New postmarketOS installations now by default use sudo-rs instead of doas

March 18, 20261 min. read

New installations from now on will come with sudo-rs instead of doas. Back in 2024 we switched away from sudo to doas to match the change in Alpine. (!5570) After over a year of using doas, it has been decided that sudo is the better option for us currently due to worries about the long-term security impact of the doas Linux port's development lapse and lack of widespread usage, limiting security oversight. sudo-rs was chosen as the sudo implementation since it is a more modern, yet still well-supported alternative.

This will only affect new installs, meaning that existing installs will continue to use doas and see no loss in functionality for it. If you want to switch to using sudo-rs on your install, run the following command:

doas apk add sudo-rs !doas !doas-sudo-shim !sudo

Reverting tooling switches is not common practice and will not happen often, but sadly, it occasionally has to. We apologize for any inconvenience that this may cause.

Related: !7967