Commit 6e9293ab authored by Dietmar Maurer's avatar Dietmar Maurer

encrypt container password (sha1)

parent 7de32878
...@@ -12,6 +12,8 @@ use PVE::Cluster qw(cfs_register_file cfs_read_file); ...@@ -12,6 +12,8 @@ use PVE::Cluster qw(cfs_register_file cfs_read_file);
use PVE::SafeSyslog; use PVE::SafeSyslog;
use PVE::INotify; use PVE::INotify;
use PVE::JSONSchema; use PVE::JSONSchema;
use Digest::SHA1;
use Encode;
my $cpuinfo = PVE::ProcFSTools::read_cpuinfo(); my $cpuinfo = PVE::ProcFSTools::read_cpuinfo();
my $nodename = PVE::INotify::nodename(); my $nodename = PVE::INotify::nodename();
...@@ -1045,6 +1047,11 @@ sub set_rootpasswd { ...@@ -1045,6 +1047,11 @@ sub set_rootpasswd {
my $shadow = "$vmdir/etc/shadow"; my $shadow = "$vmdir/etc/shadow";
if ($opt_rootpasswd !~ m/^\$/) {
my $time = substr (Digest::SHA1::sha1_base64 (time), 0, 8);
$opt_rootpasswd = crypt(encode("utf8", $opt_rootpasswd), "\$1\$$time\$");
};
if (-f $shadow) { if (-f $shadow) {
replacepw ($shadow, $opt_rootpasswd); replacepw ($shadow, $opt_rootpasswd);
replacepw ($pwfile, 'x'); replacepw ($pwfile, 'x');
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment