summary refs log tree commit diff
diff options
context:
space:
mode:
authorPascal Bach <pascal.bach@nextrem.ch>2017-01-23 22:15:59 +0100
committerRobin Gloster <mail@glob.in>2017-01-25 21:09:31 +0100
commit03ef04f0a40c1be907fd6f0a70891f8317c04d77 (patch)
tree612127326b736c131822ccf02e700dba394b3734
parent0a4943a38144808a8989a40dc6e1bad5a62e1940 (diff)
downloadnixlib-03ef04f0a40c1be907fd6f0a70891f8317c04d77.tar
nixlib-03ef04f0a40c1be907fd6f0a70891f8317c04d77.tar.gz
nixlib-03ef04f0a40c1be907fd6f0a70891f8317c04d77.tar.bz2
nixlib-03ef04f0a40c1be907fd6f0a70891f8317c04d77.tar.lz
nixlib-03ef04f0a40c1be907fd6f0a70891f8317c04d77.tar.xz
nixlib-03ef04f0a40c1be907fd6f0a70891f8317c04d77.tar.zst
nixlib-03ef04f0a40c1be907fd6f0a70891f8317c04d77.zip
install-device: permit root login with password
Allow password login to the installation this allows doing remote installation
via SSH. All that need to be done on the local machine is:
1. Boot from the installation media
2. Set a password with passwd
3. Enable SSH with systemctl start sshd

It is safe as root doesn't have a password by default
and SSH is disabled by default.

Fixes #20718
-rw-r--r--nixos/modules/profiles/installation-device.nix7
1 files changed, 6 insertions, 1 deletions
diff --git a/nixos/modules/profiles/installation-device.nix b/nixos/modules/profiles/installation-device.nix
index 91c718559ed7..af3ef77e99c7 100644
--- a/nixos/modules/profiles/installation-device.nix
+++ b/nixos/modules/profiles/installation-device.nix
@@ -46,7 +46,12 @@ with lib;
       '';
 
     # Allow sshd to be started manually through "start sshd".
-    services.openssh.enable = true;
+    services.openssh = {
+      enable = true;
+      # Allow password login to the installation, if the user sets a password via "passwd"
+      # It is safe as root doesn't have a password by default and SSH is disabled by default
+      permitRootLogin = "yes";
+    };
     systemd.services.sshd.wantedBy = mkOverride 50 [];
 
     # Enable wpa_supplicant, but don't start it by default.