Allow update without password using default sudo

playbook/site.yml

@@ -53,8 +53,6 @@
           - suckless-tools # Tools for i3 config
           - fonts-dejavu-core # Font for fancy i3 / urxvt
           # Frontend applications
-          - lxqt-sudo # Graphical sudo prompt
-          - lxqt-sudo-l10n # Language packs for graphical sudo prompt
           - rxvt-unicode # Terminal for admin account and kiosk script
           - pcmanfm # File Manager for admin account
           - lxde-icon-theme # For icons in pcmanfm
@@ -128,6 +126,7 @@
         config_files:
           lightdm.conf: /etc/lightdm/lightdm.conf
           lightdm-gtk-greeter.conf: /etc/lightdm/lightdm-gtk-greeter.conf
+          sudo_allow_update: /etc/sudoers.d/allow_update
     # Admin User Configuration
     - name: Configure admin user
       user:

playbook/templates/admin/i3.cfg

@@ -129,7 +129,7 @@ bindsym $mod+Control+s exec systemctl poweroff
 # reboot computer
 bindsym $mod+Control+r exec systemctl reboot
 # start updater
-bindsym $mod+Control+u exec lxqt-sudo openvt --switch -- /bin/bash /playbook/update.sh
+bindsym $mod+Control+u exec sudo openvt --switch -- /bin/bash /playbook/update.sh
 
 # resize window (you can also use the mouse for that)
 mode "resize" {

playbook/templates/global/sudo_allow_update

@@ -0,0 +1 @@
+{{ admin_user }} ALL=NOPASSWD: /usr/bin/openvt --switch -- /bin/bash /playbook/update.sh