOTFS_DIR}/etc/sudoers.d"
install -m 0440 files/010_homebridge-nopasswd "${ROOTFS_DIR}/etc/sudoers.d/"

#
# MOTD
#
Expand Down
3 changes: 3 additions & 0 deletions stage3_homebridge/01-homebridge/files/010_homebridge-nopasswd
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
# Allow homebridge user to run shutdown/reboot commands without password
# Both /sbin and /usr/sbin paths are included for compatibility across Debian versions
homebridge ALL=(root) NOPASSWD: /sbin/shutdown, /sbin/reboot, /sbin/poweroff, /usr/sbin/shutdown, /usr/sbin/reboot, /usr/sbin/poweroff