Product SiteDocumentation Site

A.6.6. sshpw (optional) - Restrict ssh Access During Installation

During the installation, you can interact with the installation program and monitor its progress over an SSH connection. Use the sshpw command to create temporary accounts through which to log on. Each instance of the command creates a separate account that exists only in the installation environment. These accounts are not transferred to the installed system.
sshpw --username=name password [--iscrypted|--plaintext] [--lock]

Important

By default, the ssh server is not started during the installation. To make ssh available during the installation, boot the system with the kernel boot option inst.sshd. See Section 8.2.3, “Console, Environment and Display Options” for details.

Note

If you want to disable root ssh access to your hardware during installation, use the following:
sshpw --username=root --lock
--username
Provides the name of the user. This option is required.
--iscrypted
If this option is present, the password argument is assumed to already be encrypted. This option is mutually exclusive with --plaintext. To create an encrypted password, you can use Python:
$ python -c 'import crypt; print(crypt.crypt("My Password", "$6$My Salt"))'
This will generate a SHA512 crypt of your password using your provided salt.
--plaintext
If this option is present, the password argument is assumed to be in plain text. This option is mutually exclusive with --iscrypted
--lock
If this option is present, this account is locked by default. This means that the user will not be able to log in from the console.