fix: Fail if RMT_PASSWORD is not set but used

DSD-DBS · Sep 20, 2023 · 12bf0bf · 12bf0bf
1 parent 16bf16c
commit 12bf0bf
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/readonly/startup.sh b/readonly/startup.sh
@@ -5,8 +5,10 @@
 
 set -exuo pipefail
 
+salt=$(openssl rand -base64 16)
+password_hash=$(openssl passwd -6 -salt ${salt} "${RMT_PASSWORD:?}")
 line=$(grep techuser /etc/shadow);
-echo ${line%%:*}:$(openssl passwd -6 -salt $(openssl rand -base64 16) "${RMT_PASSWORD:?}"):${line#*:*:} > /etc/shadow;
+echo ${line%%:*}:${password_hash}:${line#*:*:} > /etc/shadow;
 unset RMT_PASSWORD
 
 # Prepare Workspace

diff --git a/remote/startup.sh b/remote/startup.sh
@@ -7,8 +7,10 @@ set -exuo pipefail
 
 if [ "$(whoami)" == "root" ] || [ "$(whoami)" == "techuser" ];
 then
+    salt=$(openssl rand -base64 16)
+    password_hash=$(openssl passwd -6 -salt ${salt} "${RMT_PASSWORD:?}")
     line=$(grep techuser /etc/shadow);
-    echo ${line%%:*}:$(openssl passwd -6 -salt $(openssl rand -base64 16) "${RMT_PASSWORD:?}"):${line#*:*:} > /etc/shadow;
+    echo ${line%%:*}:${password_hash}:${line#*:*:} > /etc/shadow;
 else
     echo "Only techuser and root are supported as users.";
     exit 1;