On Tue, Jul 15, 2014 at 11:54:29AM -0400, Nico Kadel-Garcia wrote:
I do the opposite and don’t lock the root user, but lock it in %post
# Install locked root password rootpw --iscrypted ***LOCKED***
FWIW, we do this in Fedora as well. (I guess with the philosophy of... using all of the possible solutions at once?)
If you have to add '%post' steps, add this first to preserve a copy for stability. %post /bin/cp /tmp/ks.cfg /mnt/sysimage/root/ks.cfg
For the Fedora images, we're building them in Koji, so you can see the kickstart used directly. http://koji.fedoraproject.org/koji/taskinfo?taskID=7127840