Initial import0.1.0

2 files changed, 69 insertions, 0 deletions

diff --git a/hook/passwd b/hook/passwd
new file mode 100644
index 0000000..2e27136
--- /dev/null
+++ b/hook/passwd
@@ -0,0 +1,58 @@
+#!/bin/sh
+
+run_latehook() {
+	local newroot="/new_root/"
+	OLDIFS="${IFS}"
+	IFS=","
+
+	# set cleartext password
+	if [[ -n "${password}" ]]; then
+		for password_split in ${password}; do
+			password_user="$(echo ${password_split} | cut -d: -f1)"
+			password_pass="$(echo ${password_split} | cut -d: -f2)"
+			if [[ "${password_user}" = "${password_pass}" ]]; then
+				msg ":: Username equals password or invalid option, nothing changed."
+			else
+				msg ":: Setting password for user '${password_user}'..."
+				echo ${password_split} | chpasswd -R ${newroot}
+			fi
+		done
+	fi
+
+	# set password hash
+	if [[ -n "${pwhash}" ]]; then
+		for pwhash_split in ${pwhash}; do
+			pwhash_user="$(echo ${pwhash_split} | cut -d: -f1)"
+			pwhash_hash="$(echo ${pwhash_split} | cut -d: -f2)"
+			if [[ "${pwhash_user}" = "${pwhash_hash}" ]]; then
+				msg ":: Invalid option, no password changed."
+			else
+				msg ":: Setting password for user '${pwhash_user}'..."
+				usermod -p "${pwhash_hash}" -R ${newroot} "${pwhash_user}"
+			fi
+		done
+	fi
+
+	# set authorized keys
+	if [[ -n "${authorized_key}" ]]; then
+		for authorized_key_split in ${authorized_key}; do
+			authorized_key_user="$(echo ${authorized_key_split} | cut -d: -f1)"
+			authorized_key_type="$(echo ${authorized_key_split} | cut -d: -f2)"
+			authorized_key_key="$(echo ${authorized_key_split} | cut -d: -f3)"
+			if [[ "${authorized_key_type}" = "${authorized_key_key}" ]]; then
+				msg ":: Invalid option, no authorized key added."
+			else
+				authorized_key_home=$(egrep ^${authorized_key_user}: ${newroot}/etc/passwd | cut -d: -f 6)
+				if [[ ! -d "${newroot}/${authorized_key_home}" ]]; then
+					msg ":: Home dir for user '${authorized_key_user}' does not exist."
+				else
+					msg ":: Adding authorized key for user '${authorized_key_user}'..."
+					mkdir -p "${newroot}/${authorized_key_home}/.ssh"
+					echo "${authorized_key_type} ${authorized_key_key} mkinitcpio" >> "${newroot}/${authorized_key_home}/.ssh/authorized_keys"
+				fi
+			fi
+		done
+	fi
+
+	IFS="${OLDIFS}"
+}
diff --git a/install/passwd b/install/passwd
new file mode 100644
index 0000000..b2b067a
--- /dev/null
+++ b/install/passwd
@@ -0,0 +1,11 @@
+#!/bin/sh
+
+build() {
+	add_runscript
+	add_binary usermod
+	add_binary chpasswd
+}
+
+help() {
+	echo "This hook changes password from inside initramfs."
+}