Docs for share passwords and pxe_admin_password; Upload-Image.ps1 back to CRLF

KB: Part 4 step 5 (Tools > Share accounts), the Upload-Image password
prompt, the new site-vars rows and example, share sign-in without the
shipped password, and that a re-run keeps the webapp's share passwords.
site-vars examples and SITE-CUSTOMIZATION.md list the new keys.
Upload-Image.ps1 lost its CRLF line endings in fa79f76; restored.
This commit is contained in:
cproudlock
2026-10-17 12:31:29 -04:00
parent fa79f76951
commit 7572692b84
5 changed files with 711 additions and 661 deletions

View File

@@ -85,10 +85,17 @@ restores the previous netplan config AND NIC names on any failure. Backups:
| Value | Default | Where it lives |
|-----------------------------|---------------------------------------|---------------------------------------------------------|
| Linux user | pxe / pxe | `autoinstall/user-data` (identity.username, password hash) |
| Samba upload user | pxe-upload / pxe | `playbook/pxe_server_setup.yml` (Samba user creation) |
| Samba blancco user | blancco / blancco | `playbook/pxe_server_setup.yml` |
| Sudo password | pxe | autoinstall password hash; also referenced in scripts that ssh + sudo |
| Linux user | pxe / pxe at install | `autoinstall/user-data` hash; site-vars `pxe_admin_password` (required) replaces it on first boot |
| Samba upload user | pxe-upload / pxe | webapp Tools > Share accounts (seed: site-vars `pxe_upload_password`) |
| Samba blancco user | blancco / blancco | webapp Tools > Share accounts (seed: site-vars `blancco_smb_password`) |
| Samba clonezilla user | clonezilla / clonezilla-backup | webapp Tools > Share accounts (seed: site-vars `clonezilla_smb_password`) |
| Sudo password | = Linux user | dev scripts that ssh + sudo read `PXE_PASS` (default pxe) |
The three Samba passwords are stored by the webapp
(`/var/lib/pxe-webapp/updates/shares/accounts.json`, 0600) and applied by
`webapp/services/share_accounts.py` to Samba, startnet.cmd in boot.wim, the
iPXE menu and the Blancco preferences; every playbook run re-applies them,
so site-vars only seeds them.
### WiFi and BMC (Blancco licensing)
@@ -245,8 +252,8 @@ site:
credentials:
pxe_user: pxe
pxe_password: pxe
pxe_upload_password: pxe
blancco_password: blancco
pxe_upload_password: <per site>
blancco_password: <per site>
blancco:
wifi_ssid: INTERNETACCESS