linode · harsh-akamai · Mar 23, 2026 · Mar 24, 2026 · Mar 24, 2026 · Mar 24, 2026
@@ -7,7 +7,6 @@
 import type {
   CreateLinodeInterfaceSchema,
   ModifyLinodeInterfaceSchema,
-  RebuildLinodeSchema,
   UpdateLinodeInterfaceSettingsSchema,
   UpgradeToLinodeInterfaceSchema,
 } from '@linode/validation';
@@ -653,6 +652,11 @@
    * @default false
    */
   backups_enabled?: boolean | null;
+  /**
+   * When deploying from an Image, this field is optional, otherwise it is ignored.
+   * This is used to set the boot size for the newly-created Linode.
+   */
+  boot_size?: null | number;
   /**
    * If it is deployed from an Image or a Backup and you wish it to remain offline after deployment, set this to false.
    *
@@ -694,6 +698,11 @@
    * Must be empty if Linode is configured to use new Linode Interfaces.
    */
   ipv4?: string[];
+  /**
+   * When deploying from an Image, this field is optional, otherwise it is ignored.
+   * This is used to set the kernel type for the newly-created Linode.
+   */
+  kernel?: null | string;
   /**
    * The Linode's label is for display purposes only.
    * If no label is provided for a Linode, a default will be assigned.
@@ -779,7 +788,19 @@
   type?: null | string;
 }
 
-export type RebuildRequest = InferType<typeof RebuildLinodeSchema>;
+export interface RebuildRequest {
+  authorized_keys?: string[];
+  authorized_users?: string[];
+  booted?: boolean;
+  disk_encryption?: 'disabled' | 'enabled';
+  image: string;
+  metadata?: {
+    user_data: null | string;
+  };
+  root_pass?: string;
+  stackscript_data?: null | {};
+  stackscript_id?: number;
+}
 
 export interface LinodeDiskCreationData {
   authorized_keys?: string[];

@@ -49,6 +49,7 @@ const options: { flag: keyof Flags; label: string }[] = [
   { flag: 'objMultiCluster', label: 'OBJ Multi-Cluster' },
   { flag: 'objectStorageGen2', label: 'OBJ Gen2' },
   { flag: 'objectStorageGlobalQuotas', label: 'OBJ Global Quotas' },
+  { flag: 'passwordlessLinodes', label: 'PasswordLess Linodes' },
   {
     flag: 'placementGroupPolicyUpdate',
     label: 'Placement Group Policy Update',

@@ -273,6 +273,7 @@ export interface Flags {
   objectStorageGlobalQuotas: boolean;
   objMultiCluster: boolean;
   objSummaryPage: boolean;
+  passwordlessLinodes: boolean;
   placementGroupPolicyUpdate: boolean;
   privateImageSharing: boolean;
   productInformationBanners: ProductInformationBannerFlag[];

@@ -0,0 +1,67 @@
+import { Notice, Typography } from '@linode/ui';
+import React from 'react';
+import { Controller, useFormContext } from 'react-hook-form';
+
+import { Skeleton } from 'src/components/Skeleton';
+import { usePermissions } from 'src/features/IAM/hooks/usePermissions';
+import { useIsPasswordLessLinodesEnabled } from 'src/utilities/linodes';
+
+import type { CreateLinodeRequest } from '@linode/api-v4';
+
+const PasswordInput = React.lazy(() =>
+  import('src/components/PasswordInput/PasswordInput').then((module) => ({
+    default: module.PasswordInput,
+  }))
+);
+
+export const Password = () => {
+  const { control, formState } = useFormContext<CreateLinodeRequest>();
+  const { data: permissions } = usePermissions('account', ['create_linode']);
+  const { isPasswordLessLinodesEnabled } = useIsPasswordLessLinodesEnabled();
+
+  return (
+    <>
+      {isPasswordLessLinodesEnabled && (
+        <>
+          <Typography mb={2} variant="h2">
+            Authentication Method
+          </Typography>
+          {formState.errors.root_pass?.message && (
+            <Notice text={formState.errors.root_pass.message} variant="error" />
+          )}
+        </>
+      )}
+      <React.Suspense
+        fallback={
+          <Skeleton
+            sx={(theme) => ({ height: '89px', maxWidth: theme.inputMaxWidth })}
+          />
+        }
+      >
+        <Controller
+          control={control}
+          name="root_pass"
+          render={({ field, fieldState }) => (
+            <PasswordInput
+              autoComplete="off"
+              disabled={!permissions.create_linode}
+              errorText={
+                !isPasswordLessLinodesEnabled
+                  ? fieldState.error?.message
+                  : undefined
+              }
+              id="linode-password"
+              label="Root Password"
+              name="password"
+              noMarginTop
+              onBlur={field.onBlur}
+              onChange={field.onChange}
+              placeholder="Enter a password."
+              value={field.value ?? ''}
+            />
+          )}
+        />
+      </React.Suspense>
+    </>
+  );
+};
@@ -0,0 +1,26 @@
+import React from 'react';
+import { Controller, useFormContext } from 'react-hook-form';
+
+import { UserSSHKeyPanel } from 'src/components/AccessPanel/UserSSHKeyPanel';
+import { usePermissions } from 'src/features/IAM/hooks/usePermissions';
+
+import type { CreateLinodeRequest } from '@linode/api-v4';
+
+export const SSHKeys = () => {
+  const { control } = useFormContext<CreateLinodeRequest>();
+  const { data: permissions } = usePermissions('account', ['create_linode']);
+
+  return (
+    <Controller
+      control={control}
+      name="authorized_users"
+      render={({ field }) => (
+        <UserSSHKeyPanel
+          authorizedUsers={field.value ?? []}
+          disabled={!permissions.create_linode}
+          setAuthorizedUsers={field.onChange}
+        />
+      )}
+    />
+  );
+};
@@ -13,7 +13,7 @@ import {
 
 import { Security } from './Security';
 
-import type { LinodeCreateFormValues } from './utilities';
+import type { LinodeCreateFormValues } from '../utilities';
 
 const queryMocks = vi.hoisted(() => ({
   useNavigate: vi.fn(),

@@ -3,7 +3,6 @@ import { Divider, Paper, Typography } from '@linode/ui';
 import React from 'react';
 import { Controller, useFormContext, useWatch } from 'react-hook-form';
 
-import { UserSSHKeyPanel } from 'src/components/AccessPanel/UserSSHKeyPanel';
 import {
   DISK_ENCRYPTION_DEFAULT_DISTRIBUTED_INSTANCES,
   DISK_ENCRYPTION_DISTRIBUTED_DESCRIPTION,
@@ -13,16 +12,12 @@ import {
 import { Encryption } from 'src/components/Encryption/Encryption';
 import { useIsDiskEncryptionFeatureEnabled } from 'src/components/Encryption/utils';
 import { getIsDistributedRegion } from 'src/components/RegionSelect/RegionSelect.utils';
-import { Skeleton } from 'src/components/Skeleton';
-import { usePermissions } from 'src/features/IAM/hooks/usePermissions';
+import { useIsPasswordLessLinodesEnabled } from 'src/utilities/linodes';
 
-import type { CreateLinodeRequest } from '@linode/api-v4';
+import { Password } from './Password';
+import { SSHKeys } from './SSHKeys';
 
-const PasswordInput = React.lazy(() =>
-  import('src/components/PasswordInput/PasswordInput').then((module) => ({
-    default: module.PasswordInput,
-  }))
-);
+import type { CreateLinodeRequest } from '@linode/api-v4';
 
 export const Security = () => {
   const { control } = useFormContext<CreateLinodeRequest>();
@@ -45,52 +40,26 @@ export const Security = () => {
     selectedRegion?.id ?? ''
   );
 
-  const { data: permissions } = usePermissions('account', ['create_linode']);
+  const { isPasswordLessLinodesEnabled } = useIsPasswordLessLinodesEnabled();
 
   return (
     <Paper>
       <Typography sx={{ mb: 2 }} variant="h2">
         Security
       </Typography>
-      <React.Suspense
-        fallback={
-          <Skeleton
-            sx={(theme) => ({ height: '89px', maxWidth: theme.inputMaxWidth })}
-          />
-        }
-      >
-        <Controller
-          control={control}
-          name="root_pass"
-          render={({ field, fieldState }) => (
-            <PasswordInput
-              autoComplete="off"
-              disabled={!permissions.create_linode}
-              errorText={fieldState.error?.message}
-              id="linode-password"
-              label="Root Password"
-              name="password"
-              noMarginTop
-              onBlur={field.onBlur}
-              onChange={field.onChange}
-              placeholder="Enter a password."
-              value={field.value ?? ''}
-            />
-          )}
-        />
-      </React.Suspense>
-      <Divider spacingBottom={20} spacingTop={24} />
-      <Controller
-        control={control}
-        name="authorized_users"
-        render={({ field }) => (
-          <UserSSHKeyPanel
-            authorizedUsers={field.value ?? []}
-            disabled={!permissions.create_linode}
-            setAuthorizedUsers={field.onChange}
-          />
-        )}
-      />
+      {!isPasswordLessLinodesEnabled ? (
+        <>
+          <Password />
+          <Divider spacingBottom={20} spacingTop={24} />
+          <SSHKeys />
+        </>
+      ) : (
+        <>
+          <SSHKeys />
+          <Divider spacingBottom={20} spacingTop={24} />
+          <Password />
+        </>
+      )}
       {isDiskEncryptionFeatureEnabled && (
         <>
           <Divider spacingBottom={20} spacingTop={24} />

@@ -45,6 +45,7 @@ import {
 import {
   useIsLinodeCloneFirewallEnabled,
   useIsLinodeInterfacesEnabled,
+  useIsPasswordLessLinodesEnabled,
 } from 'src/utilities/linodes';
 import { sanitizeHTML } from 'src/utilities/sanitizeHTML';
 
@@ -60,7 +61,7 @@ import { Networking } from './Networking/Networking';
 import { transformLegacyInterfaceErrorsToLinodeInterfaceErrors } from './Networking/utilities';
 import { Plan } from './Plan';
 import { getLinodeCreateResolver } from './resolvers';
-import { Security } from './Security';
+import { Security } from './Security/Security';
 import { SMTP } from './SMTP';
 import { Summary } from './Summary/Summary';
 import { UserData } from './UserData/UserData';
@@ -86,6 +87,7 @@ export const LinodeCreate = () => {
   });
   const { secureVMNoticesEnabled } = useSecureVMNoticesEnabled();
   const { isLinodeInterfacesEnabled } = useIsLinodeInterfacesEnabled();
+  const { isPasswordLessLinodesEnabled } = useIsPasswordLessLinodesEnabled();
   const { data: profile } = useProfile();
   const { isLinodeCloneFirewallEnabled } = useIsLinodeCloneFirewallEnabled();
   const { isVMHostMaintenanceEnabled } = useVMHostMaintenanceEnabled();
@@ -103,7 +105,12 @@ export const LinodeCreate = () => {
   const { isDualStackEnabled } = useVPCDualStack();
 
   const form = useForm<LinodeCreateFormValues, LinodeCreateFormContext>({
-    context: { isLinodeInterfacesEnabled, profile, secureVMNoticesEnabled },
+    context: {
+      isPasswordLessLinodesEnabled,
+      isLinodeInterfacesEnabled,
+      profile,
+      secureVMNoticesEnabled,
+    },
     defaultValues: () =>
       defaultValues(linodeCreateType, search, queryClient, {
         isLinodeInterfacesEnabled,

@@ -10,6 +10,8 @@ import {
   CreateLinodeFromMarketplaceAppSchema,
   CreateLinodeFromStackScriptSchema,
   CreateLinodeSchema,
+  withRootPassOptional,
+  withRootPassRequired,
 } from './schemas';
 import {
   getDoesEmployeeNeedToAssignFirewall,
@@ -27,12 +29,15 @@ export const getLinodeCreateResolver = (
   tab: LinodeCreateType | undefined,
   queryClient: QueryClient
 ): Resolver<LinodeCreateFormValues, LinodeCreateFormContext> => {
-  const schema = linodeCreateResolvers[tab ?? 'OS'];
   return async (rawValues, context, options) => {
+    const linodeCreateSchemas = linodeCreateResolvers(
+      context?.isPasswordLessLinodesEnabled ?? false
+    );
+    const schema = linodeCreateSchemas[tab ?? 'OS'];
     const values = structuredClone(rawValues);
 
     // Because `interfaces` are so complex, we need to perform some transformations before
-    // we even try to valiate them with our vaidation schema.
+    // we even try to validate them with our vaidation schema.
     if (context?.isLinodeInterfacesEnabled) {
       values.interfaces = [];
       values.linodeInterfaces = values.linodeInterfaces.map(
@@ -136,11 +141,28 @@ export const getLinodeCreateResolver = (
   };
 };
 
-export const linodeCreateResolvers = {
-  Backups: CreateLinodeFromBackupSchema,
-  'Clone Linode': CreateLinodeSchema,
-  Images: CreateLinodeSchema,
-  OS: CreateLinodeSchema,
-  'One-Click': CreateLinodeFromMarketplaceAppSchema,
-  StackScripts: CreateLinodeFromStackScriptSchema,
+// This function returns the appropriate validation schema based on whether or not passwordLess Linodes are enabled. If passwordLess Linodes are enabled, then the root_pass field is optional. If passwordLess Linodes are not enabled, then the root_pass field is required.
+// Creating Linodes from Backups and Cloning Linodes do not require a root password, so they are unaffected by the passwordLess Linodes feature and their schemas remain the same regardless of whether or not passwordLess Linodes are enabled.
+export const linodeCreateResolvers = (
+  isPasswordLessLinodesEnabled: boolean
+) => {
+  if (!isPasswordLessLinodesEnabled) {
+    return {
+      Backups: CreateLinodeFromBackupSchema,
+      'Clone Linode': CreateLinodeSchema,
+      Images: withRootPassRequired(CreateLinodeSchema),
+      OS: withRootPassRequired(CreateLinodeSchema),
+      'One-Click': withRootPassRequired(CreateLinodeFromMarketplaceAppSchema),
+      StackScripts: withRootPassRequired(CreateLinodeFromStackScriptSchema),
+    };
+  }
+
+  return {
+    Backups: CreateLinodeFromBackupSchema,
+    'Clone Linode': CreateLinodeSchema,
+    Images: withRootPassOptional(CreateLinodeSchema),
+    OS: withRootPassOptional(CreateLinodeSchema),
+    'One-Click': withRootPassOptional(CreateLinodeFromMarketplaceAppSchema),
+    StackScripts: withRootPassOptional(CreateLinodeFromStackScriptSchema),
+  };
 };