Try to fix stupid bug, use pkexec in more places

I don't think `rm -rf /` is a feature ;]

system_files/deck/shared/usr/share/ublue-os/just/85-bazzite-image.just

@@ -26,19 +26,19 @@ get-emudeck:
 
 # Use EXT4 for SD Cards, allows use of SteamOS formatted SD cards
 switch-to-ext4:
-    sudo sed -i 's@STEAMOS_BTRFS_SDCARD_FORMAT_FS="btrfs"@STEAMOS_BTRFS_SDCARD_FORMAT_FS="ext4"@g' /etc/default/steamos-btrfs
+    pkexec sed -i 's@STEAMOS_BTRFS_SDCARD_FORMAT_FS="btrfs"@STEAMOS_BTRFS_SDCARD_FORMAT_FS="ext4"@g' /etc/default/steamos-btrfs
 
 # Install Deck HD BIOS
 install-deckhd-bios:
     #!/usr/bin/bash
     SYS_ID="$(/usr/libexec/hwsupport/sysid)"
     if [[ ":Jupiter:" =~ ":$SYS_ID:" ]]; then
-      RESOLUTION=$(sudo lshw -json -c display | jq -r .[]."configuration"."resolution")
+      RESOLUTION=$(pkexec lshw -json -c display | jq -r .[]."configuration"."resolution")
       if [[ "${RESOLUTION}" = "1200,1920" ]]; then
-        sudo systemctl mask --now jupiter-biosupdate.service
+        pkexec systemctl mask --now jupiter-biosupdate.service
         wget -q https://deckhd.com/downloads/install.sh -O /tmp/deckhd-install.sh
         chmod +x /tmp/deckhd-install.sh
-        sudo ./tmp/deckhd-install.sh
+        pkexec ./tmp/deckhd-install.sh
       else
         echo "Unable to detect DeckHD. Aborting..."
       fi
@@ -51,33 +51,33 @@ enable-deck-bios-firmware-updates:
     #!/usr/bin/bash
     SYS_ID="$(/usr/libexec/hwsupport/sysid)"
     if [[ ":Jupiter:" =~ ":$SYS_ID:" || ":Galileo:" =~ ":$SYS_ID:" ]]; then
-      RESOLUTION=$(sudo lshw -json -c display | jq -r .[]."configuration"."resolution")
+      RESOLUTION=$(pkexec lshw -json -c display | jq -r .[]."configuration"."resolution")
       if [[ "${RESOLUTION}" = "1200,1920" ]]; then
         echo "DeckHD detected. Firmware updates enabled. BIOS updates not enabled."
       elif [[ "$(awk '/MemTotal/{print $(NF-1)}' /proc/meminfo)" == "31664740" ]]; then
         echo "32GB RAM modded Deck detected. Firmware updates enabled. BIOS updates not enabled."
       else
-        sudo systemctl enable jupiter-biosupdate.service
+        pkexec systemctl enable jupiter-biosupdate.service
       fi
-      sudo systemctl enable jupiter-controller-update.service
+      pkexec systemctl enable jupiter-controller-update.service
     else
       echo "This is only applicable to Valve's Steam Deck. Aborting..."
     fi
 
 # Disable Steam Deck BIOS updates
 disable-bios-updates:
     #!/usr/bin/bash
-    sudo systemctl mask --now jupiter-biosupdate.service
+    pkexec systemctl mask --now jupiter-biosupdate.service
 
 # Disable Steam Deck controller firmware updates
 disable-firmware-updates:
     #!/usr/bin/bash
-    sudo systemctl mask --now jupiter-controller-update.service
+    pkexec systemctl mask --now jupiter-controller-update.service
 
 # Disable SDGyroDSU
 disable-sdgyrodsu:
     #!/usr/bin/bash
-    sudo systemctl mask --user sdgyrodsu.service
+    pkexec systemctl mask --user sdgyrodsu.service
 
 # Re-enable input remapper feature on non-desktop images
 restore-input-remapper:
@@ -96,7 +96,7 @@ _toggle-autologin:
     #!/usr/bin/bash
     DESKTOP_AUTOLOGIN="/etc/bazzite/desktop_autologin"
     if [[ -f $DESKTOP_AUTOLOGIN ]]; then
-      sudo rm -f $DESKTOP_AUTOLOGIN
+      pkexec rm -f $DESKTOP_AUTOLOGIN
     else
-      sudo touch $DESKTOP_AUTOLOGIN
+      pkexec touch $DESKTOP_AUTOLOGIN
     fi

system_files/desktop/shared/usr/share/ublue-os/just/10-update.just

@@ -31,9 +31,9 @@ toggle-updates ACTION="prompt":
       exit 0
     fi
     if [ "${OPTION,,}" == "enable" ]; then
-      sudo systemctl enable ublue-update.timer
+      pkexec systemctl enable ublue-update.timer
     elif [ "${OPTION,,}" == "disable" ]; then
-      sudo systemctl disable ublue-update.timer
+      pkexec systemctl disable ublue-update.timer
     fi
 
 alias changelog := changelogs

system_files/desktop/shared/usr/share/ublue-os/just/80-bazzite.just

@@ -58,39 +58,38 @@ configure-grub ACTION="":
       OPTION=$(Choose "Hide Grub" "Unhide Grub" "Fix double ostree entry")
     fi
     if [[ "${OPTION,,}" =~ ^hide ]]; then
-      sudo sed -i 's/GRUB_TIMEOUT=5/GRUB_TIMEOUT=0/g' /etc/default/grub
-      echo 'GRUB_TIMEOUT_STYLE=hidden' | sudo tee -a /etc/default/grub 1>/dev/null
-      echo 'GRUB_HIDDEN_TIMEOUT=1' | sudo tee -a /etc/default/grub 1>/dev/null
+      pkexec sed -i 's/GRUB_TIMEOUT=5/GRUB_TIMEOUT=0/g' /etc/default/grub
+      echo 'GRUB_TIMEOUT_STYLE=hidden' | pkexec tee -a /etc/default/grub 1>/dev/null
+      echo 'GRUB_HIDDEN_TIMEOUT=1' | pkexec tee -a /etc/default/grub 1>/dev/null
       if [ -d /sys/firmware/efi ]; then
-        sudo grub2-mkconfig -o /etc/grub2-efi.cfg
+        pkexec grub2-mkconfig -o /etc/grub2-efi.cfg
       else
-        sudo grub2-mkconfig -o /etc/grub2.cfg
+        pkexec grub2-mkconfig -o /etc/grub2.cfg
       fi
     elif [[ "${OPTION,,}" =~ ^unhide ]]; then
-      sudo sed -i '/GRUB_HIDDEN_TIMEOUT=1/d' /etc/default/grub
-      sudo sed -i '/GRUB_TIMEOUT_STYLE=hidden/d' /etc/default/grub
-      sudo sed -i 's/GRUB_TIMEOUT=0/GRUB_TIMEOUT=5/g' /etc/default/grub
+      pkexec sed -i '/GRUB_HIDDEN_TIMEOUT=1/d' /etc/default/grub
+      pkexec sed -i '/GRUB_TIMEOUT_STYLE=hidden/d' /etc/default/grub
+      pkexec sed -i 's/GRUB_TIMEOUT=0/GRUB_TIMEOUT=5/g' /etc/default/grub
       if [ -d /sys/firmware/efi ]; then
-        sudo grub2-mkconfig -o /etc/grub2-efi.cfg
+        pkexec grub2-mkconfig -o /etc/grub2-efi.cfg
       else
-        sudo grub2-mkconfig -o /etc/grub2.cfg
+        pkexec grub2-mkconfig -o /etc/grub2.cfg
       fi
     elif [[ "${OPTION,,}" =~ ^fix ]]; then
-      sudo grub2-switch-to-blscfg
       if [ -d /sys/firmware/efi ]; then
-        sudo grub2-mkconfig -o /etc/grub2-efi.cfg
+        pkexec grub2-mkconfig -o /etc/grub2-efi.cfg
       else
-        sudo grub2-mkconfig -o /etc/grub2.cfg
+        pkexec grub2-mkconfig -o /etc/grub2.cfg
       fi
     fi
 
 # Add user to "input" group required by certain controller drivers
 add-user-to-input-group:
     #!/usr/bin/bash
     if ! grep -q "input" /etc/group; then
-      sudo bash -c 'grep "input" /lib/group >> /etc/group'
+      pkexec bash -c 'grep "input" /lib/group >> /etc/group'
     fi
-    sudo usermod -a -G input $USER
+    pkexec usermod -a -G input $USER
 
 # Configure watchdog (default: enabled, recovers the system in the event of a malfunction)
 configure-watchdog ACTION="":
@@ -151,13 +150,14 @@ setup-decky ACTION="install":
       exit 0
     fi
     if [[ "${OPTION,,}" =~ install ]]; then
-      export HOME=$(getent passwd ${SUDO_USER:-$USER} | cut -d: -f6)
+      export HOME=$(getent passwd $(id -nu $PKEXEC_UID) | cut -d: -f6)
       if [ ! -L "/home/deck" ] && [ ! -e "/home/deck" ]  && [ "$HOME" != "/home/deck" ]; then
         echo "Making a /home/deck symlink to fix plugins that do not use environment variables."
-        sudo ln -sf "$HOME" /home/deck
+        pkexec ln -sf "$HOME" /home/deck
       fi
-      curl -L https://github.com/SteamDeckHomebrew/decky-installer/releases/latest/download/install_release.sh | sh
-      sudo chcon -R -t bin_t $HOME/homebrew/services/PluginLoader
+      alias sudo="pkexec "
+      SUDO_USER="$(id -nu $PKEXEC_UID)" source <(curl -L https://github.com/SteamDeckHomebrew/decky-installer/releases/latest/download/install_release.sh)
+      pkexec chcon -R -t bin_t $HOME/homebrew/services/PluginLoader
     fi
 
 # Ptyxis terminal transparency

system_files/desktop/shared/usr/share/ublue-os/just/82-bazzite-apps.just

@@ -20,15 +20,15 @@ install-lact:
           -O /tmp/lact.rpm
     fi
     rpm-ostree install --apply-live -y /tmp/lact.rpm
-    sudo systemctl enable --now lactd
+    pkexec systemctl enable --now lactd
     rm /tmp/lact.rpm
     echo 'Complete.'
 
 # Install CoolerControl, a GUI for viewing all your system's sensors and for creating custom fan and pump profiles based on any available temperature sensor28
 install-coolercontrol:
     #!/usr/bin/bash
     ublue-update --wait
-    sudo wget https://copr.fedorainfracloud.org/coprs/codifryed/CoolerControl/repo/fedora-$(rpm -E %fedora)/codifryed-CoolerControl-fedora-$(rpm -E %fedora).repo -O /etc/yum.repos.d/_copr_codifryed-CoolerControl.repo
+    pkexec wget https://copr.fedorainfracloud.org/coprs/codifryed/CoolerControl/repo/fedora-$(rpm -E %fedora)/codifryed-CoolerControl-fedora-$(rpm -E %fedora).repo -O /etc/yum.repos.d/_copr_codifryed-CoolerControl.repo
     rpm-ostree install --apply-live -y liquidctl coolercontrol
     systemctl enable coolercontrold.service
     mkdir -p $HOME/.config/autostart
@@ -47,13 +47,13 @@ install-steamcmd:
 
 # Install OpenRazer for Razer gaming hardware
 install-openrazer:
-    sudo wget https://download.opensuse.org/repositories/hardware:/razer/Fedora_$(rpm -E %fedora)/hardware:razer.repo -O /etc/yum.repos.d/hardware:razer.repo && \
+    pkexec wget https://download.opensuse.org/repositories/hardware:/razer/Fedora_$(rpm -E %fedora)/hardware:razer.repo -O /etc/yum.repos.d/hardware:razer.repo && \
     ublue-update --wait && \
     rpm-ostree install -y openrazer-meta razergenie && \
     if ! grep -q "plugdev" /etc/group; then \
-      sudo bash -c 'grep "plugdev" /lib/group >> /etc/group' \
+      pkexec bash -c 'grep "plugdev" /lib/group >> /etc/group' \
     ; fi && \
-    sudo usermod -a -G plugdev $USER && \
+    pkexec usermod -a -G plugdev $USER && \
     echo "Please reboot to apply needed changes."
 
 # Install EmuDeck (https://www.emudeck.com/)
@@ -91,7 +91,7 @@ install-openrgb:
 # Install Boxtron, a Steam Play compatibility tool to run DOS games using native Linux DOSBox
 install-boxtron: distrobox-check-fedora
     distrobox enter -n fedora -- bash -c '\
-      sudo dnf install dosbox-staging inotify-tools timidity++ fluid-soundfont-gm -y && \
+      pkexec dnf install dosbox-staging inotify-tools timidity++ fluid-soundfont-gm -y && \
       cd ~/.steam/root/compatibilitytools.d/ && \
       curl -L https://github.com/dreamer/boxtron/releases/download/v0.5.4/boxtron.tar.xz | tar xJf - && \
       distrobox-export --bin /usr/bin/dosbox'
@@ -121,15 +121,15 @@ install-adwaita-for-steam:
 
 # Install Oversteer for Logitech steering wheels
 install-oversteer: distrobox-check-fedora
-    distrobox enter -n fedora -- bash -c 'sudo dnf copr enable -y kylegospo/oversteer && \
-      sudo dnf install -y oversteer && \
+    distrobox enter -n fedora -- bash -c 'pkexec dnf copr enable -y kylegospo/oversteer && \
+      pkexec dnf install -y oversteer && \
       distrobox-export --app oversteer'
 
 # Install Resilio Sync, a file synchronization utility powered by BitTorrent
 install-resilio-sync: distrobox-check-fedora
-    distrobox-enter -n fedora -- bash -c 'sudo rpm --import https://linux-packages.resilio.com/resilio-sync/key.asc' && \
-    distrobox-enter -n fedora -- bash -c 'sudo wget https://raw.githubusercontent.com/ublue-os/bazzite/main/post_install_files/resilio_sync/resilio-sync.repo -O /etc/yum.repos.d/resilio-sync.repo' && \
-    distrobox-enter -n fedora -- bash -c 'sudo dnf install -y resilio-sync' && \
+    distrobox-enter -n fedora -- bash -c 'pkexec rpm --import https://linux-packages.resilio.com/resilio-sync/key.asc' && \
+    distrobox-enter -n fedora -- bash -c 'pkexec wget https://raw.githubusercontent.com/ublue-os/bazzite/main/post_install_files/resilio_sync/resilio-sync.repo -O /etc/yum.repos.d/resilio-sync.repo' && \
+    distrobox-enter -n fedora -- bash -c 'pkexec dnf install -y resilio-sync' && \
     mkdir -p ~/.config/systemd/user/ && \
     rm -f ~/.config/systemd/user/fedora-resilio-sync.service && \
     wget https://raw.githubusercontent.com/ublue-os/bazzite/main/post_install_files/resilio_sync/fedora-resilio-sync.service -O ~/.config/systemd/user/fedora-resilio-sync.service && \
@@ -138,8 +138,8 @@ install-resilio-sync: distrobox-check-fedora
 
 # Install scrcpy, a utility that mirrors Android devices (video and audio) connected via USB or over TCP/IP
 install-scrcpy: distrobox-check-fedora
-    distrobox enter -n fedora -- bash -c 'sudo dnf copr enable -y zeno/scrcpy && \
-      sudo dnf install -y scrcpy && \
+    distrobox enter -n fedora -- bash -c 'pkexec dnf copr enable -y zeno/scrcpy && \
+      pkexec dnf install -y scrcpy && \
       distrobox-export --app scrcpy'
 
 # Install OpenTabletDriver, an open source, cross-platform, user-mode tablet driver

system_files/desktop/shared/usr/share/ublue-os/just/82-bazzite-rmlint.just

@@ -29,7 +29,7 @@ enable-rmlint ACTION="":
       fi
       ublue-update --wait
       rpm-ostree install --apply-live -y rmlint
-      sudo sed -i 's@RMLINT_SKIP="1"@RMLINT_SKIP="0"@g' /etc/conf.d/btrfs-dedup
+      pkexec sed -i 's@RMLINT_SKIP="1"@RMLINT_SKIP="0"@g' /etc/conf.d/btrfs-dedup
       echo "rmlint has been reenabled!"
     elif [[ "${OPTION,,}" =~ ^(disable|uninstall) ]]; then
       if [[ "${RMLINT_STATE,,}" =~ "^not" ]]; then
@@ -38,6 +38,6 @@ enable-rmlint ACTION="":
       fi
       ublue-update --wait
       rpm-ostree remove -y rmlint
-      sudo sed -i 's@RMLINT_SKIP="0"@RMLINT_SKIP="1"@g' /etc/conf.d/btrfs-dedup
+      pkexec sed -i 's@RMLINT_SKIP="0"@RMLINT_SKIP="1"@g' /etc/conf.d/btrfs-dedup
       echo "rmlint has been disabled."
     fi

system_files/desktop/shared/usr/share/ublue-os/just/82-bazzite-waydroid.just

@@ -25,24 +25,24 @@ setup-waydroid ACTION="":
     fi
     if [[ "${OPTION,,}" =~ ^init ]]; then
       if [[ ! $IMAGE_NAME =~ "deck" && ! $IMAGE_NAME =~ "ally" ]]; then
-        sudo systemctl enable --now waydroid-container
+        pkexec systemctl enable --now waydroid-container
       fi
-      sudo waydroid init -c 'https://ota.waydro.id/system' -v 'https://ota.waydro.id/vendor'
+      pkexec waydroid init -c 'https://ota.waydro.id/system' -v 'https://ota.waydro.id/vendor'
       echo "Waydroid has been initialized, please run waydroid once before you Configure Waydroid"
     elif [[ "${OPTION,,}" =~ ^configure ]]; then
       git clone https://github.com/ublue-os/waydroid_script.git --depth 1 /tmp/waydroid_script
       python -m venv /tmp/waydroid_script/venv
       source /tmp/waydroid_script/venv/bin/activate
-      sudo pip install -r /tmp/waydroid_script/requirements.txt
-      sudo /tmp/waydroid_script/main.py
+      pkexec pip install -r /tmp/waydroid_script/requirements.txt
+      pkexec /tmp/waydroid_script/main.py
       deactivate
-      sudo rm -rf /tmp/waydroid_script
+      pkexec rm -rf /tmp/waydroid_script
     elif [[ "${OPTION,,}" =~ gpu ]]; then
-      sudo /usr/bin/waydroid-choose-gpu
+      pkexec /usr/bin/waydroid-choose-gpu
     elif [[ "${OPTION,,}" =~ integration ]]; then
       waydroid prop set persist.waydroid.multi_windows true
     elif [[ "${OPTION,,}" =~ ^reset ]]; then
       echo "Resetting Waydroid"
-      bash -c 'sudo rm -rf /var/lib/waydroid /home/.waydroid ~/waydroid ~/.share/waydroid ~/.local/share/applications/*aydroid* ~/.local/share/waydroid'
+      bash -c 'pkexec rm -rf /var/lib/waydroid /home/.waydroid ~/waydroid ~/.share/waydroid ~/.local/share/applications/*aydroid* ~/.local/share/waydroid'
       echo "Waydroid has been reset"
     fi

system_files/desktop/shared/usr/share/ublue-os/just/84-bazzite-virt.just

@@ -13,7 +13,7 @@ setup-virtualization ACTION="":
       echo "${b}libvirtd${n} service is ${red}disabled${n}!"
       echo "${green}enabling${n} and starting libvirtd"
       echo "If virt-manager says libvirtd.sock is not available after a big update, re-run this command."
-      sudo systemctl enable --now libvirtd 2> /dev/null
+      pkexec systemctl enable --now libvirtd 2> /dev/null
       echo "Press ESC if you want to exit and do not need to do anything"
     fi
     OPTION={{ ACTION }}
@@ -47,18 +47,18 @@ setup-virtualization ACTION="":
           rpm-ostree kargs \
           --append-if-missing="kvm.ignore_msrs=1" \
           --append-if-missing="kvm.report_ignored_msrs=0"
-          sudo systemctl enable bazzite-libvirtd-setup.service \
+          pkexec systemctl enable bazzite-libvirtd-setup.service \
             && echo "libvirtd will be enabled at next reboot"
           echo 'Please reboot to apply changes'
         fi
     elif [[ "${OPTION,,}" =~ (^disable[[:space:]]virtualization|virt-off) ]]; then
       if [ "$(systemctl is-enabled libvirtd.service)" == "enabled" ]; then
         echo "${red}Disabling${n} libvirtd before removal"
-        sudo systemctl disable --now libvirtd 2> /dev/null
+        pkexec systemctl disable --now libvirtd 2> /dev/null
       fi
       if [ "$(systemctl is-enabled bazzite-libvirtd-setup.service)" == "enabled" ]; then
         echo "${red}Disabling${n} bazzite-libvirtd-setup"
-        sudo systemctl disable --now bazzite-libvirtd-setup.service 2> /dev/null
+        pkexec systemctl disable --now bazzite-libvirtd-setup.service 2> /dev/null
       fi
       echo "Removing QEMU and virt-manager..."
       rpm-ostree remove -y virt-manager edk2-ovmf qemu
@@ -77,7 +77,7 @@ setup-virtualization ACTION="":
       CPU_VENDOR=$(grep "vendor_id" "/proc/cpuinfo" | uniq | awk -F": " '{ print $2 }')
       VENDOR_KARG="unset"
       if [[ ${VIRT_TEST} == *kvm.report_ignored_msrs* ]]; then
-        echo 'add_drivers+=" vfio vfio_iommu_type1 vfio-pci "' | sudo tee /etc/dracut.conf.d/vfio.conf
+        echo 'add_drivers+=" vfio vfio_iommu_type1 vfio-pci "' | pkexec tee /etc/dracut.conf.d/vfio.conf
         rpm-ostree initramfs --enable
         if [[ ${CPU_VENDOR} == "AuthenticAMD" ]]; then
           VENDOR_KARG="amd_iommu=on"
@@ -119,7 +119,7 @@ setup-virtualization ACTION="":
           VFIO_IDS_KARG="--delete-if-present=\"$VFIO_IDS\""
         fi
         echo "Removing dracut modules"
-        sudo rm /etc/dracut.conf.d/vfio.conf
+        pkexec rm /etc/dracut.conf.d/vfio.conf
         rpm-ostree initramfs --enable
         rpm-ostree kargs \
         --delete-if-present="iommu=pt" \
@@ -150,18 +150,18 @@ setup-virtualization ACTION="":
       fi
       echo ""
       echo "Setting up kvmfr module so it loads next boot"
-      sudo bash -c 'cat << KVMFR_DRACUT > /etc/dracut.conf.d/kvmfr.conf
+      pkexec bash -c 'cat << KVMFR_DRACUT > /etc/dracut.conf.d/kvmfr.conf
     install_items+=" /etc/modprobe.d/kvmfr.conf "
     KVMFR_DRACUT'
-      sudo bash -c "cat << KVMFR_MODPROBE > /etc/modprobe.d/kvmfr.conf
+      pkexec bash -c "cat << KVMFR_MODPROBE > /etc/modprobe.d/kvmfr.conf
     options kvmfr static_size_mb=128
     KVMFR_MODPROBE"
       echo "Adding udev rule for /dev/kvmfr0"
-      sudo bash -c 'cat << KVMFR_UDEV > /etc/udev/rules.d/99-kvmfr.rules
+      pkexec bash -c 'cat << KVMFR_UDEV > /etc/udev/rules.d/99-kvmfr.rules
     SUBSYSTEM=="kvmfr", OWNER="'$USER'", GROUP="qemu", MODE="0660"
     KVMFR_UDEV'
       echo "Adding /dev/kvmfr0 to qemu cgroup_device_acl"
-      sudo perl -0777 -pi -e 's/
+      pkexec perl -0777 -pi -e 's/
     #cgroup_device_acl = \[
     #    "\/dev\/null", "\/dev\/full", "\/dev\/zero",
     #    "\/dev\/random", "\/dev\/urandom",
@@ -177,7 +177,7 @@ setup-virtualization ACTION="":
     \]
     /' /etc/libvirt/qemu.conf
       echo "Adding SELinux context record for /dev/kvmfr0"
-      sudo semanage fcontext -a -t svirt_tmpfs_t /dev/kvmfr0
+      pkexec semanage fcontext -a -t svirt_tmpfs_t /dev/kvmfr0
       echo "Adding SELinux access rules for /dev/kvmfr0"
       if [ ! -d "$HOME/.config/selinux_te/mod" ]; then
         mkdir -p "$HOME/.config/selinux_te/mod"
@@ -203,10 +203,10 @@ setup-virtualization ACTION="":
       echo "#======== end of kvmfr.te ========"
       checkmodule -M -m -o "$HOME/.config/selinux_te/mod/kvmfr.mod" "$HOME/.config/selinux_te/kvmfr.te"
       semodule_package -o "$HOME/.config/selinux_te/pp/kvmfr.pp" -m "$HOME/.config/selinux_te/mod/kvmfr.mod"
-      sudo semodule -i "$HOME/.config/selinux_te/pp/kvmfr.pp"
+      pkexec semodule -i "$HOME/.config/selinux_te/pp/kvmfr.pp"
       echo "Loading kvmfr module so you do not have to reboot to use it the first time"
-      sudo modprobe kvmfr static_size_mb=128
-      sudo chown $USER:qemu /dev/kvmfr0
+      pkexec modprobe kvmfr static_size_mb=128
+      pkexec chown $USER:qemu /dev/kvmfr0
       echo ""
       echo "Kvmfr0 $(Urllink "https://looking-glass.io/docs/B7-rc1/install_libvirt/#determining-memory" "static size is set to 128mb by default")"
       echo "this will work with up to 4K SDR resolutiion, as most dummy plugs go up to 4K"
@@ -224,7 +224,7 @@ setup-virtualization ACTION="":
       rpm-ostree initramfs --enable
     elif [[ "${OPTION,,}" =~ group ]]; then
       if ! grep -q "^libvirt" /etc/group; then
-        grep '^libvirt' /usr/lib/group | sudo tee -a /etc/group > /dev/null
+        grep '^libvirt' /usr/lib/group | pkexec tee -a /etc/group > /dev/null
       fi
-      sudo usermod -aG libvirt $USER
+      pkexec usermod -aG libvirt $USER
     fi