DomainKey-Signature: a=rsa-sha1; c=nofws; d=vk4msl.com; h=message-id
	:date:mime-version:subject:to:references:from:in-reply-to
	:content-type:content-transfer-encoding; q=dns; s=gapmx; b=cizb0
	q1C00IeVfjZMCX0NBDrnA/6hwUrc1bfCeQMXdDXvP8+nZDvUuMYJcR4NARyzx1Qb
	Lb8IWl1RBsWyAsJ7uJtAG+/ytlgFxjwF1Wlq3/0o2UKTGHGQVFuEnezGfB6rmuo3
	FITWHZOL6XQrw5njGqflT/2mAa4baK+dQ5xig7aMVRc9W6PUwdpYelI2IsIfBkVb
	/shh8rvq9zQJQiiSFvLRKpfyCsIa1U4d1YvH5KTwVMeZGonIHMFYoj03QgRT8nsP
	5dmAMg8k/3cqPiBUGGC96K1NgsLtWzKNHSP6eUaLO1sDF9j88ITQEOoSrwT2W4Ik
	cE7Hhn6ao4ivjWHsY67FqP8PsRZF1uhk3N4xtrC6yqNGDDY1zID/jpcUQYPm0Ldw
	dJPyN9VUkQRmNq+Nh0sCB0ka0jLF90mfb3xM4xqvQNcaMTk+LH0ZR4xESCkGGMNZ
	oaSDkIWKqPGJWqFMoLKfUPpn9vbEBA2yH6U1EuyJ+ts9Kp7zQA/7a3Ug3AAG0lBu
	V0m6zKtjpbOxQda6rghITaYvrFo7/myxCIpAGsnoxCm47XCgJRYqrfWXfLprtA4e
	K3xrTmgTVQ5FioKHRJ5H9zt/2ITIR7a2RUg/Fo/CWuQrBWquU30Wa/lvfKpJ+i8l
	g0tOZGr+/BboH6MM07N+qlEAS7SbMY85lfEcqA=
Message-ID: <510dcdfa-9c6e-441a-8490-691bf5047bb9@vk4msl.com>
Date: Sat, 18 Jan 2025 14:08:37 +1000
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: Pi5 Installation v 3.21 from SD - need initial password for root
 (SSH)
To: ~alpine/users@lists.alpinelinux.org
References: <d16bae36-1612-431a-b352-d8a7ef42c480@pechoc.eu>
Content-Language: en-AU
From: Stuart Longland VK4MSL <me@vk4msl.com>
In-Reply-To: <d16bae36-1612-431a-b352-d8a7ef42c480@pechoc.eu>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit

On 16/1/25 09:45, Gerald Pechoc wrote:
> I tried to install Alpine Linux 3.21 from SD-Card on Pi5. The card was 
> prepared with Pi-Imager.
> All seems to work fine, Pi is booting and because of DHCP-fix address I 
> could start SSH root@[ip-addr] but the hint I found very frequently in 
> internet search results – user root, no password – is no longer valid 
> for version 3.21.

Nor should it ever be valid.  Password authentication on the `root` 
account is a major security issue.  Password authentication using an 
empty password for the `root` account is asking for trouble.

0. Generate a SSH keypair (`ssh-keygen`) and have the public key handy 
(it'll be a long string starting with "ssh-${ALGO}")
1. Create a non-root user with a non-empty password on the Pi if you 
have not already done so.  Ensure that the `~user.ssh` directory exists.
2. `scp /path/to/your/key.pub user@[ip-addr]:.ssh/authorized_keys`, 
verify that you can log in using your SSH key using `ssh user@[ip-addr]`.
3. Log in as `root` on a console on the `pi`; then run these commands:
    # mkdir /root/.ssh
    # cp ~user/.ssh/authorized_keys /root/.ssh
    # chown -R root:root /root/.ssh
    # chmod 0600 /root/.ssh/*

Now, try logging in as `root@[ip-addr]`, you'll now be able to log-in 
using public key authentication using your private key.
-- 
Stuart Longland (aka Redhatter, VK4MSL)

I haven't lost my mind...
   ...it's backed up on a tape somewhere.