Open-sourcing nopasswd-sudo: time-boxed passwordless sudo for agents, built by a local 124B model

max_paperclips · x · 2026-09-05

sudoingX open-sourced nopasswd-sudo, a single-file bash tool granting agents time-boxed passwordless sudo — fixing both the risk of permanent root and the failure of no access at password prompts.

Key mechanics: sudo nopasswd-sudo on 2 arms a 2-hour window closed by a systemd timer; grants can be scoped to an allowlist of commands; every sudoers entry is validated with visudo -cf before install so it can never brick sudoers; sessions are recorded for sudoreplay; the deadline lives inside the grant file so it survives reboots and expired grants get reaped. Author says the entire tool was written by ling 3.0 flash, a 124B MoE decoding at 42 tok/s on a single DGX.

Original post →

More from coding & agent

coding & agent channel →