Date: 2026-01-27
Two issues prevented sudoers rules from applying reliably:
/etc/sudoers.d/ files, causing a broad (ALL) ALL rule to override NOPASSWD entries./etc/nsswitch.conf:
sudoers: sss filessudo failed early because the system hostname (drg-k8s.auth.home.lan) was not resolvable locally./etc/hosts:
127.0.1.1 drg-k8s drg-k8s.auth.home.lansudo -n /usr/bin/host example.comsudo -n /bin/cat /etc/sudoers.d/codexops