Latest brew install needs extended sudo rights

.kitchen.yml

@@ -18,4 +18,4 @@ platforms:
 
 suites:
   - name: default
-    run_list: test::default
+    run_list: test::default

.rubocop.yml

@@ -0,0 +1,7 @@
+AllCops:
+  Exclude:
+    - .kitchen/*
+    - vendor/**/*
+
+LineLength:
+  Max: 120

attributes/default.rb

@@ -27,3 +27,6 @@
 default['homebrew']['installer']['url'] = 'https://raw.githubusercontent.com/Homebrew/install/master/install'
 default['homebrew']['installer']['checksum'] = nil
 default['homebrew']['enable-analytics'] = true
+default['homebrew']['sudo']['commands'] =
+  %w( /bin/chmod /usr/sbin/chown /bin/mkdir /usr/bin/chgrp /usr/bin/touch
+      /usr/sbin/softwareupdate /bin/rm /usr/bin/xcode-select )

recipes/default.rb

@@ -30,11 +30,34 @@
   not_if { ::File.exist? '/usr/local/bin/brew' }
 end
 
-execute 'install homebrew' do
-  command homebrew_go
-  environment lazy { { 'HOME' => ::Dir.home(homebrew_owner), 'USER' => homebrew_owner } }
-  user homebrew_owner
-  not_if { ::File.exist? '/usr/local/bin/brew' }
+directory '/etc/sudoers.d' do
+  mode '00644'
+  owner 'root'
+  group 'wheel'
+  action :create
+end
+
+begin
+  template '/etc/sudoers.d/homebrew' do
+    source 'homebrew_sudo.erb'
+    variables(lazy { { 'user' => homebrew_owner, 'hostname' => node['hostname'], 'commands' => node['homebrew']['sudo']['commands'] } })
+    action :create
+    mode '00644'
+    user 'root'
+    group 'wheel'
+    not_if { (::File.exist? '/usr/local/bin/brew') || node['homebrew']['sudo']['commands'].empty? }
+  end
+
+  execute 'install homebrew' do
+    command "#{homebrew_go} < /dev/null"
+    environment lazy { { 'HOME' => ::Dir.home(homebrew_owner), 'USER' => homebrew_owner } }
+    user homebrew_owner
+    not_if { ::File.exist? '/usr/local/bin/brew' }
+  end
+ensure
+  file '/etc/sudoers.d/homebrew' do
+    action :delete
+  end
 end
 
 execute 'set analytics' do

templates/default/homebrew_sudo.erb

@@ -0,0 +1,3 @@
+<% @commands.each do |command| %>
+<%= @user %> <%= @hostname %>=(root) NOPASSWD: <%= command %>
+<% end %>

test/cookbooks/test/recipes/default.rb

@@ -13,3 +13,7 @@
 include_recipe 'homebrew::install_formulas'
 include_recipe 'homebrew::install_casks'
 include_recipe 'homebrew::install_taps'
+
+package 'cmake' do
+  action :install
+end