Add auto-login getty services and empty root password

feiyu11859661 · feiyu11859661 · commit b2c80877dcb7 · 2025-10-28T13:14:41.000+08:00
Add getty@.service and serial-getty@.service files to enable root auto-login
on tty1 and ttyS0 terminals. Configure systems to use empty root passwords
by default across azl3, emt3, and elxr12 platforms. Modified imageos.go
to handle empty password cases by deleting passwords when none is set.

The changes allow for iso initrd automatically log in and start installer
scripts.

Signed-off-by: Yu, Fei &lt;fei.yu@intel.com&gt;
diff --git a/config/osv/azure-linux/azl3/imageconfigs/additionalfiles/getty@.service b/config/osv/azure-linux/azl3/imageconfigs/additionalfiles/getty@.service
@@ -0,0 +1,7 @@
+[Service]
+ExecStart=
+ExecStart=-/sbin/agetty --noclear --autologin root --keep-baud %I $TERM
+
+# Default to tty1 but allow other choices
+[Install]
+Alias=getty.target.wants/getty@tty1.service
diff --git a/config/osv/azure-linux/azl3/imageconfigs/additionalfiles/serial-getty@.service b/config/osv/azure-linux/azl3/imageconfigs/additionalfiles/serial-getty@.service
@@ -0,0 +1,7 @@
+[Service]
+ExecStart=
+ExecStart=-/sbin/agetty --noclear --autologin root --keep-baud %I $TERM
+
+# Default to ttyS0 but allow other choices
+[Install]
+Alias=getty.target.wants/serial-getty@ttyS0.service
diff --git a/config/osv/azure-linux/azl3/imageconfigs/defaultconfigs/default-initrd-x86_64.yml b/config/osv/azure-linux/azl3/imageconfigs/defaultconfigs/default-initrd-x86_64.yml
@@ -88,6 +88,15 @@ systemConfig:
   additionalFiles:
     - local: ../additionalfiles/99-dhcp-en.network
       final: /etc/systemd/network/99-dhcp-en.network
+    - local: ../additionalfiles/getty@.service
+      final: /usr/lib/systemd/system/getty@.service
+    - local: ../additionalfiles/serial-getty@.service
+      final: /usr/lib/systemd/system/serial-getty@.service
+
+  users:
+    - name: root
+      passwordMaxAge: 99999
+      password: ""
 
   kernel:
     name: kernel
diff --git a/config/osv/edge-microvisor-toolkit/emt3/imageconfigs/additionalfiles/getty@.service b/config/osv/edge-microvisor-toolkit/emt3/imageconfigs/additionalfiles/getty@.service
@@ -0,0 +1,7 @@
+[Service]
+ExecStart=
+ExecStart=-/sbin/agetty --noclear --autologin root --keep-baud %I $TERM
+
+# Default to tty1 but allow other choices
+[Install]
+Alias=getty.target.wants/getty@tty1.service
diff --git a/config/osv/edge-microvisor-toolkit/emt3/imageconfigs/additionalfiles/serial-getty@.service b/config/osv/edge-microvisor-toolkit/emt3/imageconfigs/additionalfiles/serial-getty@.service
@@ -0,0 +1,7 @@
+[Service]
+ExecStart=
+ExecStart=-/sbin/agetty --noclear --autologin root --keep-baud %I $TERM
+
+# Default to ttyS0 but allow other choices
+[Install]
+Alias=getty.target.wants/serial-getty@ttyS0.service
diff --git a/config/osv/edge-microvisor-toolkit/emt3/imageconfigs/defaultconfigs/default-initrd-x86_64.yml b/config/osv/edge-microvisor-toolkit/emt3/imageconfigs/defaultconfigs/default-initrd-x86_64.yml
@@ -88,6 +88,15 @@ systemConfig:
   additionalFiles:
     - local: ../additionalfiles/99-dhcp-en.network
       final: /etc/systemd/network/99-dhcp-en.network
+    - local: ../additionalfiles/getty@.service
+      final: /usr/lib/systemd/system/getty@.service
+    - local: ../additionalfiles/serial-getty@.service
+      final: /usr/lib/systemd/system/serial-getty@.service
+
+  users:
+    - name: root
+      passwordMaxAge: 99999
+      password: ""
 
   kernel:
     name: kernel
diff --git a/config/osv/wind-river-elxr/elxr12/imageconfigs/additionalfiles/getty@.service b/config/osv/wind-river-elxr/elxr12/imageconfigs/additionalfiles/getty@.service
@@ -0,0 +1,7 @@
+[Service]
+ExecStart=
+ExecStart=-/sbin/agetty --noclear --autologin root --keep-baud %I $TERM
+
+# Default to tty1 but allow other choices
+[Install]
+Alias=getty.target.wants/getty@tty1.service
diff --git a/config/osv/wind-river-elxr/elxr12/imageconfigs/additionalfiles/serial-getty@.service b/config/osv/wind-river-elxr/elxr12/imageconfigs/additionalfiles/serial-getty@.service
@@ -0,0 +1,7 @@
+[Service]
+ExecStart=
+ExecStart=-/sbin/agetty --noclear --autologin root --keep-baud %I $TERM
+
+# Default to ttyS0 but allow other choices
+[Install]
+Alias=getty.target.wants/serial-getty@ttyS0.service
diff --git a/config/osv/wind-river-elxr/elxr12/imageconfigs/defaultconfigs/default-initrd-x86_64.yml b/config/osv/wind-river-elxr/elxr12/imageconfigs/defaultconfigs/default-initrd-x86_64.yml
@@ -44,6 +44,15 @@ systemConfig:
       final: /etc/systemd/network/dhcp.network
     - local: ../additionalfiles/elxr-aria.list
       final: /etc/apt/sources.list.d/elxr-aria.list
+    - local: ../additionalfiles/getty@.service
+      final: /usr/lib/systemd/system/getty@.service
+    - local: ../additionalfiles/serial-getty@.service
+      final: /usr/lib/systemd/system/serial-getty@.service
+
+  users:
+    - name: root
+      passwordMaxAge: 99999
+      password: ""
 
   kernel:
     name: kernel
diff --git a/internal/chroot/chrootenv.go b/internal/chroot/chrootenv.go
@@ -444,7 +444,6 @@ func (chrootEnv *ChrootEnv) CleanupChrootEnv(targetOs, targetDist, targetArch st
 					if _, err := shell.ExecCmd("rm -f "+chrootRepoCongfigPath+"/*", true, shell.HostPath, nil); err != nil {
 						return fmt.Errorf("failed to remove existing local repo config files: %w", err)
 					}
-					repoConfigBackupPath := filepath.Join(chrootEnv.ChrootEnvRoot, "repo-config-backup")
 					if err := file.CopyDir(repoConfigBackupPath, chrootRepoCongfigPath, "-f", true); err != nil {
 						return fmt.Errorf("failed to backup existing repo config files: %w", err)
 					}
diff --git a/internal/image/imageos/imageos.go b/internal/image/imageos/imageos.go
@@ -1199,6 +1199,13 @@ func createUser(installRoot string, template *config.ImageTemplate) error {
 			if err := setUserPassword(installRoot, user); err != nil {
 				return fmt.Errorf("failed to set password for user %s: %w", user.Name, err)
 			}
+		} else {
+			cmd := fmt.Sprintf("passwd -d %s", user.Name)
+			if _, err := shell.ExecCmd(cmd, true, installRoot, nil); err != nil {
+				log.Errorf("Failed to delete password for user %s: %v", user.Name, err)
+				return fmt.Errorf("failed to delete password for user %s: %w", user.Name, err)
+			}
+			log.Debugf("Deleted password for user %s (no password set)", user.Name)
 		}
 
 		// Add user to groups if specified, filtering out template placeholders

Original file line number	Diff line number	Diff line change
`@@ -444,7 +444,6 @@ func (chrootEnv *ChrootEnv) CleanupChrootEnv(targetOs, targetDist, targetArch st`
`444`	`444`	`if _, err := shell.ExecCmd("rm -f "+chrootRepoCongfigPath+"/*", true, shell.HostPath, nil); err != nil {`
`445`	`445`	`return fmt.Errorf("failed to remove existing local repo config files: %w", err)`
`446`	`446`	`}`
`447`		`- repoConfigBackupPath := filepath.Join(chrootEnv.ChrootEnvRoot, "repo-config-backup")`
`448`	`447`	`if err := file.CopyDir(repoConfigBackupPath, chrootRepoCongfigPath, "-f", true); err != nil {`
`449`	`448`	`return fmt.Errorf("failed to backup existing repo config files: %w", err)`
`450`	`449`	`}`