[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#769388: 'PermitRootLogin without-password' in new installations breaks some use cases



Niels Thykier <niels@thykier.net> (2015-01-27):
> Ok, where would something like this go then?  I tried checking out the
> d-i source and I am yet to figure out the place where "random"
> preseedable/expert questions go.
> 
> Is this case basically "shove the debconf selections into the target
> system and let the regular .deb packages deal with it"?  If so, it seems
> that openssh "mostly" already permits this to be preseeded:
> 
> 
> """
>   if dpkg --compare-versions "$2" lt-nl 1:6.6p1-1 && \
>      [ "$(get_config_option PermitRootLogin)" = yes ] &&
>      db_get openssh-server/permit-root-login && [ "$RET" = true ]; then
>         set_config_option PermitRootLogin without-password
>   fi
> """
> 
> (I suspect it just needs a little fiddling with the --compare-versions)

...

> True - I assumed that the installation-guide was as easy to update on
> the website as the release-notes.
> 
> I am ready to look into writing a patch for d-i to provide this to be
> preseedable.  I am presume it needs to be "documented somewhere" in d-i
> (either as an expert question, in the installation-manual or in the
> standard preseed-example file).  I do not mind doing it as an expert
> question as well assuming we still have time for getting translations.

I've added this issue on my list of things to keep track for RC2. I
should be able to try and deal with sorting out which package to patch,
so that you can concentrate on other release-y things.

Mraw,
KiBi.

Attachment: signature.asc
Description: Digital signature


Reply to: