pkexec around sbctl for out-of-the-box sudo-only operation

.github/build-nest-v3

@@ -1 +1 @@
-13
+20

.github/workflows/build-nestv3.yml

@@ -36,7 +36,8 @@ jobs:
     - name: Build Package
       run: ./main.sh
 
-    #- uses: actions/upload-artifact@v3
-    #  with:
-    #    name: sbctl
-    #    path: output/sbctl*.deb
+    - uses: actions/upload-artifact@v3
+      with:
+        name: sbctl-all
+        path: |
+          output/sbctl*.deb

debian/rules

@@ -51,6 +51,10 @@ export PIKA_BUILD_ARCH = $(shell cat ../pika-build-arch)
 #override_dh_clean:
 #	echo "disabled"
 
+override_dh_auto_install:
+	dh_auto_install
+	install -Dm755 debian/sbctl-pkexec debian/sbctl/usr/bin/sbctl-pkexec
+
 override_dh_usrlocal:
 	echo "disabled"
 

debian/sbctl-pkexec

@@ -0,0 +1,3 @@
+#!/bin/sh
+
+pkexec "/usr/sbin/sbctl" "$@"

main.sh

@@ -17,6 +17,7 @@ cp -rvf ./debian ./${UPSTREAM_NAME}/
 
 # easier than figuring out the right way to override the prefix in the makefile
 sed -i "s/usr\/local/usr/" "${UPSTREAM_NAME}/Makefile"
+sed -i "s/\$(PREFIX)\/bin/\$(PREFIX)\/sbin/" "${UPSTREAM_NAME}/Makefile"
 
 # Get in there.
 pushd "./${UPSTREAM_NAME}/" || exit 1