From b070c9ee65fb9ef47af105bea96396fd5894bf45 Mon Sep 17 00:00:00 2001
From: Devvyn <22340871+opticon454@users.noreply.github.com>
Date: Thu, 24 Sep 2026 22:17:38 +0800
Subject: [PATCH] feat(docker): install sudo with passwordless access for the
 agent user

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GuHtuPiHXdykq9T6rKQJ9n
---
 docker/agent.Dockerfile | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/docker/agent.Dockerfile b/docker/agent.Dockerfile
index fa7dfdd9..359fd8d9 100644
--- a/docker/agent.Dockerfile
+++ b/docker/agent.Dockerfile
@@ -18,6 +18,7 @@ RUN apt-get update \
  && apt-get install -y --no-install-recommends \
       git \
       libsecret-1-0 \
+      sudo \
       tmux \
       ripgrep \
       curl \
@@ -244,6 +245,8 @@ ENV HOME=/home/agent
 # Codeman's own host-side history/resume reads), and neither kind of artifact
 # creates its own parent directory.
 RUN useradd -g 0 -m -d /home/agent -s /bin/bash agent \
+ && echo 'agent ALL=(ALL) NOPASSWD:ALL' > /etc/sudoers.d/agent \
+ && chmod 0440 /etc/sudoers.d/agent \
  && mkdir -p /home/agent/.npm /home/agent/.cache /home/agent/.config /home/agent/.codeman \
       /home/agent/.claude/projects /home/agent/.codex/sessions /home/agent/.pi/agent /home/agent/.grok \
       /home/agent/.dsh /home/agent/.omp/agent \