Answer by Valerio Bozz for Execute sudo without Password?

SECURITY CONSIDERATIONS: I agree there are some cases where an user with a password has little sense, and may also decrease security. For example, if you have a shared computer with dedicated admin accounts (trusted skilled coworkers, whatever) that access only via SSH keys: you already have military-level security, so, having an extra password may be not necessary, and it causes to have another secret to be kept secret. Do your evaluations. But in that case, or similar ones...

Avoid to allow-list a single User

In any case, it's not ideal to allow-list every specific user in the sudoers configuration. It's very probably better to rely on groups instead.

For example, you can have a group "to sudo without a password". And every user in that group is allowed to do so.

A group would dramatically simplify auditing, in my opinion.

Also, with a group, you can use standard tools to manage users. This dramatically decrease human mistakes. With a group, there are less risks to break your critical sudo system.

In short, first, create a group.

Option 1: create a group "Wheel"

Some distributions adopt a dedicated group called wheel. Users in that group do not need a sudo password. To continue this tradition:

Create the wheel group (if it does not already exist):

sudo addgroup wheel

Then, edit your sudo configuration, to make that group special.

(you need to know how to edit a file from the terminal with vi or a similar editor)

sudo visudo

Add this line:

# Members of the wheel group can execute sudo without password%wheel ALL=(ALL) NOPASSWD:ALL

Done!

Then, you can assign yourself or any other user in the wheel group, and that is all, to have no password for sudo:

sudo usermod -aG daisy wheelsudo usermod -aG mario wheelsudo usermod -aG peach wheelsudo usermod -aG luigi wheelsudo usermod -aG roby  wheel

So you can use standard User permissions to manage this, to revoke this in any moment.

Option 2: "Just change sudo"

Instead of creating a wheel group, that may be overkill for you, you can allow all your sudo users to always have no password. To do so, edit your sudo configuration:

sudo visudo

Then, identify this line (or similar):

%sudo ALL=(ALL:ALL) ALL

And replace that line with this one (or similar):

%sudo ALL=(ALL) NOPASSWD:ALL

Anyway, you can get lot of extra information in the official documentation:

https://manpages.ubuntu.com/manpages/noble/en/man5/sudoers.5.html