remove users/$user/is_admin metadata, directly write sudo_commands instead

bundles/sudo/files/bwusers

@@ -1,9 +1,5 @@
 % for user, config in sorted(node.metadata['users'].items()):
-%   if config.get('is_admin', False):
-${user} ALL=(ALL) NOPASSWD:ALL
-%   else:
 %  for p in sorted(config.get('sudo_commands', [])):
 ${user} ALL=(ALL) NOPASSWD:${p}
 %  endfor
-%   endif
 % endfor

bundles/users/metadata.py

@@ -36,7 +36,7 @@ def add_users_from_json(metadata):
         if config.get('is_admin', False) or uname in metadata_users:
             users[uname] = {
                 'ssh_pubkey': set(config['ssh_pubkey']),
-                'is_admin': config.get('is_admin', False),
+                'sudo_commands': ['ALL'],
             }
 
     # Then, run again to get all 'to be deleted' users

bundles/vmhost/metadata.py

@@ -52,7 +52,7 @@ if node.has_bundle('arch-with-gui'):
 def libvirt_group_for_admins(metadata):
     result = {}
     for user, config in metadata.get('users', {}).items():
-        if config.get('is_admin', False):
+        if 'ALL' in config.get('sudo_commands', set()):
             result[user] = {
                 'groups': {
                     'libvirt',

nodes/home/router.py

@@ -137,16 +137,8 @@ nodes['home.router'] = {
             'f2k1de': {
                 'delete': True,
             },
-            'fkunsmann': {
-                'sudo_commands': {
-                    'ALL',
-                },
-            },
-            'sophie': {
-                'sudo_commands': {
-                    'ALL',
-                },
-            },
+            'fkunsmann': {},
+            'sophie': {},
         },
         'vnstat': {
             'interface': 'enp1s0.7',

nodes/htz-cloud/miniserver.py

@@ -234,9 +234,6 @@ nodes['htz-cloud.miniserver'] = {
                 'ssh_pubkey': [
                     "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDILcYrMQNRVXAm5L+7No1ZumqfCyRc1QZmTY3O7Q8hsE4+fCAvwsWm2aSMfLL3NnIl8Nm1Rixzic5jdYKYNIY3SlX1wvTB+MhGb2eyVSd7c/Y98aCLSlDkQ2sebjpdA1FoJOeGD3qxqDwj0+KckXU2ZaSSQY7CxVsjH65UxCHqVAg+6uLdNbj7j850s1B9NXVXef+sBQ5jUngXxnqQWwNh2Mn8auwumkeEG4SYf96wyFkLvmBitOng/GyLWl9YPnXXHHDnatcVipy7y34qw4CQ4P84anecbA+Bqr9IcxBW6qYmYgRKEnAcmEfjQd+BI1gCLB1BBEmb/qp+mVLd4tOh sophie@carbon"
                 ],
-                'sudo_commands': {
-                    'ALL',
-                },
             },
         },
         'zfs': {

nodes/htz-hel/backup-sophie.py

@@ -49,11 +49,7 @@ nodes['htz-hel.backup-sophie'] = {
             },
         },
         'users': {
-            'sophie': {
-                'sudo_commands': {
-                    'ALL',
-                },
-            },
+            'sophie': {},
         },
         'zfs': {
             'datasets': {

nodes/voc/infobeamer-cms.py

@@ -99,6 +99,7 @@ nodes['voc.infobeamer-cms'] = {
                 },
                 'sudo_commands': {'ALL'},
             },
+            'sophie': {},
         },
     },
 }