From 92a3a6a4b3b17219a02a28afdb197687737aa307 Mon Sep 17 00:00:00 2001
From: Harivansh Rathi <rathiharivansh@gmail.com>
Date: Sat, 18 Apr 2026 22:53:39 -0400
Subject: [PATCH] ci(netty): use setuid sudo wrapper for deploy

Made-with: Cursor
---
 .github/workflows/quality.yml  | 2 +-
 hosts/netty/forgejo-runner.nix | 1 -
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
index ea460f5..d66a75d 100644
--- a/.github/workflows/quality.yml
+++ b/.github/workflows/quality.yml
@@ -61,4 +61,4 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-          sudo nixos-rebuild switch --flake ".#netty"
+          /run/wrappers/bin/sudo /run/current-system/sw/bin/nixos-rebuild switch --flake ".#netty"
diff --git a/hosts/netty/forgejo-runner.nix b/hosts/netty/forgejo-runner.nix
index 688eb79..1b12e06 100644
--- a/hosts/netty/forgejo-runner.nix
+++ b/hosts/netty/forgejo-runner.nix
@@ -86,7 +86,6 @@ in
         ripgrep
         rustup
         stdenv.cc
-        sudo
         unzip
         uv
         wget