On 6/21/2019 1:08 PM, Frank Beuth wrote:
On Fri, Jun 21, 2019 at 12:36:22PM -0700, Misc User wrote:
I use PXE + install.conf + siteXX.tgz + siteXX-%hostname%.tgz for my
installs.  I also have an rc.firsttime to download and install the
required packages.

Thanks, but neither this nor the autoinstall suggestion seem applicable for my use case.

I am dealing with virtualized servers which usually start out as Ubuntu/Debian/Fedora images, then the hosting provider supplies the IP address and root password for a first-time SSH login. In many cases it is not possible to upload an ISO to be used as server installation media, and VNC consoles (if available) are often not even encrypted. (How would you feel about installing OpenBSD and then having your root password sent in plaintext at the very beginning?)

I realize installing OpenBSD under these constraints is rather like installing a ship in a bottle, but it seemed worth it to ask...

You could stick bsd.rd onto a bootable partition then point grub to it.
You could also disable password login for root and just use a key pair.
That way you wouldn't be sending the password encrypted (or at most only
giving it a password that is useless without console access, then run
'doas passwd' the first chance you get to eliminate even that vector).
That temp password could even be a long string of random junk so long as
you enter it twice.

You could copy bsd.rd and a copy of your pub key into /boot, or carve
out a new partition using some unused disk space.


Reply via email to