Fix tao_bench sudo on CentOS 9/10

CentOS stream9/10 containers run as root but with root locked until
the workflow enables sudo — prior install script called sudo dnf/ln/rm
unconditionally, failing with account validation failure. Reuse the
proven video_transcode/wdl pattern: probe sudo -n and fall back to
bare dnf when sudo is not yet usable (SUDO="").

Test Plan:
- bash -n packages/tao_bench/install_tao_bench*.sh

Author: Ahmad El Youssef

packages/tao_bench/install_tao_bench_aarch64.sh

@@ -48,16 +48,30 @@ else
     echo "Warning: unsupported platform ${LINUX_DIST_ID}-${LINUX_DIST_ID}"
 fi
 
+# CentOS containers run as root but with root locked and no sudo PAM
+# setup until the workflow adds it — `sudo` fails there with
+# "account validation failure, is your account locked?" on dnf installs.
+SUDO=""
 if distro_is_like centos; then
-  sudo dnf install -y cmake iperf3 autoconf automake \
+  if sudo -n true 2>/dev/null; then
+    SUDO="sudo"
+  else
+    SUDO=""
+  fi
+elif distro_is_like ubuntu; then
+  SUDO="sudo"
+fi
+
+if distro_is_like centos; then
+  ${SUDO} dnf install -y cmake iperf3 autoconf automake \
     libevent-devel openssl openssl-devel \
     zlib-devel bzip2-devel xz-devel lz4-devel libzstd-devel \
     snappy-devel libaio-devel libunwind-devel patch \
     double-conversion-devel libsodium-devel \
     gflags-devel-2.2.2 fmt-devel perl libtool ${PCRE_NAME} \
     git python3-devel binutils binutils-devel ${GLOG_NAME}
 elif distro_is_like ubuntu; then
-  sudo apt install -y cmake iperf3 autoconf automake flex bison \
+  ${SUDO} apt install -y cmake iperf3 autoconf automake flex bison \
     libevent-dev openssl libssl-dev \
     libzstd-dev lz4 liblz4-dev xzip libsnappy-dev zlib1g-dev bzip2 \
     libaio-dev libunwind-dev patch libghc-double-conversion-dev \
@@ -73,7 +87,7 @@ mkdir -p "${TAO_BENCH_DEPS}"
 pushd "${TAO_BENCH_ROOT}"
 
 if ! [ -f "/usr/local/bin/cmake" ]; then
-    sudo ln -s /usr/bin/cmake /usr/local/bin/cmake
+    ${SUDO} ln -s /usr/bin/cmake /usr/local/bin/cmake
 fi
 
 # Install openssl
@@ -173,10 +187,10 @@ fi
 
 # Build and install
 if ! [ -f "/usr/bin/aclocal-1.16" ]; then
-    sudo ln -s /usr/bin/aclocal /usr/bin/aclocal-1.16
+    ${SUDO} ln -s /usr/bin/aclocal /usr/bin/aclocal-1.16
 fi
 if ! [ -f "/usr/bin/automake-1.16" ]; then
-    sudo ln -s /usr/bin/automake /usr/bin/automake-1.16
+    ${SUDO} ln -s /usr/bin/automake /usr/bin/automake-1.16
 fi
 
 ./configure --with-folly="${FOLLY_INSTALLED_PATH}" --with-fmt="${FMT_INSTALLED_PATH}" \
@@ -185,10 +199,10 @@ fi
 make -j"$(nproc)"
 
 if [ -L /usr/bin/aclocal-1.16 ]; then
-    sudo rm -f /usr/bin/aclocal-1.16
+    ${SUDO} rm -f /usr/bin/aclocal-1.16
 fi
 if [ -L /usr/bin/automake-1.16 ]; then
-    sudo rm -f /usr/bin/automake-1.16
+    ${SUDO} rm -f /usr/bin/automake-1.16
 fi
 
 cp memcached "${TAO_BENCH_ROOT}/tao_bench_server"

packages/tao_bench/install_tao_bench_x86_64.sh

@@ -45,16 +45,30 @@ else
     echo "Warning: unsupported platform ${LINUX_DIST_ID}-${LINUX_DIST_ID}"
 fi
 
+# CentOS containers run as root but with root locked and no sudo PAM
+# setup until the workflow adds it — `sudo` fails there with
+# "account validation failure, is your account locked?" on dnf installs.
+SUDO=""
 if [ "$LINUX_DIST_ID" = "ubuntu" ]; then
-  sudo apt install -y cmake iperf3 autoconf automake flex bison \
+  SUDO="sudo"
+elif [ "$LINUX_DIST_ID" = "centos" ]; then
+  if sudo -n true 2>/dev/null; then
+    SUDO="sudo"
+  else
+    SUDO=""
+  fi
+fi
+
+if [ "$LINUX_DIST_ID" = "ubuntu" ]; then
+  ${SUDO} apt install -y cmake iperf3 autoconf automake flex bison \
     libevent-dev openssl libssl-dev \
     libzstd-dev lz4 liblz4-dev xzip libsnappy-dev zlib1g-dev bzip2 \
     libaio-dev libunwind-dev patch libghc-double-conversion-dev \
     libsodium-dev  libfmt-dev libtool perl git \
     libgoogle-glog-dev python3-dev pkg-config \
     git libpcre3 libpcre3-dev libgflags2.2 libgflags-dev
 elif [ "$LINUX_DIST_ID" = "centos" ]; then
-  sudo dnf install -y cmake iperf3 autoconf automake \
+  ${SUDO} dnf install -y cmake iperf3 autoconf automake \
     libevent-devel openssl openssl-devel \
     zlib-devel bzip2-devel xz-devel lz4-devel libzstd-devel \
     snappy-devel libaio-devel libunwind-devel patch \
@@ -68,7 +82,7 @@ mkdir -p "${TAO_BENCH_DEPS}"
 pushd "${TAO_BENCH_ROOT}"
 
 if ! [ -f "/usr/local/bin/cmake" ]; then
-    sudo ln -s /usr/bin/cmake /usr/local/bin/cmake
+    ${SUDO} ln -s /usr/bin/cmake /usr/local/bin/cmake
 fi
 
 # Install openssl
@@ -171,10 +185,10 @@ fi
 
 # Build and install
 if ! [ -f "/usr/bin/aclocal-1.16" ]; then
-    sudo ln -s /usr/bin/aclocal /usr/bin/aclocal-1.16
+    ${SUDO} ln -s /usr/bin/aclocal /usr/bin/aclocal-1.16
 fi
 if ! [ -f "/usr/bin/automake-1.16" ]; then
-    sudo ln -s /usr/bin/automake /usr/bin/automake-1.16
+    ${SUDO} ln -s /usr/bin/automake /usr/bin/automake-1.16
 fi
 
 ./configure --with-folly="${FOLLY_INSTALLED_PATH}" --with-fmt="${FMT_INSTALLED_PATH}" \
@@ -183,10 +197,10 @@ fi
 make -j"$(nproc)"
 
 if [ -L /usr/bin/aclocal-1.16 ]; then
-    sudo rm -f /usr/bin/aclocal-1.16
+    ${SUDO} rm -f /usr/bin/aclocal-1.16
 fi
 if [ -L /usr/bin/automake-1.16 ]; then
-    sudo rm -f /usr/bin/automake-1.16
+    ${SUDO} rm -f /usr/bin/automake-1.16
 fi
 
 cp memcached "${TAO_BENCH_ROOT}/tao_bench_server"