Add support for new Raspberry Pi OS .xz. userless image

[guysoft]

Hey,
The new Rpi image has no pi user and uses a .xz compression format.

I could not get to fix it because I was on holiday in Egypt till yesterday. And today I am starting a new job. So it might take a small delay untill I can fix it. Probably should find time by the end if the week.

If anyone has any input please share it here.

[pablosproject]

Reading through the updates here, it looks like we can set up a default user (although not really recommended) by putting a file called userconf in /boot at the first launch. We could do a module for that that does basically this:

passwd_enc=$(echo 'mypassword' | openssl passwd -6 -stdin)
echo "username:$password_enc" >> /boot/userconf

Otherwise, I think the user will be prompted with the wizard at first launch, but I need to test it though.

[pablosproject]

@guysoft I started some work here #164, hope to finish over the easter weekend if I have the time.

[pablosproject]

So, regarding the new Pi User removal, I tried re-building with the latest image of my images. CustomPiOS works as usual, but on the first boot there it prompts for account creation:

This looks good to me, as it forces users to set a secure password and user for the machine.
Although I see that there are some distros made with CustomPiOS that may need a default user to run, like OctoPi (I suppose). The idea is to create a module that adds a default user using the userconf file method, which is the recommended by the RaspberryPi foundation.

[guysoft]

I think that for now if the default user module is enabled, it should remove the creation of the new user.
I might vote on changing the behavior in the future, but for now I am not sure how to adapt to what Rpi have decided to to. I think it might be best to wait and see how people are using the usage-specific distros.

[guysoft]

Also I think ill pull the xz image changes tomorrow so at least images would get built

[guysoft]

Ok, puhsed 5032d8b c50d74b e88ec0a fbed8fc 47fc3fd . So xz should work, but still need to handle the username change dialog.

[KwadFan]

Hello Guy, after a littlebit of messing around with custoPiZer, I faced the same in my tests.
Here is my solution: https://github.com/KwadFan/MainsailOS-ng/blob/a77e1c7cea9c21c1fcc055f83914b7f89a91ae72/workspace/scripts/03_piconfig.sh#L27

Regards

[guysoft]

Thanks a lot for the snippet @KwadFan , tested and it works.
I don't want to commit it in just yet because for some reason automatic login is enabled. That means that when you boot on tty1 the user drops to the default user shell that has by default sudo capabilities.
Once I fix that I will push this to devel.
If you know why auto-login happens it would help me fix that too.

[guysoft]

Something with the user genration is creaing:
/etc/systemd/system/getty@tty1.service.d/autologin.conf
And I can't find out what it is.

[KwadFan]

Hello @guysoft ,
Yes, I am researching that also, this is in my opinion a bad decision from raspberry. I am also fighting against it like you. The root cause for this is here: https://github.com/RPi-Distro/raspi-config/blob/2ef9a3a194b30a471e611803e9b46239193b74a5/raspi-config#L1392
Also they seem to replace the default getty.service with autologin.service with the raspi-config package. But, I am working on this. Trying to reverse that with a rc.local or systemd service during this week. Will let you know if there is progress

[guysoft]

@ghollingworth Could you perhaps shed any light on why when we use /boot/userconf auto-login is enabled?

When we boot /etc/systemd/system/getty@tty1.service.d/autologin.conf does not exist, but after we /boot/userconf is used the autologin file is created and the the tty1 terminal logs in to the user which has sudo privileges.

I tried running grep for the whole rootfs for autologin.conf and could not find what is doing this.

Thanks!

[KwadFan]

So, @guysoft ,
Here is, what I came up with: https://github.com/KwadFan/MainsailOS-ng/blob/f63bea7f4cbcdf9e17b89a8825143a5850b32b8d/workspace/scripts/98_disable_autologin.sh

Feel free to abuse it :)

Regards