summaryrefslogtreecommitdiff
path: root/installer/build.sh
diff options
context:
space:
mode:
authortranch <tranch.xiao@gmail.com>2026-07-29 17:05:41 +0800
committertranch <tranch.xiao@gmail.com>2026-07-29 17:05:41 +0800
commitd8983c361705874558a20328ce3355852208c178 (patch)
treebe4a8022ba6467528989105e0618ad55788949f5 /installer/build.sh
parentafe0884c451f5f3698779c7cfe8085ac0c4923a2 (diff)
downloadAeroCore-OS-d8983c361705874558a20328ce3355852208c178.tar.gz
AeroCore-OS-d8983c361705874558a20328ce3355852208c178.zip
Fix weak password crash in Live installer
Restore the Cockpit force-password behavior embedded in Fedora 43's Anaconda WebUI bundle. Apply strict password policy through conf.d so weak passwords remain a form validation error instead of aborting the installer.
Diffstat (limited to 'installer/build.sh')
-rwxr-xr-xinstaller/build.sh5
1 files changed, 5 insertions, 0 deletions
diff --git a/installer/build.sh b/installer/build.sh
index 3093dcc..4535113 100755
--- a/installer/build.sh
+++ b/installer/build.sh
@@ -31,6 +31,11 @@ dnf --setopt=excludepkgs= reinstall -y \
grub2-efi-x64 \
grub2-efi-x64-cdboot
+# Fedora 43's anaconda-webui bundle embeds a Cockpit password helper from
+# before cockpit-project/cockpit@900c13f. Restore that upstream fix so a weak
+# pwscore result is returned as score 0 instead of rejecting the WebUI promise.
+"${SCRIPT_DIR}/patch-anaconda-webui.sh"
+
# Apply the same AeroCore overlay to the live session where possible.
if [[ -d /src/system_files ]]; then
cp -a /src/system_files/. /