summaryrefslogtreecommitdiff
path: root/prompts/skills/f3s-rocky-vm-setup/references/privileges.md
diff options
context:
space:
mode:
authorPaul Buetow <paul@buetow.org>2026-07-18 22:08:10 +0300
committerPaul Buetow <paul@buetow.org>2026-07-18 22:08:10 +0300
commitefbb7876347bc667bdb3633f72a22a51b3bfbc49 (patch)
tree0a2d1d9367f4bf549584aaa71b0b82337cab2226 /prompts/skills/f3s-rocky-vm-setup/references/privileges.md
parentfbf9d4815ea25bd85be0f232ac8670bda1a64955 (diff)
skills: rename pkgrepo -> f3s-pkgrepo and rocky-vm-setup -> f3s-rocky-vm-setup
Extend the f3s- prefix to the two remaining f3s-scoped siblings so the whole homelab family groups together. Both are f3s-specific: pkgrepo IS pkgrepo.f3s.buetow.org, and rocky-vm-setup documents the 'rocky' VM on the f3s host f3. - git mv both skill dirs (history preserved); update name: frontmatter; add the 'Part of the f3s homelab skill family' note to both descriptions. - Rewrite every reference to the *skills*: backtick mentions (`pkgrepo` -> `f3s-pkgrepo`, `rocky-vm-setup` -> `f3s-rocky-vm-setup`), markdown cross-links (../pkgrepo/ -> ../f3s-pkgrepo/, etc.), the f3s hub Related-skills block and description, and skill-maintenance's index-pattern example. - Left references to the package REPOSITORY (pkgrepo.f3s.buetow.org, 'the custom pkgrepo') unchanged — those name a service, not the skill. - Verified all 114 relative links resolve. Plan doc updated to record the rename. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Diffstat (limited to 'prompts/skills/f3s-rocky-vm-setup/references/privileges.md')
-rw-r--r--prompts/skills/f3s-rocky-vm-setup/references/privileges.md20
1 files changed, 20 insertions, 0 deletions
diff --git a/prompts/skills/f3s-rocky-vm-setup/references/privileges.md b/prompts/skills/f3s-rocky-vm-setup/references/privileges.md
new file mode 100644
index 0000000..d8f25ba
--- /dev/null
+++ b/prompts/skills/f3s-rocky-vm-setup/references/privileges.md
@@ -0,0 +1,20 @@
+# User and Privileges
+
+**`root`** — full root, used for package installs and Rex tasks.
+
+**`paul`**
+- **Removed from `wheel`** group. No general `sudo` access.
+- **Only** allowed to run without password:
+ ```
+ /home/paul/scripts/update-coding-agents
+ ```
+- Home: `/home/paul`
+- Git repos: `~/git/` (cloned via local `r0`/`r1`/`r2` remotes)
+
+## Sudoers config
+
+```
+paul ALL=(root) NOPASSWD: /home/paul/scripts/update-coding-agents
+```
+
+No other sudo privileges. The `wheel-nopasswd` file was removed and paul was removed from the `wheel` group.