Hi Colin, On 1 August 2015 at 14:41, Colin Walters <walters@xxxxxxxxxx> wrote: > On Sat, Aug 1, 2015, at 01:34 AM, Sitsofe Wheeler wrote: >> >> The regular Fedora 22 default for password encryption seems to be >> SHA512 but I couldn't turn anything up as to why cloud images had made >> this change. Could some explain why MD5 is used? > > This was just fixed: > > https://git.fedorahosted.org/cgit/spin-kickstarts.git/commit/?id=9f254062c3c78d8480b04b340c1497c08126c0ca > > There was nothing intentional here, but what we're fighting is the legacy defaults for > auth in Anaconda, requiring every kickstart user to override them to enable shadow passwords > and sha512. [...] > Currently then, media installs have stronger defaults than kickstart, unless overridden > explicitly by kickstart. Thanks for explaining this to me! The only thing that I'd found was https://git.fedorahosted.org/cgit/cloud-kickstarts.git/tree/container/ which is out of date with regard to the Fedora 22 cloud image. Perhaps the cloud-kickstarts git repo should have a notice added to state that it's deprecated in favour of spin-kickstarts? -- Sitsofe | http://sucs.org/~sits/ _______________________________________________ cloud mailing list cloud@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/cloud Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
