pkexec around sbctl for out-of-the-box sudo-only operation

.github/build-nest-v3

@@ -1 +1 @@
-13
+21

.github/workflows/build-nestv3.yml

@@ -38,5 +38,6 @@ jobs:
 
     #- uses: actions/upload-artifact@v3
     #  with:
-    #    name: sbctl
-    #    path: output/sbctl*.deb
+    #    name: sbctl-all
+    #    path: |
+    #      output/sbctl*.deb

debian/rules

@@ -51,6 +51,10 @@ export PIKA_BUILD_ARCH = $(shell cat ../pika-build-arch)
 #override_dh_clean:
 #	echo "disabled"
 
+override_dh_auto_install:
+	dh_auto_install
+	install -Dm755 debian/sbctl-pkexec debian/sbctl/usr/bin/sbctl-pkexec
+
 override_dh_usrlocal:
 	echo "disabled"
 

debian/sbctl-pkexec

@@ -0,0 +1,3 @@
+#!/bin/sh
+
+pkexec "/usr/sbin/sbctl" "$@"

main.sh

@@ -17,6 +17,7 @@ cp -rvf ./debian ./${UPSTREAM_NAME}/
 
 # easier than figuring out the right way to override the prefix in the makefile
 sed -i "s/usr\/local/usr/" "${UPSTREAM_NAME}/Makefile"
+sed -i "s/\$(PREFIX)\/bin/\$(PREFIX)\/sbin/" "${UPSTREAM_NAME}/Makefile"
 
 # Get in there.
 pushd "./${UPSTREAM_NAME}/" || exit 1