make a lot more idempotent, remove sudo calls, not necessary