From ca64d291023c59a71a24e560d64561e3dabfcc1f Mon Sep 17 00:00:00 2001
From: Artem Senichev <a.senichev@yadro.com>
Date: Sun, 10 May 2020 10:28:02 +0300
Subject: meta-nicole: Add default account for administrator

Creates default administrative account for managing the OpenBMC.

(From meta-yadro rev: 7eef85ee0d2e6f8100c06c0f9a9cb52c941ecd50)

Signed-off-by: Artem Senichev <a.senichev@yadro.com>
Change-Id: If4aa85ace08c9628e98252f00c508fbf28385c9b
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>
---
 .../images/obmc-phosphor-image.bbappend            |  1 +
 .../recipes-phosphor/users/admin-account.bb        | 38 ++++++++++++++++++++++
 2 files changed, 39 insertions(+)
 create mode 100644 meta-yadro/meta-nicole/recipes-phosphor/users/admin-account.bb

(limited to 'meta-yadro')

diff --git a/meta-yadro/meta-nicole/recipes-phosphor/images/obmc-phosphor-image.bbappend b/meta-yadro/meta-nicole/recipes-phosphor/images/obmc-phosphor-image.bbappend
index 46b1decf7d..8f69024d17 100644
--- a/meta-yadro/meta-nicole/recipes-phosphor/images/obmc-phosphor-image.bbappend
+++ b/meta-yadro/meta-nicole/recipes-phosphor/images/obmc-phosphor-image.bbappend
@@ -1,4 +1,5 @@
 OBMC_IMAGE_EXTRA_INSTALL_append = " \
+    admin-account \
     first-boot-set-hostname \
     first-boot-set-mac \
     mboxd \
diff --git a/meta-yadro/meta-nicole/recipes-phosphor/users/admin-account.bb b/meta-yadro/meta-nicole/recipes-phosphor/users/admin-account.bb
new file mode 100644
index 0000000000..d94952e1f7
--- /dev/null
+++ b/meta-yadro/meta-nicole/recipes-phosphor/users/admin-account.bb
@@ -0,0 +1,38 @@
+SUMMARY = "Default administrative account"
+DESCRIPTION = "Creating default account for system administrator"
+PR = "r1"
+
+inherit useradd
+
+# License info
+LICENSE = "Apache-2.0"
+LIC_FILES_CHKSUM = "file://${COREBASE}/meta/files/common-licenses/Apache-2.0;md5=89aea4e17d99a7cacdbeed46a0096b10"
+
+# Dependencies
+DEPENDS = "sudo \
+           phosphor-ipmi-host \
+           phosphor-user-manager"
+
+# Groups
+GROUP_ADMIN = "priv-admin"
+GROUP_OPERATOR = "priv-operator"
+GROUP_USER = "priv-user"
+GROUP_IPMI = "ipmi"
+GROUP_SUDO = "sudo"
+
+# Default administrative account (login: admin, password: admin)
+ADMIN_LOGIN = "admin"
+ADMIN_PASSW = "\$1\$Fze0kFe8\$sylEANC01t.osF8OewyB/1"
+USERADD_PACKAGES = "${PN}"
+USERADD_PARAM_${PN} = "--gid ${GROUP_ADMIN} \
+                       --groups ${GROUP_ADMIN},${GROUP_OPERATOR},${GROUP_USER},${GROUP_IPMI},${GROUP_SUDO} \
+                       --password '${ADMIN_PASSW}' \
+                       ${ADMIN_LOGIN}"
+
+# We don't have package body
+ALLOW_EMPTY_${PN} = "1"
+
+# Workaround for meta-phosphor/classes/phosphor-rootfs-postcommands.bbclass.
+# The bb-script cannot add root to non-empty groups (invalid sed command).
+GROUPMEMS_PARAM_${PN} = "-a root -g ${GROUP_ADMIN}; \
+                         -a root -g ${GROUP_IPMI}"
-- 
cgit v1.2.3