Re: FAI (root password change on errors)

Matteo Guglielmi <[email protected]>
Newsgroups gmane.linux.debian.fai
Message-ID <[email protected]>
No,


not that.


I've configured FAI to stop (no reboot of the install client)

and fire up a login shell if any of the scripts fails with:



STOP_ON_ERROR=419 # we stop if any of the scripts fails



So,


when FAI stops because of any error in the scripts, FAI starts

a login shell (tty console) on the install client and the root

password of FAI itself (nfsroot+overlayfs) is changed.



In other words,


as long as FAI does not stop because of errors I can ssh remotely

into the install client using the password defined in ROOTPW.. but

when it stops, the root password is changed to something else and

I cannot ssh remotely anymore.



Only if I change the pass on the install client using the tty the

FAI started I can login from remote again.



________________________________
From: linux-fai <[email protected]> on behalf of Thomas Lange <[email protected]>
Sent: Thursday, June 18, 2020 11:49:22 AM
To: fully automatic installation for Linux
Subject: Re: FAI (root password change on errors)

>>>>> On Wed, 17 Jun 2020 08:37:19 +0000, Matteo Guglielmi <[email protected]> said:

    > While a client is being installed (FAI_FLAGS=verbose,sshd,reboot FAI_ACTION=install), I can ssh into it as 'root' with the password defined in
    > /etc/fai/nfsroot.conf (FAI_ROOTPW variable) but when FAI stops and bails out due to some error, FAI sends all the logs back to the install
    > server and then does(?) something else (see second section) which includes changing the root password... am I correct?
You mean the root pw on the server is schanged?
No. The install client calls fai-chboot on the server, which disables
the PXE config, so the next time the client boots from local
disk.

The script scripts/DEBIAN/10-rootpw set the root pw on the install
client via $ROOTPW which is defined in

class/FAIBASE.var: ROOTPW='$1$kBnWcO.E$djxB128U7dMkrltJHPf6d1'

--
regards Thomas
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.