Set up users

Set a root password for recovery:

passwd

Create your regular account, replacing yourusername:

useradd -m -G wheel -s /bin/bash yourusername
passwd yourusername

Desktop sessions receive device access through logind. Do not add broad device-access groups such as input, disk or video by default. See Users and groups.

Give the wheel group administrative access using the validated sudo editor:

EDITOR=nano visudo

Uncomment this rule:

%wheel ALL=(ALL:ALL) ALL