how to set root password like cloud-init ?

[ningmingxiao]

I use custom image

images:
- location: "https://mirrors.openanolis.cn/anolis/23.3/isos/GA/x86_64/AnolisOS-23.3-x86_64.qcow2"
  arch: "x86_64"
  digest: "sha256:cf530bbca8430942d9cf2ce91be3a9b647c7bb3cfd36f97519e3bf0aae6f6b7c"

error

INFO[0002] Downloaded the image from "/home/nmx001/AnolisOS-23.3-x86_64.qcow2" 
INFO[0002] [hostagent] hostagent socket created at /home/nmx001/.lima/default2/ha.sock 
INFO[0002] [hostagent] Using system firmware ("/usr/share/OVMF/OVMF_CODE.fd") 
INFO[0003] [hostagent] Starting QEMU (hint: to watch the boot progress, see "/home/nmx001/.lima/default2/serial*.log") 
INFO[0004] SSH Local Port: 45435                        
INFO[0003] [hostagent] Waiting for the essential requirement 1 of 2: "ssh" 

INFO[0013] [hostagent] Waiting for the essential requirement 1 of 2: "ssh" 
INFO[0023] [hostagent] Waiting for the essential requirement 1 of 2: "ssh" 
INFO[0033] [hostagent] Waiting for the essential requirement 1 of 2: "ssh" 
INFO[0043] [hostagent] Waiting for the essential requirement 1 of 2: "ssh" 
INFO[0053] [hostagent] Waiting for the essential requirement 1 of 2: "ssh" 
INFO[0063] [hostagent] Waiting for the essential requirement 1 of 2: "ssh" 
INFO[0073] [hostagent] Waiting for the essential requirement 1 of 2: "ssh" 
INFO[0083] [hostagent] Waiting for the essential requirement 1 of 2: "ssh" 
INFO[0094] [hostagent] Waiting for the essential requirement 1 of 2: "ssh" 
INFO[0104] [hostagent] Waiting for the essential requirement 1 of 2: "ssh" 
INFO[0114] [hostagent] Waiting for the essential requirement 1 of 2: "ssh" 
INFO[0124] [hostagent] Waiting for the essential requirement 1 of 2: "ssh" 
INFO[0134] [hostagent] Waiting for the essential requirement 1 of 2: "ssh" 
INFO[0144] [hostagent] Waiting for the essential requirement 1 of 2: "ssh"

but use socat - unix-connect:$HOME/.lima/default2/serial.sock can login but I can't change to root.

[afbjorklund]

There are no default passwords in cloud-init images, so if one is needed (for GUI login etc) it has to be set with passwd.

But the default user does have sudo access instead. You forgot to mention why you need a root password to be set?

[ningmingxiao]

I can't sudo -i to change root . I'm not sure which config is wrong. I use ubuntu24 works well. but use AnolisOS-23.3-x86_64.qcow2 failed.

nmx001@anolis root]$ socat - unix-connect:$HOME/.lima/anolis2/serial.sock
bash: socat: command not found...
Install package 'socat' to provide command 'socat'? [N/y] y


 * Waiting in queue... 
 * Loading list of packages.... 
The following packages have to be installed:
 socat-1.7.4.4-1.an23.x86_64    Bidirectional data relay between two data channels ('netcat++')
Proceed with changes? [N/y] y


 * Waiting in queue... 
 * Waiting for authentication... Failed to install packages: Failed to obtain authentication.

[nmx001@anolis root]$ sudo -i

We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these three things:

    #1) Respect the privacy of others.
    #2) Think before you type.
    #3) With great power comes great responsibility.

For security reasons, the password you type will not be visible.

[sudo] password for nmx001: 

[afbjorklund]

The socat is run on the host, you could also use another console program

Looks like something is broken on your OS, when setting up /etc/sudoers?

[ningmingxiao]

where can I find some useful logs ? @afbjorklund

[afbjorklund]

https://lima-vm.io/docs/faq/#hints-for-debugging-other-problems

You can also enable the video output (GUI), if that says anything?

[ningmingxiao]

DEBU[0017] [hostagent] executing script "ssh"
DEBU[0017] [hostagent] executing ssh for script "ssh": /usr/bin/ssh [ssh -F /dev/null -o IdentityFile="/home/nmx001/.lima/_config/user" -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o NoHostAuthenticationForLocalhost=yes -o PreferredAuthentications=publickey -o Compression=no -o BatchMode=yes -o IdentitiesOnly=yes -o GSSAPIAuthentication=no -o Ciphers="^aes128-gcm@openssh.com,aes256-gcm@openssh.com" -o User=nmx001 -o ControlMaster=auto -o ControlPath="/home/nmx001/.lima/default/ssh.sock" -o ControlPersist=yes -p 60022 127.0.0.1 -- /bin/bash -c "$(printf 'while read -r line; do [ -n "$line" ] && export "$line"; done<<EOF\n$(sudo cat /mnt/lima-cidata/param.env)\nEOF\n/bin/bash')"]
DEBU[0020] [hostagent] stdout="", stderr="kex_exchange_identification: read: Connection reset by peer\r\nConnection reset by 127.0.0.1 port 60022\r\n", err=failed to execute script "ssh": stdout="", stderr="kex_exchange_identification: read: Connection reset by peer\r\nConnection reset by 127.0.0.1 port 60022\r\n": exit status 255
INFO[0030] [hostagent] Waiting for the essential requirement 1 of 2: "ssh"

I find some err log.

[afbjorklund]

There seems to be two problems with that unsupported distribution:

1. The image does not use UEFI, so you need to enable BIOS support

firmware:
  legacyBIOS: true

2. The image you used is not the cloud image, so it lacks cloud-init

Please ask the vendor (OpenAnolis) for the right image to use, for "generic cloud".
It should be similar to the ones for CentOS Stream: https://cloud.centos.org/centos/

Or you might want to use a regular VM environment for it, like UTM*?

* or VirtualBox, something with an interactive GUI environment for you

---

https://openanolis.cn/news/298127596583371342

Anolis OS 8 is an open source Linux distribution issued by the OpenAnolis community. It is absolutely compatible with CentOS 8, supports multi-computing architecture, and provides a stable, high-performance, safe and reliable operating system.

(this was released in 2021, CentOS Linux 8 is now EOL)

https://www.alibabacloud.com/blog/introduction-to-openanolis-and-anolis-os_600645

https://www.alibabacloud.com/blog/the-open-source-folks-talk-episode-2-from-open-source-to-open-source_599304

The image requirements are documented in the FAQ:

https://lima-vm.io/docs/faq/#can-i-run-non-ubuntu-guests

[ningmingxiao]

thank you very much

[afbjorklund]

Unfortunately (for me, maybe) all the documention is in Chinese, but can be found here:

https://openanolis.cn/news/334391213648953345

https://mirrors.openanolis.cn/anolis/8.4/isos/GA/ReadMe.txt

So there is a default user with a default password, something that is bad security practice:

---

It doesn't seem to have any updates since 2022-2023, and the old 8.x release track?

Otherwise it looks like yet another RHEL clone, so better to run AlmaLinux instead...

So while it does seem to have upgraded to 8.10 now, missing out on the 9.x and 10.x

You can use ELevate to upgrade to them, notice that CentOS Stream 8.x is EOL now (2024)

[ningmingxiao]

Thank you. use a static password is really dangerous. I will try to fix it. @afbjorklund