Skip to content

Feat/generated storage passphrase - #4

Merged
anhthii merged 3 commits into
mainfrom
feat/generated-storage-passphrase
Oct 13, 2026
Merged

anhthii merged 3 commits into
mainfrom
feat/generated-storage-passphrase

Conversation

@anhthii

@anhthii anhthii commented Oct 13, 2026

Copy link
Copy Markdown
Contributor

No description provided.

Fresh interactive installs now generate the storage passphrase instead of
asking the operator to choose one, show it once behind an orange backup
warning, and require it to be typed back. Unlock accepts the words separated
by spaces or hyphens in any case, after first trying the exact input so
existing chosen passwords keep working. Scripted installs using
COSIGNER_PASSWORD_FD or COSIGNER_PASSWORD are unchanged.
The passphrase is drawn on the terminal's alternate screen so it never enters
scrollback, and is cleared once the operator presses Enter. Ctrl-C restores
the normal screen and terminal state before exiting.
Instead of retyping the whole passphrase, the operator enters three randomly
chosen words one per prompt, on the alternate screen so they never reach
scrollback. Words are matched case-insensitively and a wrong word is asked
again.
@anhthii
anhthii merged commit 3235285 into main Oct 13, 2026
3 checks passed
@anhthii
anhthii deleted the feat/generated-storage-passphrase branch October 13, 2026 04:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant