cp over all the bundles from kunsis bw repo

bundles/sudo/files/bwusers

@@ -0,0 +1,9 @@
+% for user, config in sorted(node.metadata['users'].items()):
+%   if config.get('is_admin', False):
+${user} ALL=(ALL) NOPASSWD:ALL
+%   else:
+%     for p in sorted(config.get('sudo_commands', [])):
+${user} ALL=(ALL) NOPASSWD:${p}
+%     endfor
+%   endif
+% endfor

bundles/sudo/files/sudoers

@@ -0,0 +1,10 @@
+Defaults timestamp_timeout=5
+Defaults passwd_timeout=10
+Defaults env_reset
+Defaults secure_path=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+Defaults !syslog
+Defaults !pam_session
+
+root ALL=(ALL) ALL
+
+#includedir /etc/sudoers.d

bundles/sudo/items.py

@@ -0,0 +1,27 @@
+groups = {
+    'sudo': {},
+}
+
+directories = {
+    '/etc/sudoers.d': {
+        'purge': True,
+    },
+}
+
+files = {
+    '/etc/sudoers': {
+        'mode': '0440',
+        'needs': {
+            'file:/etc/sudoers.d/bwusers',
+        },
+    },
+    '/etc/sudoers.d/bwusers': {
+        'content_type': 'mako',
+    },
+}
+
+for filename, content in node.metadata.get('sudo/extra_configs', {}).items():
+    files[f'/etc/sudoers.d/{filename}'] = {
+        'content': '\n'.join(sorted(content)) + '\n',
+        'mode': '0440',
+    }

bundles/sudo/metadata.py

@@ -0,0 +1,12 @@
+defaults = {
+    'apt': {
+        'packages': {
+            'sudo': {},
+        },
+    },
+    'pacman': {
+        'packages': {
+            'sudo': {},
+        },
+    },
+}