mirror of
https://github.com/apache/nuttx.git
synced 2026-08-01 20:28:58 +00:00
4761f15b3e
Add standalone host PBKDF2-HMAC-SHA256 mkpasswd, board_romfs_mkpasswd.sh, and promptpasswd.sh with confirm-password support. Integrate ROMFS passwd generation in Board.mk and CMake. Drop TEA key checks from passwd_keys.mk. Signed-off-by: Abhishek Mishra <mishra.abhishek2808@gmail.com>
75 lines
2.3 KiB
Bash
Executable file
75 lines
2.3 KiB
Bash
Executable file
#!/usr/bin/env sh
|
|
# tools/update_romfs_password.sh
|
|
#
|
|
# Licensed to the Apache Software Foundation (ASF) under one or more
|
|
# contributor license agreements. See the NOTICE file distributed with
|
|
# this work for additional information regarding copyright ownership. The
|
|
# ASF licenses this file to you under the Apache License, Version 2.0 (the
|
|
# "License"); you may not use this file except in compliance with the
|
|
# License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
# Usage:
|
|
# update_romfs_password.sh <path-to-.config>
|
|
#
|
|
# When CONFIG_BOARD_ETC_ROMFS_PASSWD_ENABLE=y and the root password is not
|
|
# set in .config, copy NUTTX_ROMFS_PASSWD_PASSWORD into .config. This is the
|
|
# supported way to supply build-time credentials that must not live in defconfig
|
|
# (CI, automation, local scripts). No-op when the password is already set or
|
|
# ROMFS passwd generation is disabled.
|
|
|
|
set -e
|
|
|
|
CONFIG="${1}"
|
|
PASSWD_ENV="${NUTTX_ROMFS_PASSWD_PASSWORD:-}"
|
|
|
|
if [ -z "${CONFIG}" ]; then
|
|
printf 'Usage: update_romfs_password.sh <path-to-.config>\n' >&2
|
|
exit 1
|
|
fi
|
|
|
|
if [ ! -f "${CONFIG}" ]; then
|
|
exit 0
|
|
fi
|
|
|
|
if ! grep -q '^CONFIG_BOARD_ETC_ROMFS_PASSWD_ENABLE=y' "${CONFIG}"; then
|
|
exit 0
|
|
fi
|
|
|
|
# True when CONFIG_BOARD_ETC_ROMFS_PASSWD_PASSWORD is unset or empty in .config
|
|
get_password() {
|
|
grep -E '^CONFIG_BOARD_ETC_ROMFS_PASSWD_PASSWORD=' "${CONFIG}" 2>/dev/null \
|
|
| tail -n 1 \
|
|
| sed 's/^[^=]*=//' \
|
|
| tr -d '"'
|
|
}
|
|
|
|
cur=$(get_password)
|
|
if [ -n "${cur}" ]; then
|
|
exit 0
|
|
fi
|
|
|
|
if [ -z "${PASSWD_ENV}" ]; then
|
|
exit 0
|
|
fi
|
|
|
|
if [ "${#PASSWD_ENV}" -lt 8 ]; then
|
|
printf 'update_romfs_password: NUTTX_ROMFS_PASSWD_PASSWORD must be at least 8 characters\n' >&2
|
|
exit 1
|
|
fi
|
|
|
|
if command -v kconfig-tweak >/dev/null 2>&1; then
|
|
kconfig-tweak --file "${CONFIG}" \
|
|
--set-str CONFIG_BOARD_ETC_ROMFS_PASSWD_PASSWORD "${PASSWD_ENV}"
|
|
else
|
|
sed -i.bak -e '/^CONFIG_BOARD_ETC_ROMFS_PASSWD_PASSWORD=/d' "${CONFIG}"
|
|
rm -f "${CONFIG}.bak"
|
|
printf 'CONFIG_BOARD_ETC_ROMFS_PASSWD_PASSWORD="%s"\n' "${PASSWD_ENV}" >> "${CONFIG}"
|
|
fi
|