Repository navigation

Hold an image shut until its first boot has set a password - #12

Merged

marcos-mendez merged 11 commits into

19.xfrom

fix/webmin-auth-hardening

Sep 29, 2026

Commits on Sep 28, 2026
- fix: no account of a built image can be authenticated before its first boot
  marcos-mendez
  committed
  6051dfe
- docs: changelog and coverage for the first boot account hardening
  marcos-mendez
  committed
  d9dcbea
Commits on Sep 29, 2026
- test: ask the real pam_unix whether a password gets in
  
  marcos-mendez
  and
  claude
  committed
  7ba662a
- test: ask pam_unix through sudo where a user namespace cannot mount
  
  marcos-mendez
  and
  claude
  committed
  10e558e
- fix: a later boot does not wait for the first boot's scripts again
  
  marcos-mendez
  and
  claude
  committed
  ede92d9
- fix: samba-rootpass writes the field rootpass writes, and keeps the password out of the log
  
  marcos-mendez
  and
  claude
  committed
  7ccbfe8
- test: what pam_unix makes of a blank equivalent field depends on the libpam
  
  marcos-mendez
  and
  claude
  committed
  c4e7c3e
- docs: changelog, coverage and comments re-derived from the real pam_unix
  
  marcos-mendez
  and
  claude
  committed
  4fb88c8
- test: the whole question includes the stack everything else uses
  
  marcos-mendez
  and
  claude
  committed
  680d6da
- Merge remote-tracking branch 'origin/19.x' into fix/webmin-auth-hardening
  
  marcos-mendez
  and
  claude
  committed
  7d4ef76
- Merge branch '19.x' into fix/webmin-auth-hardening
  marcos-mendez
  authored
  52d62f7