Featutre request: Add action for discovered hosts: Enable SSH

Support
#1

This is probably not so hard to implement, but it would be very helpfull.
Often, i must login to fdi via ssh, so i must enable SSH on FDI console and set root password.

I am not comfortable to do this via kernel option (fdi.ssh=1 fdi.rootpw=redhat), because password is visible in plain text, and i am dealing with fdi booting on public IP adresses, and sometimes i have lots of them in discovered status. Action in foreman GUI would be much nicer, it would allow me to easily put specific password for specific discovered hosts (and not for all of them).

1 Like
#2

You can encrypt your root password easily as stated in our documentation:

fdi.rootpw='$1$_redhat_$i3.3Eg7ko/Peu/7Q/1.wJ/'

It’s the Linux standard crypt format, if FDI sees $ as the first character it passes the string to chpasswd -e. To generate encrypted passwords I wrote a nifty utility a year ago:

https://lukas.zapletalovi.com/2018/02/on-generating-kickstart-passwords.html

#3

I do not see how you want Foreman to securely set root password remotely. Like an (open) REST HTTP(s) API call? That’s not too secure :slight_smile:

A good enough and encrypted password is probably the strongest thing you can do at the moment.

1 Like