72 replies

Resetting Root or User Password

NoelOP•1/10/24, 7:20 PM

https://github.com/ublue-os/main/issues/469

GitHub

Documentation or Functionality for Resetting Root Password · Issue ...

Upstream has documentation on this: https://docs.fedoraproject.org/en-US/quick-docs/reset-root-password/ for Fedora Workstation and other non-atomic Fedora variants. However, this sparked discussio...

NoelOP•1/10/24, 7:20 PM

Really good conversation going on in this issue with Colin about systemd emergency target.

NoelOP•1/10/24, 7:22 PM

Also he added best practice for how to reset the root password in the thread as well

NoelOP•1/10/24, 9:28 PM

@bsherman @j0rge @Kyle Gospo @nickname pinged all of you in the above issue.

tryhardsoccermomswag•1/10/24, 11:02 PM

before i put this public, does everything look correct here:
https://universal-blue.discourse.group/t/reset-your-forgotten-password/161
i never really messed around the GRUB prompt. Let me know if I should add or correct anything if anyone has time to read this

Universal Blue

Reset Your Forgotten Password

Boot with init=/bin/bash on the kernel command line (e.g. edit grub prompt) Once you are in the GRUB command line: mount -t selinuxfs selinuxfs /sys/fs/selinux /sbin/load_policy passwd → type new password sync /sbin/reboot -ff Thanks to Colin Walters for the solution

Ttryhardsoccermomswag before i put this public, does everything look correct here: https://universal-b...

NoelOP•1/10/24, 11:11 PM

I would do numbered steps instead of bullets. Also I can get a screenshot of what a grub prompt should look like with the additional statement on the end of it.

NoelOP•1/10/24, 11:11 PM

Likely can't do that until tonight.

NoelOP•1/10/24, 11:12 PM

Very good to credit Colin for his contribution!

NNoel I would do numbered steps instead of bullets. Also I can get a screenshot of wha...

tryhardsoccermomswag•1/10/24, 11:12 PM

thanks you can post it here if it's easier for you (when you can no hurry)

tryhardsoccermomswag•1/10/24, 11:12 PM

take your time

tryhardsoccermomswag•1/10/24, 11:13 PM

im glad this was figured out

tryhardsoccermomswag•1/10/24, 11:13 PM

and we gave it some attention

NoelOP•1/10/24, 11:13 PM

yes! I never really thought about this until someone ran into it.

NoelOP•1/10/24, 11:14 PM

also one other edit to the passwd statement, I would do passwd [INSERT USERNAME HERE]passwd [INSERT USERNAME HERE] i.e. passwd nickpasswd nick to reset your user's password.

NoelOP•1/10/24, 11:16 PM

otherwise you will reset the root accounts password.

NNoel I would do numbered steps instead of bullets. Also I can get a screenshot of wha...

j0rge•1/10/24, 11:19 PM

yeah just publish it, we'll make it a wiki, and that'll be fine!

tryhardsoccermomswag•1/10/24, 11:20 PM

ok i will publish it and make it a wiki right now

Ttryhardsoccermomswag thanks you can post it here if it's easier for you (when you can no hurry)

NoelOP•1/10/24, 11:30 PM

NoelOP•1/10/24, 11:30 PM

here are some relevant screenshots.

tryhardsoccermomswag•1/10/24, 11:30 PM

Thanks!

NoelOP•1/10/24, 11:31 PM

4th picture is selecting your entry

NoelOP•1/10/24, 11:31 PM

oh hang on.

tryhardsoccermomswag•1/10/24, 11:31 PM

im here

NoelOP•1/10/24, 11:31 PM

I didn't annotate the 4th one correctly.

NoelOP•1/10/24, 11:31 PM

NoelOP•1/10/24, 11:31 PM

make it obvious what to do.

tryhardsoccermomswag•1/10/24, 11:49 PM

alright thanks again for the screenshots

NoelOP•1/10/24, 11:53 PM

@nickname we should probably propose this getting added to the upstream Silverblue wiki as well since it is relevant to them too!

tryhardsoccermomswag•1/10/24, 11:55 PM

im not exactly sure where to propose that

tryhardsoccermomswag•1/10/24, 11:55 PM

agreed though

Ttryhardsoccermomswag im not exactly sure where to propose that

NoelOP•1/10/24, 11:56 PM

There should be a Fedora docs page for Silverblue. I'll see if I can track it down.

tryhardsoccermomswag•1/10/24, 11:57 PM

here? https://docs.fedoraproject.org/en-US/fedora-silverblue/

Fedora Docs

Fedora Silverblue User Guide

Learn more about Fedora Linux, the Fedora Project & the Fedora Community.

j0rge•1/10/24, 11:57 PM

click the edit button top right

tryhardsoccermomswag•1/10/24, 11:57 PM

yeah i see now i wanted to make sure this was the correct place

tryhardsoccermomswag•1/10/24, 11:57 PM

Ttryhardsoccermomswag here? https://docs.fedoraproject.org/en-US/fedora-silverblue/

NoelOP•1/10/24, 11:57 PM

Yup. A sub page would probably be relevant.

tryhardsoccermomswag•1/10/24, 11:58 PM

ah nice it's on github

NoelOP•1/10/24, 11:58 PM

Might be good to link it from the main Fedora workstation page as well.

NoelOP•1/10/24, 11:58 PM

So people don't get confused.

NoelOP•1/10/24, 11:58 PM

Like we did!

tryhardsoccermomswag•1/10/24, 11:59 PM

this will be my plan for later. gotta do something real quick, but i will get this done by the end of the day. very happy this was figured out and we have proper documentation on it

tryhardsoccermomswag•1/11/24, 2:49 AM

their markup standard is AsciiDoc i see lol

tryhardsoccermomswag•1/11/24, 2:49 AM

i will reformat it to that

Ttryhardsoccermomswag their markup standard is AsciiDoc i see lol

NoelOP•1/11/24, 3:07 AM

Yeah, I forgot that minor detail X_X

tryhardsoccermomswag•1/11/24, 3:08 AM

yeah thats ok. i actually made the commit but im going to return to it and PR it either tonight or tomorrow because i'm not done yet

bsherman•1/12/24, 5:40 PM

I got some feed back from traviertravier on the emergency boot target... and i did my own research to try to put a complete picture together...

TL;DR
I think we should do this in ublue, and I'll also try to push it upstream, but they will probably have a pissing match about security theater

https://github.com/ublue-os/main/issues/470#issuecomment-1889695964

bsherman•1/12/24, 5:41 PM

(they: just meaning lots of Fedora peoples in general, not meaning travier or cgwalters, specifically)

bsherman•2/3/24, 4:47 AM

@Noel i think i have an idea on how to make this single/emergency/rescue boot mode work safely

bsherman•2/3/24, 4:47 AM

it's based on what Timothee and Colin suggested in my ticket

bsherman•2/3/24, 4:48 AM

if we put a hard override on the filesystem like CoreOS does... we will drop into a non-password protected root shell on a fsck-fail, even if a root password is set

that's what Timothee is trying to guard against

Resetting Root or User Password

Similar Threads

Similar Threads

Similar Threads