discussion: root password switch for next guixsd release

discussion: root password switch for next guixsd release

[ng0]

[-- Attachment #1: Type: text/plain, Size: 1222 bytes --]

Hi,

building my clone army of Gentoo Penguins I came to appreciate that you can
start a Gentoo setup with boot parameters like:

gentoo dosshd passwd=foo

for an remote setup, so you can just ssh to the IP of the VM and do the setup.

Could we target a similar behavior for GuixSD for the next release,
where people could pass at least a password to startup parameters?

I know about the problems with lsh vs openssh, but maybe this could
be made switchable too, like:

provide a grub menu where you can either directly pass arguments or

Entry 1: Start GuixSD with openssh
Entry 2: Start GuixSD with lsh


the root password could be appended somehow via edia entry, in this
theoretical land of possibilities.
Being used to "every lack of feature or enhancement request is a bug"
of Gentoo I would open a bug to track this, but maybe this can be put
on the roadmap, to track it there as "remote setup enabled guixsd image"?

It's not necessary for the next version, but for a 1.0, productive for
server environments (and `guix deploy`) that's one of the many features
which are on my wishlist.


--
♥Ⓐ ng0
For non-prism friendly talk find me on
psyced.org / loupsycedyglgamf.onion

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 801 bytes --]

Re: discussion: root password switch for next guixsd release

[Leo Famulari]

On Tue, Jun 07, 2016 at 10:17:02AM +0000, ng0 wrote:
> Could we target a similar behavior for GuixSD for the next release,
> where people could pass at least a password to startup parameters?

I don't understand your use case fully, but would it suffice to provide
the password in the operation system declaration, as described in 7.5.2
User Accounts?

https://www.gnu.org/software/guix/manual/html_node/User-Accounts.html#User-Accounts

Re: discussion: root password switch for next guixsd release

[ng0]

[-- Attachment #1: Type: text/plain, Size: 1330 bytes --]

On 2016-06-11(08:24:47-0400), Leo Famulari wrote:
> On Tue, Jun 07, 2016 at 10:17:02AM +0000, ng0 wrote:
> > Could we target a similar behavior for GuixSD for the next release,
> > where people could pass at least a password to startup parameters?
>
> I don't understand your use case fully, but would it suffice to provide
> the password in the operation system declaration, as described in 7.5.2
> User Accounts?

Insert/Load the guixsd image on a remote/local-remote system, provide
a password which is not empty, start an sshd (lsh/openssh) and be able
to do the installation this way... or at least let it be a step towards
remote setup, as there might be some more things needed for this.

> https://www.gnu.org/software/guix/manual/html_node/User-Accounts.html#User-Accounts

Possibly, if the image is created this way, but I was more thinking
of a possibility where you can pass a password before booting into
the setup.
This however might or might not be possible with the current way
release disks are produced.
I think gentoo's catalyst software produces an image with isolinux,
where you pass the things I mentioned to the kernel like
$kernel arg arg1 arg2 etc
or better:
gentoo dosshd passwd=foo

--
♥Ⓐ ng0
For non-prism friendly talk find me on
psyced.org / loupsycedyglgamf.onion

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

Re: discussion: root password switch for next guixsd release

[Leo Famulari]

On Sun, Jun 12, 2016 at 12:48:26AM +0000, ng0 wrote:
> On 2016-06-11(08:24:47-0400), Leo Famulari wrote:
> Insert/Load the guixsd image on a remote/local-remote system, provide
> a password which is not empty, start an sshd (lsh/openssh) and be able
> to do the installation this way... or at least let it be a step towards
> remote setup, as there might be some more things needed for this.
> 
> > https://www.gnu.org/software/guix/manual/html_node/User-Accounts.html#User-Accounts
> 
> Possibly, if the image is created this way, but I was more thinking
> of a possibility where you can pass a password before booting into
> the setup.
> This however might or might not be possible with the current way
> release disks are produced.
> I think gentoo's catalyst software produces an image with isolinux,
> where you pass the things I mentioned to the kernel like
> $kernel arg arg1 arg2 etc
> or better:
> gentoo dosshd passwd=foo

You'd need to create the disk image first, right? Why not put the
password into the operating system declaration that you use to create
the disk image, as described in the link above?

`guix system disk-image --image-size=1G system-with-root-password.scm`