Demi Marie Obenour <demiobenour@gmail.com> writes:

> On 2/4/26 12:55, Johannes Süllner wrote:
>> The installer needs to run as root, so that `systemd-repart` can write
>> to disks. Since Weston is not running as root (since b26f59e), just as
>> with the root terminal, we add a s6-sudod service for the installer.
>
> Could this be conditional to the live image?  Installed images don't
> need it.

My hope would be to not have a distinction in the end between live and
installed images.  If you're worried about attack surface we could have
some switch to disable it before boot, as far out as possible like in
the kernel command line or a UEFI variable.