On 6/21/2019 1:08 PM, Frank Beuth wrote:
> On Fri, Jun 21, 2019 at 12:36:22PM -0700, Misc User wrote:
>> I use PXE + install.conf + siteXX.tgz + siteXX-%hostname%.tgz for my
>> installs. I also have an rc.firsttime to download and install the
>> required packages.
>
> Thanks, but neither this nor the autoinstall suggestion seem applicable
> for my use case.
>
> I am dealing with virtualized servers which usually start out as
> Ubuntu/Debian/Fedora images, then the hosting provider supplies the IP
> address and root password for a first-time SSH login.
> In many cases it is not possible to upload an ISO to be used as server
> installation media, and VNC consoles (if available) are often not even
> encrypted. (How would you feel about installing OpenBSD and then having
> your root password sent in plaintext at the very beginning?)
>
> I realize installing OpenBSD under these constraints is rather like
> installing a ship in a bottle, but it seemed worth it to ask...
You could stick bsd.rd onto a bootable partition then point grub to it.
You could also disable password login for root and just use a key pair.
That way you wouldn't be sending the password encrypted (or at most only
giving it a password that is useless without console access, then run
'doas passwd' the first chance you get to eliminate even that vector).
That temp password could even be a long string of random junk so long as
you enter it twice.
You could copy bsd.rd and a copy of your pub key into /boot, or carve
out a new partition using some unused disk space.
No comments:
Post a Comment