From 4905d10bc0ce43f4fba49480d8a77075567047f9 Mon Sep 17 00:00:00 2001
From: Sandwich <sandwich@archworks.co>
Date: Thu, 19 Feb 2026 11:26:27 +0100
Subject: [PATCH] fix(cloud-init): handle boolean sudo values in user-data
 template

---
 roles/virtualization/templates/cloud-user-data.yml.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/virtualization/templates/cloud-user-data.yml.j2 b/roles/virtualization/templates/cloud-user-data.yml.j2
index 5f36461..343ec57 100644
--- a/roles/virtualization/templates/cloud-user-data.yml.j2
+++ b/roles/virtualization/templates/cloud-user-data.yml.j2
@@ -8,7 +8,7 @@ users:
   - name: "{{ user.name }}"
     primary_group: "{{ user.name }}"
     groups: users
-    sudo: "{{ user.sudo | default('ALL=(ALL) NOPASSWD:ALL') }}"
+    sudo: "{{ 'ALL=(ALL) NOPASSWD:ALL' if (user.sudo is defined and user.sudo is sameas true) else user.sudo | default('ALL=(ALL) NOPASSWD:ALL') }}"
     passwd: "{{ user.password | password_hash('sha512') }}"
     lock_passwd: false
 {% set ssh_keys = user['keys'] | default([]) %}