Enable passwordless sudo if user password not set

[prashantsengar]

No description provided.

[buildplan]

Appreciate this but I my concern would be that silently adding NOPASSWD:ALL, it can be bit of security risk for some users who might not understand the implications...

Maybe a middleground could be that we have option to add a random password or user can explicitly choose to have no password and gets a warning message... I am thinking somehthing like:

            if [[ -z "$PASS1" && -z "$PASS2" ]]; then
                print_warning "Password skipped. Relying on SSH key authentication."
                print_warning "Without a password, you will NOT be able to use 'sudo' for administrative tasks."
                
                if confirm "Generate a secure random password for you? (Recommended)" "y"; then
                    local RAND_PASS
                    RAND_PASS=$(head /dev/urandom | tr -dc A-Za-z0-9 | head -c 24)
                    if echo "$USERNAME:$RAND_PASS" | chpasswd >/dev/null 2>&1; then
                        print_success "Generated random password for '$USERNAME'."
                        printf '\n%s\n' "${YELLOW}⚠ SAVE THIS PASSWORD FOR SUDO ACCESS:${NC}"
                        printf '  %s\n\n' "${BOLD}$RAND_PASS${NC}"
                        log "Generated random password for '$USERNAME'."
                        break
                    else
                        print_error "Failed to set random password."
                    fi
                elif confirm "Enable passwordless sudo? (WARNING: Security Risk)" "n"; then
                    echo "$USERNAME ALL=(ALL) NOPASSWD:ALL" > "/etc/sudoers.d/$USERNAME"
                    chmod 0440 "/etc/sudoers.d/$USERNAME"
                    print_warning "Passwordless sudo enabled for '$USERNAME'."
                    log "Passwordless sudo explicitly enabled for '$USERNAME'."
                    break
                else
                    print_warning "No password set and passwordless sudo disabled. You will not have admin rights."
                    log "Password setting skipped, no sudo rights for '$USERNAME'."
                    break
                fi
            elif [[ "$PASS1" == "$PASS2" ]]; then

What you think would this work?

[prashantsengar]

Sorry I saw this late. I quickly fixed it when I saw for my own system and created a PR without thinking of other cases.

I agree with the changes you made - I would have done the same. Thanks for your response!