From ff3b3c860e551a9bfbb710870ebca10b055663fa Mon Sep 17 00:00:00 2001 From: archipelago Date: Fri, 7 Aug 2026 20:27:50 -0400 Subject: [PATCH] fix(iso): stop printing a web password that doesn't work MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The installer's completion screen and the login-console banner both told the operator "Web Login password123". No release build accepts that password: no default account is ever created (`main.rs:356-362`), and the `password123` pre-setup path is `#[cfg(debug_assertions)]` + `dev_mode` (`api/rpc/auth.rs:36-46`). A new user following the screen gets "User not set up. Please complete setup first." on their first-ever interaction with the product. Both screens now say the web UI asks you to create a password on first visit, which is what `Login.vue` actually does when `auth.isSetup` returns false. The SSH line is unchanged — `archipelago`/`archipelago` really does still ship (`install-to-disk.sh:205`), and killing that is the open half of the "kill default credentials" hardening item. Note on the path: `image-recipe/build-debian-iso.sh` is a thin wrapper that copies `_archived/build-auto-installer-iso.sh` and rewrites its relative paths, so despite the directory name the archived builder is the live one. Same string fixed in scripts/install-tui-demo.sh, which mirrors the screen. Co-Authored-By: Claude Opus 5 (1M context) --- image-recipe/_archived/build-auto-installer-iso.sh | 5 +++-- scripts/install-tui-demo.sh | 2 +- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/image-recipe/_archived/build-auto-installer-iso.sh b/image-recipe/_archived/build-auto-installer-iso.sh index a652cab4..685d6cb9 100755 --- a/image-recipe/_archived/build-auto-installer-iso.sh +++ b/image-recipe/_archived/build-auto-installer-iso.sh @@ -3240,7 +3240,8 @@ if [ -t 0 ] && [ -z "$ARCHIPELAGO_WELCOMED" ]; then if [ -n "$IP" ]; then echo -e " ${W}web ui http://$IP${N}" echo -e " ${W}ssh archipelago@$IP${N}" - echo -e " ${W}password archipelago (SSH) / password123 (Web)${N}" + echo -e " ${W}password archipelago (SSH)${N}" + echo -e " ${OD}web ui asks you to create a password on first visit${N}" else echo -e " ${OD}Waiting for network...${N}" fi @@ -4076,7 +4077,7 @@ p "${ORANGE} http://${NC}" echo "" p "${WHITE} SSH ssh archipelago@${NC}" p "${WHITE} Password archipelago${NC}" -p "${WHITE} Web Login password123${NC}" +p "${WHITE} Web Login create your password on first visit${NC}" echo "" hrule echo "" diff --git a/scripts/install-tui-demo.sh b/scripts/install-tui-demo.sh index 79168699..c5c16da2 100755 --- a/scripts/install-tui-demo.sh +++ b/scripts/install-tui-demo.sh @@ -587,7 +587,7 @@ screen_complete() { p " ${WHITE}Password archipelago${NC}" row=$((row + 1)) goto $row 1 - p " ${WHITE}Web Login password123${NC}" + p " ${WHITE}Web Login create your password on first visit${NC}" row=$((row + 2)) goto $row 1; hrule; row=$((row + 2))