Release version 1.9.4

fix(nix): run installer via su instead of sudo to avoid PAM failures in minimal containers
https://chatgpt.com/share/69662b41-2768-800f-a721-292889889547
2026-01-13 14:48:50 +01:00 · 2026-01-13 14:43:12 +01:00
8 changed files with 20 additions and 14 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,8 @@
+## [1.9.4] - 2026-01-13
+
+* fix(ci): replace sudo with su for user switching to avoid PAM failures in minimal container images
+
+
 ## [1.9.3] - 2026-01-07

 * Made the Nix dependency optional on non-x86_64 architectures to avoid broken Arch Linux ARM repository packages.
--- a/flake.nix
+++ b/flake.nix
@@ -32,7 +32,7 @@
        rec {
          pkgmgr = pyPkgs.buildPythonApplication {
            pname   = "package-manager";
-            version = "1.9.3";
+            version = "1.9.4";

            # Use the git repo as source
            src = ./.;
--- a/packaging/arch/PKGBUILD
+++ b/packaging/arch/PKGBUILD
@@ -1,7 +1,7 @@
 # Maintainer: Kevin Veen-Birkenbach <info@veen.world>

 pkgname=package-manager
-pkgver=1.9.3
+pkgver=1.9.4
 pkgrel=1
 pkgdesc="Local-flake wrapper for Kevin's package-manager (Nix-based)."
 arch=('any')
--- a/packaging/debian/changelog
+++ b/packaging/debian/changelog
@@ -1,3 +1,9 @@
+package-manager (1.9.4-1) unstable; urgency=medium
+
+  * fix(ci): replace sudo with su for user switching to avoid PAM failures in minimal container images
+
+ -- Kevin Veen-Birkenbach <kevin@veen.world>  Tue, 13 Jan 2026 14:48:50 +0100
+
 package-manager (1.9.3-1) unstable; urgency=medium

  * Made the Nix dependency optional on non-x86_64 architectures to avoid broken Arch Linux ARM repository packages.
--- a/packaging/fedora/package-manager.spec
+++ b/packaging/fedora/package-manager.spec
@@ -1,5 +1,5 @@
 Name:           package-manager
-Version:        1.9.3
+Version:        1.9.4
 Release:        1%{?dist}
 Summary:        Wrapper that runs Kevin's package-manager via Nix flake

@@ -74,6 +74,9 @@ echo ">>> package-manager removed. Nix itself was not removed."
 /usr/lib/package-manager/

 %changelog
+* Tue Jan 13 2026 Kevin Veen-Birkenbach <kevin@veen.world> - 1.9.4-1
+- fix(ci): replace sudo with su for user switching to avoid PAM failures in minimal container images
+
 * Wed Jan 07 2026 Kevin Veen-Birkenbach <kevin@veen.world> - 1.9.3-1
 - Made the Nix dependency optional on non-x86_64 architectures to avoid broken Arch Linux ARM repository packages.

--- a/pyproject.toml
+++ b/pyproject.toml
@@ -7,7 +7,7 @@ build-backend = "setuptools.build_meta"

 [project]
 name = "kpmx"
-version = "1.9.3"
+version = "1.9.4"
 description = "Kevin's package-manager tool (pkgmgr)"
 readme = "README.md"
 requires-python = ">=3.9"
--- a/scripts/installation/arch/aur-builder-setup.sh
+++ b/scripts/installation/arch/aur-builder-setup.sh
@@ -38,11 +38,7 @@ echo "[aur-builder-setup] Configuring sudoers for aur_builder..."
 ${ROOT_CMD} bash -c "echo '%aur_builder ALL=(ALL) NOPASSWD: /usr/bin/pacman' > /etc/sudoers.d/aur_builder"
 ${ROOT_CMD} chmod 0440 /etc/sudoers.d/aur_builder

-if command -v sudo >/dev/null 2>&1; then
-  RUN_AS_AUR=(sudo -u aur_builder bash -lc)
-else
-  RUN_AS_AUR=(su - aur_builder -c)
-fi
+RUN_AS_AUR=(su - aur_builder -s /bin/bash -c)

 echo "[aur-builder-setup] Ensuring yay is installed for aur_builder..."

--- a/scripts/nix/lib/install.sh
+++ b/scripts/nix/lib/install.sh
@@ -49,11 +49,7 @@ install_nix_with_retry() {
  if [[ -n "$run_as" ]]; then
    chown "$run_as:$run_as" "$installer" 2>/dev/null || true
    echo "[init-nix] Running installer as user '$run_as' ($mode_flag)..."
-    if command -v sudo >/dev/null 2>&1; then
-      sudo -u "$run_as" bash -lc "sh '$installer' $mode_flag"
-    else
-      su - "$run_as" -c "sh '$installer' $mode_flag"
-    fi
+    su - "$run_as" -s /bin/bash -c "bash -lc \"sh '$installer' $mode_flag\""
  else
    echo "[init-nix] Running installer as current user ($mode_flag)..."
    sh "$installer" "$mode_flag"
Author	SHA1	Message	Date
Kevin Veen-Birkenbach	25a0579809	Release version 1.9.4 Some checks failed Mark stable commit / test-unit (push) Has been cancelled Details Mark stable commit / test-integration (push) Has been cancelled Details Mark stable commit / test-env-virtual (push) Has been cancelled Details Mark stable commit / test-env-nix (push) Has been cancelled Details Mark stable commit / test-e2e (push) Has been cancelled Details Mark stable commit / test-virgin-user (push) Has been cancelled Details Mark stable commit / test-virgin-root (push) Has been cancelled Details Mark stable commit / lint-shell (push) Has been cancelled Details Mark stable commit / lint-python (push) Has been cancelled Details Mark stable commit / mark-stable (push) Has been cancelled Details	2026-01-13 14:48:50 +01:00
Kevin Veen-Birkenbach	d4e461bb63	fix(nix): run installer via su instead of sudo to avoid PAM failures in minimal containers Some checks failed Mark stable commit / test-unit (push) Has been cancelled Details Mark stable commit / test-integration (push) Has been cancelled Details Mark stable commit / test-env-virtual (push) Has been cancelled Details Mark stable commit / test-env-nix (push) Has been cancelled Details Mark stable commit / test-e2e (push) Has been cancelled Details Mark stable commit / test-virgin-user (push) Has been cancelled Details Mark stable commit / test-virgin-root (push) Has been cancelled Details Mark stable commit / lint-shell (push) Has been cancelled Details Mark stable commit / lint-python (push) Has been cancelled Details Mark stable commit / mark-stable (push) Has been cancelled Details https://chatgpt.com/share/69662b41-2768-800f-a721-292889889547	2026-01-13 14:43:12 +01:00