Skip to content

refactor: replace random root password generation with disabling root…#101

Merged
runleveldev merged 1 commit intomainfrom
100-disable-root-login
Nov 3, 2025
Merged

refactor: replace random root password generation with disabling root…#101
runleveldev merged 1 commit intomainfrom
100-disable-root-login

Conversation

@runleveldev
Copy link
Copy Markdown
Collaborator

… password for containers

This pull request updates the way root account credentials are handled during container creation. Instead of generating and setting a random root password, the scripts now explicitly delete and lock the root password, preventing password-based root login by default. This improves security by ensuring the root account cannot be accessed with a password immediately after container creation.

Security improvements to container creation scripts:

  • Updated create-container.sh and create-container-new.sh to delete and lock the root password for the root account instead of generating and setting a random password. This change prevents password-based root login by default. [1] [2]

@runleveldev runleveldev linked an issue Oct 31, 2025 that may be closed by this pull request
Copy link
Copy Markdown
Contributor

@mie-jcrandal mie-jcrandal left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These need tickets in the future to comply with procedures, or procedures need updated

@runleveldev runleveldev merged commit c34acaa into main Nov 3, 2025
3 checks passed
@runleveldev runleveldev deleted the 100-disable-root-login branch November 3, 2025 15:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Disable Root Login

3 participants