diff --git a/docs/lorax-composer.rst b/docs/lorax-composer.rst index bc7442b8..c2f1a94b 100644 --- a/docs/lorax-composer.rst +++ b/docs/lorax-composer.rst @@ -25,6 +25,11 @@ Important Things To Note for information on how to enable it. Otherwise you will see image creation fail to depsolve even if the blueprint itself is correct. +* All image types lock the root account, except for live-iso. You will need to either + use one of the `Customizations`_ methods for setting a ssh key/password, install a + package that creates a user, or use something like `cloud-init` to setup access at + boot time. + Installation ------------ diff --git a/share/composer/ext4-filesystem.ks b/share/composer/ext4-filesystem.ks index 889b8a0d..5c5be642 100644 --- a/share/composer/ext4-filesystem.ks +++ b/share/composer/ext4-filesystem.ks @@ -1,16 +1,11 @@ # Lorax Composer filesystem output kickstart template -# -sshpw --username=root --plaintext randOmStrinGhERE # Firewall configuration firewall --enabled -# Root password -rootpw --plaintext removethispw +# NOTE: The root account is locked by default # Network information network --bootproto=dhcp --onboot=on --activate -# System authorization information -auth --useshadow --enablemd5 # System keyboard keyboard --xlayouts=us --vckeymap=us # System language @@ -27,13 +22,10 @@ timezone US/Eastern bootloader --location=none %post -# Remove root password -passwd -d root > /dev/null - # Remove random-seed rm /var/lib/systemd/random-seed %end %packages --nobase -# NOTE lorax-composer will add the recipe packages below here, including the final %end +# NOTE lorax-composer will add the blueprint packages below here, including the final %end diff --git a/share/composer/live-iso.ks b/share/composer/live-iso.ks index cf49d6cf..2f769987 100644 --- a/share/composer/live-iso.ks +++ b/share/composer/live-iso.ks @@ -1,18 +1,14 @@ # Lorax Composer Live ISO output kickstart template -# -sshpw --username=root --plaintext randOmStrinGhERE # Firewall configuration firewall --enabled --service=mdns # X Window System configuration information xconfig --startxonboot -# Root password +# Root password is removed for live-iso rootpw --plaintext removethispw # Network information network --bootproto=dhcp --onboot=on --activate -# System authorization information -auth --useshadow --enablemd5 # System keyboard keyboard --xlayouts=us --vckeymap=us # System language @@ -362,4 +358,4 @@ grub2-efi-ia32 efibootmgr -# NOTE lorax-composer will add the recipe packages below here, including the final %end%packages +# NOTE lorax-composer will add the blueprint packages below here, including the final %end%packages diff --git a/share/composer/partitioned-disk.ks b/share/composer/partitioned-disk.ks index 77f4f4b3..291e54a7 100644 --- a/share/composer/partitioned-disk.ks +++ b/share/composer/partitioned-disk.ks @@ -1,16 +1,11 @@ # Lorax Composer partitioned disk output kickstart template -# -sshpw --username=root --plaintext randOmStrinGhERE # Firewall configuration firewall --enabled -# Root password -rootpw --plaintext removethispw +# NOTE: The root account is locked by default # Network information network --bootproto=dhcp --onboot=on --activate -# System authorization information -auth --useshadow --enablemd5 # System keyboard keyboard --xlayouts=us --vckeymap=us # System language @@ -29,9 +24,6 @@ bootloader --location=mbr zerombr %post -# Remove root password -passwd -d root > /dev/null - # Remove random-seed rm /var/lib/systemd/random-seed %end @@ -42,4 +34,4 @@ kernel grub2 -# NOTE lorax-composer will add the recipe packages below here, including the final %end +# NOTE lorax-composer will add the blueprint packages below here, including the final %end diff --git a/share/composer/qcow2.ks b/share/composer/qcow2.ks index 69bf49bc..02bc0b73 100644 --- a/share/composer/qcow2.ks +++ b/share/composer/qcow2.ks @@ -1,16 +1,11 @@ # Lorax Composer qcow2 output kickstart template -# -sshpw --username=root --plaintext randOmStrinGhERE # Firewall configuration firewall --enabled -# Root password -rootpw --plaintext removethispw +# NOTE: The root account is locked by default # Network information network --bootproto=dhcp --onboot=on --activate -# System authorization information -auth --useshadow --enablemd5 # System keyboard keyboard --xlayouts=us --vckeymap=us # System language @@ -29,9 +24,6 @@ bootloader --location=mbr zerombr %post -# Remove root password -passwd -d root > /dev/null - # Remove random-seed rm /var/lib/systemd/random-seed %end @@ -41,4 +33,4 @@ kernel -dracut-config-rescue grub2 -# NOTE lorax-composer will add the recipe packages below here, including the final %end +# NOTE lorax-composer will add the blueprint packages below here, including the final %end diff --git a/share/composer/tar.ks b/share/composer/tar.ks index 4d98922d..285b50a7 100644 --- a/share/composer/tar.ks +++ b/share/composer/tar.ks @@ -1,16 +1,11 @@ # Lorax Composer tar output kickstart template -# -sshpw --username=root --plaintext randOmStrinGhERE # Firewall configuration firewall --enabled -# Root password -rootpw --plaintext removethispw +# NOTE: The root account is locked by default # Network information network --bootproto=dhcp --onboot=on --activate -# System authorization information -auth --useshadow --enablemd5 # System keyboard keyboard --xlayouts=us --vckeymap=us # System language @@ -27,9 +22,6 @@ timezone US/Eastern bootloader --location=none %post -# Remove root password -passwd -d root > /dev/null - # Remove random-seed rm /var/lib/systemd/random-seed %end @@ -39,4 +31,4 @@ rm /var/lib/systemd/random-seed # Packages requires to support this output format go here -# NOTE lorax-composer will add the recipe packages below here, including the final %end +# NOTE lorax-composer will add the blueprint packages below here, including the final %end