Files
firmware/payload
Oleksandr ShyshatskyiandClaude Fable 5 f3d12ac84a An update keeps the root password the printer already has
A random password on every install meant a trip back to the USB stick on
every update. Now the pre-block records the live root hash before the stock
installer replaces the shadow file, and the post-block puts it back when it
differs from what the package shipped -- so the random password is chosen
once, on the first install, and an update preserves it, including one set by
hand with `passwd`. Flashing stock in between resets the cycle, as it should.

The end-to-end install test asserts all of it across its two installs: same
hash after the re-install, one generation line in the log, the stick file
untouched.

With it, `make passwd`: the ROOT_PW_HASH generator now runs inside the pinned
build image, because the previous advice -- host `openssl passwd -6` -- fails
outright on LibreSSL builds that have no -6.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-24 22:58:33 +03:00
..