Lennart Sorensen <lsorense@csclub.uwaterloo.ca> writes: > On Thu, Sep 24, 2015 at 11:50:59PM +0200, Simon Josefsson wrote: >> Package: debian-installer >> Severity: wishlist >> >> On some system that I preseed-install, I don't want any root password >> set nor do I want a normal user account. I get access to the system via >> SSH, using a public-key that I populate using a late_command. > > So you want a system that you can not fix if it needs to prompt for a > root password to manually run fsck? There are after all a few times > where being able to login as root directly on the console is required. > Not allowing ssh with a pasword as root is a good diea (and the default > these days), but that does not mean you don't still need a root > password. This is not true. If you boot a system with a disabled root account into single user mode this is detected and you get a root shell without entering a password. At least for jessie and earlier systems. See man sulogin. For testing and up the manpages says that the --force option to sulogin is needed for this, but this is not invoked by sysvinit or the systemd emergency service. And if everything else fails, you can still use init=/bin/bash as long as you have console and boot loader access. Gaudenz
Attachment:
signature.asc
Description: PGP signature