[v4,11/13] kas: Add options to activate predefined users

Message ID 20230922091003.20763-12-ubely@ilbers.de
State Superseded, archived
Headers show
Series Support building Isar using kas | expand

Commit Message

Uladzimir Bely Sept. 22, 2023, 9:10 a.m. UTC
This allows to enable 'root' and 'isar' users and set their passwords.

Signed-off-by: Uladzimir Bely <ubely@ilbers.de>
---
 kas/opt/Kconfig        | 40 ++++++++++++++++++++++++++++++++++++++++
 kas/opt/user-isar.yaml | 19 +++++++++++++++++++
 kas/opt/user-root.yaml | 11 +++++++++++
 3 files changed, 70 insertions(+)
 create mode 100644 kas/opt/user-isar.yaml
 create mode 100644 kas/opt/user-root.yaml

Patch

diff --git a/kas/opt/Kconfig b/kas/opt/Kconfig
index 328ac5e6..87fef870 100644
--- a/kas/opt/Kconfig
+++ b/kas/opt/Kconfig
@@ -42,6 +42,46 @@  config KAS_INCLUDE_MIRROR_UBUNTU
 endmenu
 
 
+menu "User management"
+
+config USER_ROOT
+	bool "Activate 'root' user"
+	help
+	  Enables root user.
+
+config KAS_USER_ROOT_PASSWORD
+	string "Password for 'root' user"
+	default "root"
+	depends on USER_ROOT
+	help
+	  Set password for 'root' user.
+
+config KAS_INCLUDE_USER_ROOT
+	string
+	default "kas/opt/user-root.yaml"
+	depends on USER_ROOT
+
+
+config USER_ISAR
+	bool "Activate 'isar' user"
+	default y
+	help
+	  Enables `isar` user.
+
+config KAS_USER_ISAR_PASSWORD
+	string "Password for 'isar' user"
+	default "isar"
+	depends on USER_ISAR
+	help
+	  Set password for 'isar' user.
+
+config KAS_INCLUDE_USER_ISAR
+	string
+	default "kas/opt/user-isar.yaml"
+	depends on USER_ISAR
+
+endmenu
+
 config KAS_IMAGE_FSTYPES
 	string "Additional image fstypes"
 	default ""
diff --git a/kas/opt/user-isar.yaml b/kas/opt/user-isar.yaml
new file mode 100644
index 00000000..67611a40
--- /dev/null
+++ b/kas/opt/user-isar.yaml
@@ -0,0 +1,19 @@ 
+# This software is a part of ISAR.
+# Copyright (C) 2023 ilbers GmbH
+
+header:
+  version: 14
+
+local_conf_header:
+  user-isar: |
+    GROUPS += "isar"
+    GROUP_isar[flags] = "system"
+
+    USERS += "isar"
+    USER_isar[gid] = "isar"
+    USER_isar[home] = "/var/lib/isar"
+    USER_isar[comment] = "My isar user"
+    USER_isar[flags] = "system create-home"
+
+    USER_isar[password] = "${KAS_USER_ISAR_PASSWORD}"
+    USER_isar[flags] += "clear-text-password"
diff --git a/kas/opt/user-root.yaml b/kas/opt/user-root.yaml
new file mode 100644
index 00000000..65428e24
--- /dev/null
+++ b/kas/opt/user-root.yaml
@@ -0,0 +1,11 @@ 
+# This software is a part of ISAR.
+# Copyright (C) 2023 ilbers GmbH
+
+header:
+  version: 14
+
+local_conf_header:
+  user-root: |
+    USERS += "root"
+    USER_root[password] ??= "${KAS_USER_ROOT_PASSWORD}"
+    USER_root[flags] += "clear-text-password"