mjhjmtu

This question is answered a number of times in the net, but none of those answer resulted useful in my case.

The problem

Accessing a remote machine using private key, I usually require root permissions, which imply writing a long password and is annoying.

For the purpose of having sudo su, I tried following steps:

• Ensure the line <user> ALL=(ALL) NOPASSWD: ALL is in /etc/sudoers


• Ensure the user is in sudo user group: $groups <user> -> sudo

But trying sudo su will just prompt me for my own password: [sudo] password for <user>:

The question

How to have password-less sudo su?

I often place it below the line

# User privilege specification
root ALL=(ALL:ALL) ALL
+++ myuser ALL=(ALL) NOPASSWD: ALL

The better way is to use an own file in /etc/sudoers.d with the line above.

If you would like to use the group policy, you need to modify the line for your group

# Allow members of group sudo to execute any command
%sudo ALL=(ALL:ALL) NOPASSWD: ALL

Otherwise the group policy will overwrite your user policy and you will be asked for the password.

And an other hint:

Please don't use "sudo su". Instead use sudo su - or sudo -i. This will unload your env and load the one of root, avoiding to use bad env variable from your account with root.

Your sudoers file has something that already grants you the ability to run sudo su (or possibly any commands), but does not include the NOPASSWD: option.

Ordering within the sudoers file is important: last match wins.

You can use sudo -l to list all the sudo Defaults options and all the allowed commands for your user account.