FAI (root password change on errors)

[Matteo Guglielmi]

No,


not that.


I've configured FAI to stop (no reboot of the install client)

and fire up a login shell if any of the scripts fails with:



STOP_ON_ERROR=419 # we stop if any of the scripts fails



So,


when FAI stops because of any error in the scripts, FAI starts

a login shell (tty console) on the install client and the root

password of FAI itself (nfsroot+overlayfs) is changed.



In other words,


as long as FAI does not stop because of errors I can ssh remotely

into the install client using the password defined in ROOTPW.. but

when it stops, the root password is changed to something else and

I cannot ssh remotely anymore.



Only if I change the pass on the install client using the tty the

FAI started I can login from remote again.



________________________________
From: linux-fai <linux-fai-bounces at uni-koeln.de> on behalf of Thomas Lange <lange at cs.uni-koeln.de>
Sent: Thursday, June 18, 2020 11:49:22 AM
To: fully automatic installation for Linux
Subject: Re: FAI (root password change on errors)

>>>>> On Wed, 17 Jun 2020 08:37:19 +0000, Matteo Guglielmi <Matteo.Guglielmi at dalco.ch> said:

    > While a client is being installed (FAI_FLAGS=verbose,sshd,reboot FAI_ACTION=install), I can ssh into it as 'root' with the password defined in
    > /etc/fai/nfsroot.conf (FAI_ROOTPW variable) but when FAI stops and bails out due to some error, FAI sends all the logs back to the install
    > server and then does(?) something else (see second section) which includes changing the root password... am I correct?
You mean the root pw on the server is schanged?
No. The install client calls fai-chboot on the server, which disables
the PXE config, so the next time the client boots from local
disk.

The script scripts/DEBIAN/10-rootpw set the root pw on the install
client via $ROOTPW which is defined in

class/FAIBASE.var: ROOTPW='$1$kBnWcO.E$djxB128U7dMkrltJHPf6d1'

--
regards Thomas