image: unset password reset date

edgelesssys · Oct 30, 2024 · 4cc5e08 · 4cc5e08
1 parent aa7d47e
commit 4cc5e08
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/image/base/BUILD.bazel b/image/base/BUILD.bazel
@@ -30,6 +30,7 @@ copy_to_directory(
     mkosi_image(
         name = "base_" + kernel_variant,
         srcs = [
+            "mkosi.finalize",
             "mkosi.postinst",
             "mkosi.prepare",
         ] + glob([

diff --git a/image/base/mkosi.finalize b/image/base/mkosi.finalize
@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euxo pipefail
+
+# Disable password age for Constellation sysusers.
+tmp=$(mktemp)
+cp -a "${BUILDROOT}/etc/shadow-" "${tmp}"
+mkosi-chroot chage -d "20014" etcd
+cp -a "${tmp}" "${BUILDROOT}/etc/shadow-"