NGitHub
Upstream has documentation on this: https://docs.fedoraproject.org/en-US/quick-docs/reset-root-password/ for Fedora Workstation and other non-atomic Fedora variants. However, this sparked discussio...
NReally good conversation going on in this issue with Colin about systemd emergency target.
NAlso he added best practice for how to reset the root password in the thread as well
N@bsherman @j0rge @Kyle Gospo @nickname pinged all of you in the above issue.
Tbefore i put this public, does everything look correct here:
https://universal-blue.discourse.group/t/reset-your-forgotten-password/161
i never really messed around the GRUB prompt. Let me know if I should add or correct anything if anyone has time to read this
https://universal-blue.discourse.group/t/reset-your-forgotten-password/161
i never really messed around the GRUB prompt. Let me know if I should add or correct anything if anyone has time to read this
Universal Blue
Boot with init=/bin/bash on the kernel command line (e.g. edit grub prompt) Once you are in the GRUB command line: mount -t selinuxfs selinuxfs /sys/fs/selinux /sbin/load_policy passwd → type new password sync /sbin/reboot -ff Thanks to Colin Walters for the solution
NI would do numbered steps instead of bullets. Also I can get a screenshot of what a grub prompt should look like with the additional statement on the end of it.
NLikely can't do that until tonight.
NVery good to credit Colin for his contribution!
Tthanks you can post it here if it's easier for you (when you can no hurry)
Ttake your time
Tim glad this was figured out
Tand we gave it some attention
Nyes! I never really thought about this until someone ran into it.
Nalso one other edit to the passwd statement, I would do
passwd [INSERT USERNAME HERE] i.e. passwd nick to reset your user's password.Notherwise you will reset the root accounts password.
Jyeah just publish it, we'll make it a wiki, and that'll be fine!
Tok i will publish it and make it a wiki right now
Nhere are some relevant screenshots.
TThanks!
N4th picture is selecting your entry
Noh hang on.
Tim here
NI didn't annotate the 4th one correctly.
N
Nmake it obvious what to do.
Talright thanks again for the screenshots
N@nickname we should probably propose this getting added to the upstream Silverblue wiki as well since it is relevant to them too!
Tim not exactly sure where to propose that
Tagreed though
NThere should be a Fedora docs page for Silverblue. I'll see if I can track it down.
TFedora Docs
Learn more about Fedora Linux, the Fedora Project & the Fedora Community.
Jclick the edit button top right
Tyeah i see now i wanted to make sure this was the correct place
Tok
NYup. A sub page would probably be relevant.
Tah nice it's on github
NMight be good to link it from the main Fedora workstation page as well.
NSo people don't get confused.
NLike we did! 
Tthis will be my plan for later. gotta do something real quick, but i will get this done by the end of the day. very happy this was figured out and we have proper documentation on it
Ttheir markup standard is AsciiDoc i see lol
Ti will reformat it to that
NYeah, I forgot that minor detail X_X
Tyeah thats ok. i actually made the commit but im going to return to it and PR it either tonight or tomorrow because i'm not done yet
BI got some feed back from
TL;DR
I think we should do this in ublue, and I'll also try to push it upstream, but they will probably have a pissing match about security theater
https://github.com/ublue-os/main/issues/470#issuecomment-1889695964
travier on the emergency boot target... and i did my own research to try to put a complete picture together...TL;DR
I think we should do this in ublue, and I'll also try to push it upstream, but they will probably have a pissing match about security theater
https://github.com/ublue-os/main/issues/470#issuecomment-1889695964
B(they: just meaning lots of Fedora peoples in general, not meaning travier or cgwalters, specifically)
B@Noel i think i have an idea on how to make this single/emergency/rescue boot mode work safely
Bit's based on what Timothee and Colin suggested in my ticket
Bif we put a hard override on the filesystem like CoreOS does... we will drop into a non-password protected root shell on a fsck-fail, even if a root password is set
that's what Timothee is trying to guard against
that's what Timothee is trying to guard against
