Appendix C. Anaconda UI specific commands
C.1. Commands used in Anaconda
The "pwpolicy" command is an Anaconda UI specific command that can be used only in the %anaconda section of the kickstart file.
-
pwpolicy(optional) - This command can be used to enforce a custom password policy, which specifies requirements for passwords created during installation, based on factors such as password length and strength.
pwpolicy name [--minlen=length] [--minquality=quality] [--strict|--nostrict] [--emptyok|--noempty] [--changesok|--nochanges]Replace name with eitherroot,userorluksto enforce the policy for therootpassword, user passwords, or LUKS passphrase, respectively.Thelibpwqualitylibrary is used to check minimum password requirements (length and quality). You can use thepwscoreandpwmakecommands provided by the libpwquality package to check the quality score of a password, or to create a random password with a given score. See thepwscore(1)andpwmake(1)man page for details about these commands.Important
This command can only be used inside the%anacondasection.--minlen=- Sets the minimum allowed password length, in characters. The default is6.--minquality=- Sets the minimum allowed password quality as defined by thelibpwqualitylibrary. The default value is1.--strict- Enables strict password enforcement. Passwords which do not meet the requirements specified in--minquality=and--minlen=will not be accepted. This option is disabled by default.--notstrict- Passwords which do not meet the minimum quality requirements specified by the--minquality=and-minlen=options will be allowed, after Done is clicked twice.--emptyok- Allows the use of empty passwords. Enabled by default for user passwords.--notempty- Disallows the use of empty passwords. Enabled by default for the root password and the LUKS passphrase.--changesok- Allows changing the password in the user interface, even if the Kickstart file already specifies a password. Disabled by default.--nochanges- Disallows changing passwords which are already set in the Kickstart file. Enabled by default.
