@@ -86,9 +86,11 @@ actions:
8686 set -eux
8787 # pre-emptively create a sudo group if sudo isn't installed
8888 getent group sudo >/dev/null 2>&1 || groupadd --system sudo
89- # some of these groups are only needed for desktop scenarios
89+ # some useful groups for desktop scenarios, but also to run payloads
90+ # from the serial console, over SSH, or in containers - where the desktop
91+ # session has not updated ACLs to the device nodes
9092 useradd --create-home --shell /bin/bash --user-group \
91- --groups adm,video,users ,sudo debian
93+ --groups adm,audio,render ,sudo,users,video debian
9294 # password must be changed on first login; set it to "debian"
9395 chage --lastday 0 debian
9496 echo debian:debian | chpasswd
@@ -99,6 +101,7 @@ actions:
99101 umask 226
100102 echo "debian ALL=(ALL) NOPASSWD:ALL" >/etc/sudoers.d/90-debos
101103 )
104+
102105 # NB: Recommends pull in way too many packages, and we don't need to follow
103106 # Recommends reaching outside of this Priority level
104107 - action : apt
@@ -123,6 +126,7 @@ actions:
123126 - alsa-utils
124127 - clinfo
125128 - device-tree-compiler
129+ - docker.io
126130 - i2c-tools
127131 - locales
128132 - mesa-opencl-icd
@@ -136,10 +140,19 @@ actions:
136140 - sudo
137141 # lsusb
138142 - usbutils
143+ # media-ctl
144+ - v4l-utils
139145 - vim
140146 - vulkan-tools
141147 - wget
142148
149+ - action : run
150+ description : Add default user to docker group
151+ chroot : true
152+ command : |
153+ set -eux
154+ usermod -a -G docker debian
155+
143156{{- if eq $xfcedesktop "true" }}
144157 # this should ideally be task-xfce-desktop, but this pulls too many apps;
145158 # instead, curate from the Depends and Recommends of task-xfce-desktop and
0 commit comments