agama-project / agama / 12013658788

74%

Build Type

push

github

Committed by web-flow

Commit Message

Support for encrypted passwords (#1771)

## Problem

- The Agama autoinstallation and CLI accept the first user and the root
passwords only in plain text
- That's insecure, everybody who can access the installation profile
knows the root password

## Solution

- Support passing an already encrypted (hashed) password in the profile
- Similar to AutoYaST, an additional `encryptedPassword` boolean flag is
used to determine whether the specified password is encrypted (`true`
value) or plain text (`false` value or missing in the profile)

## Notes

- The web UI allows specifying only plain text passwords
- Encrypted passwords are long and hard to type and they need to be
encrypted externally

## Features

- Adapted schema definition
- Adapted the AutoYaST conversion tool
- When an encrypted password is set from Agama CLI then web UI resets
the flag back to plain text (it supports only plain text passwords)

## Testing

- Tested manually (both root user and first user), tested the AutoYaST
profile conversion
- Updated unit tests

---------

Co-authored-by: Imobach González Sosa <igonzalezsosa@suse.com>

Run Details

11 of 15 new or added lines in 7 files covered. (73.33%)

68 existing lines in 4 files now uncovered.

16928 of 23819 relevant lines covered (71.07%)

36.04 hits per line