To give you some context, I tried creating a privileged container in DistroShelf (a frontend for distrobox) on Aurora (universal blue), and authentication fails because sudo doesn't know how to show me a prompt.

The documentation in sudo.conf gives the example of using gnome's password prompting program, so I figured that it wouldn't hurt to set it to ksshaskpass which is the equivalent on KDE.

Note that I appended the line at the end instead of trying to uncomment and change the line. I don't know what the best approach for this is.

I also tried this change in a VM to make sure it works.

Build succeeded.
https://fedora.softwarefactory-project.io/zuul/buildset/e0ca54759aab4c4eb4eca8312ea4e3f6

• validate : SUCCESS in 13m 44s

This looks good. However we prefer using drop-in/included config files instead of modifying the default config. This config file should also likely live in the https://src.fedoraproject.org/rpms/ksshaskpass package as well, or at least a subpackage.

So the first step is to add ksshaskpass to the image like you did here, and then update the ksshaskpass package to set itself up as askpass app in sudo's config.

Hum, I don't see the equivalent configured for GNOME in the openssh-askpass package: https://src.fedoraproject.org/rpms/openssh/blob/rawhide/f/openssh.spec#_570

Not sure why this is the case.

I found a better way: https://src.fedoraproject.org/rpms/ksshaskpass/pull-request/2

Build succeeded.
https://fedora.softwarefactory-project.io/zuul/buildset/c77dfc8a194243629eba68be7e349908

• validate : SUCCESS in 14m 01s

Great. Can you squash everything here and update commit & PR title? Thanks

Is this good?

Build succeeded.
https://fedora.softwarefactory-project.io/zuul/buildset/1df565358a894b65b83c957f7c62a6c5

• validate : SUCCESS in 13m 45s

Looking good. Thanks!

F44 backport in https://pagure.io/workstation-ostree-config/pull-request/752

Build succeeded.
https://fedora.softwarefactory-project.io/zuul/buildset/c8af0f040909488c94fe9aa4f395049d

• validate : SUCCESS in 14m 17s