# passwd

Published articles for passwd.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Hpf-passwd: Easily change passwords while using \`hashedPasswordFile\`

DevFeed: [Hpf-passwd: Easily change passwords while using \`hashedPasswordFile\`](<https://devfeed.tech/articles/hpf-passwd-easily-change-passwords-while-using-hashedpasswordfile-31351.md>)

Original publisher: [Read original article](<https://discourse.nixos.org/t/hpf-passwd-easily-change-passwords-while-using-hashedpasswordfile/79254>)

Author: Anomalocaris

Published: 2026-07-31T01:54:54Z

Content type: article

Language: en

Sources: [Announcements - NixOS Discourse](<https://devfeed.tech/sources/announcements-nixos-discourse.md>)

Topics: [passwords](<https://devfeed.tech/topics/passwords.md>), [passwd](<https://devfeed.tech/topics/passwd.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [account](<https://devfeed.tech/topics/account.md>), [systems](<https://devfeed.tech/topics/systems.md>)

Tags: [announcements](<https://devfeed.tech/tags/announcements.md>), [config](<https://devfeed.tech/tags/config.md>), [passwd](<https://devfeed.tech/tags/passwd.md>), [passwords](<https://devfeed.tech/tags/passwords.md>), [script](<https://devfeed.tech/tags/script.md>), [systems](<https://devfeed.tech/tags/systems.md>)

### AI overview

The author introduces hpf-passwd, a standalone script for changing passwords for NixOS user accounts configured with hashedPasswordFile. It imitates passwd's semantics but is not a complete drop-in replacement and currently lacks features such as password expiration management.

### Source excerpt

For a while, I've used users.users.*.hashedPasswordFile with users.mutableUsers = true to minimize configuration drift. However, as far as I could tell, no one had created a convenient way to set or change these passwords, so I wrote a quick and dirty script and called it a day. More recently, I was reworking this script and realized I could decouple it completely from my config, spin it off into its own project, and polish it up so other people could benefit from it. The result is hpf-passwd. Currently, it's a single script that mainly just lets you change the password of a given user account, provided it has users.users.<username>.hashedPasswordFile set. Befitting its name, it tries to mimic passwd's semantics to try to be intuitive. However, it can never be a 1:1 drop-in replacement. As far as I am aware, there is no way to set things like expiration dates for passwords managed like this. I plan to eventually add some more features, like a chpasswd-style script, and features that ensure all the users with hashedPasswordFile have a password set to help with bootstrapping, but it's currently pretty barebones. However, it is enough for my personal needs at the moment and so I figure it is a good time to get some more eyes on it. github.com GitHub - Anomalocaridid/hpf-passwd: Manage passwords on NixOS systems that use... Manage passwords on NixOS systems that use `hashedPasswordFile` 1 post - 1 participant Read full topic

## What SPIFFE Answers for Workload Identity and What It Doesn't

DevFeed: [What SPIFFE Answers for Workload Identity and What It Doesn't](<https://devfeed.tech/articles/what-spiffe-answers-for-workload-identity-and-what-it-doesn-t-29859.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/spiffe-workload-identity/>)

Author: info@goteleport.com (Rob Cobbins)

Published: 2026-05-29T00:00:00Z

Content type: opinion

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [SPIFFE](<https://devfeed.tech/topics/spiffe.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [active directory](<https://devfeed.tech/topics/active-directory.md>), [AWS IAM](<https://devfeed.tech/topics/aws-iam.md>), [passwd](<https://devfeed.tech/topics/passwd.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [saml](<https://devfeed.tech/topics/saml.md>)

Tags: [active-directory](<https://devfeed.tech/tags/active-directory.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [aws](<https://devfeed.tech/tags/aws.md>), [identity](<https://devfeed.tech/tags/identity.md>), [ldap](<https://devfeed.tech/tags/ldap.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [passwd](<https://devfeed.tech/tags/passwd.md>), [permissions](<https://devfeed.tech/tags/permissions.md>), [saml](<https://devfeed.tech/tags/saml.md>), [spiffe](<https://devfeed.tech/tags/spiffe.md>)

### AI overview

This article examines what SPIFFE provides for workload identity and where it falls short. It argues that SPIFFE offers a sound way for machines to prove their identities without shared secrets, but does not define authorization and leaves workload registration largely to implementations.

### Source excerpt

Learn about the workload identity questions SPIFFE can't answer and considerations for filling gaps in the spec.

## Security Week 2619: особенности уязвимости Copy Fail в ядре Linux

DevFeed: [Security Week 2619: особенности уязвимости Copy Fail в ядре Linux](<https://devfeed.tech/articles/security-week-2619-copy-fail-linux-23070.md>)

Original publisher: [Read original article](<https://habr.com/ru/companies/kaspersky/articles/1031202/>)

Author: Kaspersky\_Lab ("Лаборатория Касперского")

Published: 2026-05-04T18:24:46Z

Content type: news

Language: ru

Sources: ["Лаборатория Касперского" RU](<https://devfeed.tech/sources/ru-2.md>)

Topics: [Linux](<https://devfeed.tech/topics/linux.md>), [Security](<https://devfeed.tech/topics/security.md>), [Docker](<https://devfeed.tech/topics/docker.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Python](<https://devfeed.tech/topics/python.md>), [Shell](<https://devfeed.tech/topics/shell.md>), [mount](<https://devfeed.tech/topics/mount.md>), [passwd](<https://devfeed.tech/topics/passwd.md>)

Tags: [2017](<https://devfeed.tech/tags/2017.md>), [2026](<https://devfeed.tech/tags/2026.md>), [copy-fail](<https://devfeed.tech/tags/copy-fail.md>), [cve](<https://devfeed.tech/tags/cve.md>), [docker](<https://devfeed.tech/tags/docker.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [linux](<https://devfeed.tech/tags/linux.md>), [mount](<https://devfeed.tech/tags/mount.md>), [passwd](<https://devfeed.tech/tags/passwd.md>), [python](<https://devfeed.tech/tags/python.md>), [security](<https://devfeed.tech/tags/security.md>), [tag-9fe8963de219](<https://devfeed.tech/tags/tag-9fe8963de219.md>)

### AI overview

This article examines Copy Fail, a Linux kernel vulnerability identified as CVE-2026-31431 with a CVSS score of 7.8. The flaw in the algif_aead module can allow a local attacker to modify the cache of readable files and potentially gain superuser privileges. The article discusses risks to container environments, detection indicators, and mitigations including kernel updates or blocking the module.

### Source excerpt

Важной новостью прошлой недели стало обнародование данных об опасной уязвимости в ядре Linux, получившей название Copy Fail (мини-сайт, новость на Хабре), которая открывает относительно простой способ локального повышения привилегий. Авторы оригинального исследования не стесняются рекламировать ИИ-ассистент для анализа кодовой базы, который нашел данную проблему в течение часа. Исследователи "Лаборатории Касперского" провели анализ уязвимости и предложили варианты обнаружения атак с ее использованием. Уязвимость получила идентификатор CVE-2026-31431 и рейтинг 7,8 балла по шкале CVSS. Ошибка была внесена в код модуля ядра algif_aead еще в 2017 году: тогда была внедрена поддержка оптимизаций in-place при работе системы шифрования AEAD. Это, в свою очередь, привело к дефекту обработки буферов, что дало потенциальному атакующему возможность контролируемо изменять содержимое кэша любого файла, доступного для чтения. Читать далее

## Linux Emergency Recovery With init=/bin/bash

DevFeed: [Linux Emergency Recovery With init=/bin/bash](<https://devfeed.tech/articles/linux-emergency-recovery-with-init-bin-bash-4518.md>)

Original publisher: [Read original article](<https://feeds.feedblitz.com/~/920030138/0/baeldung/linux~Linux-Emergency-Recovery-With-initbinbash>)

Author: Francesco Galgani

Published: 2025-06-10T19:40:59Z

Content type: tutorial

Language: en

Sources: [Baeldung - Linux](<https://devfeed.tech/sources/baeldung-linux.md>)

Topics: [Linux](<https://devfeed.tech/topics/linux.md>), [Boot Process](<https://devfeed.tech/topics/boot-process.md>), [systemd](<https://devfeed.tech/topics/systemd.md>), [Bash](<https://devfeed.tech/topics/bash.md>), [Kernel](<https://devfeed.tech/topics/kernel.md>), [passwords](<https://devfeed.tech/topics/passwords.md>), [Filesystems](<https://devfeed.tech/topics/filesystems.md>)

Tags: [bash](<https://devfeed.tech/tags/bash.md>), [boot](<https://devfeed.tech/tags/boot.md>), [boot-process](<https://devfeed.tech/tags/boot-process.md>), [boot-process-passwd-systemd](<https://devfeed.tech/tags/boot-process-passwd-systemd.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [kernel](<https://devfeed.tech/tags/kernel.md>), [linux](<https://devfeed.tech/tags/linux.md>), [passwd](<https://devfeed.tech/tags/passwd.md>), [password](<https://devfeed.tech/tags/password.md>), [recovery](<https://devfeed.tech/tags/recovery.md>), [root](<https://devfeed.tech/tags/root.md>), [systemd](<https://devfeed.tech/tags/systemd.md>), [tutorial](<https://devfeed.tech/tags/tutorial.md>)

### AI overview

This tutorial explains how to recover an unbootable Linux system by adding init=/bin/bash to the kernel parameters. It covers entering a root Bash shell as PID 1, working with encrypted LVM and LUKS installations, resetting passwords, remounting the filesystem as read/write, and forcing a reboot when normal shutdown commands are unavailable. The method is presented as an emergency measure because an improper forced reboot can cause data loss or corruption.

### Source excerpt

Learn to use the init=/bin/bash kernel parameter to access a minimalist root shell on systems that wouldn't otherwise boot. The post Linux Emergency Recovery With init=/bin/bash first appeared on Baeldung on Linux. Click the icon below to watch. Related Stories Linux Emergency Recovery With init=/bin/bash - Enclosure How to Restore Systemd After Deleting It Accidentally How to Dual Boot Windows and Linux

## Command to change root password

DevFeed: [Command to change root password](<https://devfeed.tech/articles/command-to-change-root-password-27621.md>)

Original publisher: [Read original article](<https://gagor.pro/2014/05/command-to-change-root-password/>)

Author: Tom

Published: 2014-05-08T00:00:00Z

Content type: tutorial

Language: en

Sources: [Tomasz Gągor](<https://devfeed.tech/sources/tomasz-gagor.md>)

Topics: [passwd](<https://devfeed.tech/topics/passwd.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [passwords](<https://devfeed.tech/topics/passwords.md>)

Tags: [bash](<https://devfeed.tech/tags/bash.md>), [command](<https://devfeed.tech/tags/command.md>), [command-line](<https://devfeed.tech/tags/command-line.md>), [linux](<https://devfeed.tech/tags/linux.md>), [passwd](<https://devfeed.tech/tags/passwd.md>), [password](<https://devfeed.tech/tags/password.md>), [root](<https://devfeed.tech/tags/root.md>)

### AI overview

A short tutorial shows how to change the root password from the command line without interactive input, using an echo and chpasswd pipeline.

### Source excerpt

Everybody knows passwd command but it's useless when you need to change ex. root password from command line without waiting for input. In such case oneliner below could help: echo "root:new_password" | chpasswd

## Włam na lokalne konto root'a

DevFeed: [Włam na lokalne konto root'a](<https://devfeed.tech/articles/w-am-na-lokalne-konto-root-a-27492.md>)

Original publisher: [Read original article](<https://gagor.pro/2011/08/wlam-na-lokalne-konto-roota/>)

Author: Tom

Published: 2011-08-27T00:00:00Z

Content type: tutorial

Language: pl

Sources: [Tomasz Gągor](<https://devfeed.tech/sources/tomasz-gagor.md>)

Topics: [Linux](<https://devfeed.tech/topics/linux.md>), [passwd](<https://devfeed.tech/topics/passwd.md>), [Bash](<https://devfeed.tech/topics/bash.md>), [Kernel](<https://devfeed.tech/topics/kernel.md>)

Tags: [bash](<https://devfeed.tech/tags/bash.md>), [kernel](<https://devfeed.tech/tags/kernel.md>), [linux](<https://devfeed.tech/tags/linux.md>), [passwd](<https://devfeed.tech/tags/passwd.md>)

### AI overview

This Polish tutorial describes a method for resetting a Linux root password when the existing password is unavailable. It explains editing the GRUB kernel parameters to boot directly into Bash with root privileges, using passwd to change the password, and then rebooting. The article notes that the method does not work on every Linux system, particularly systems using initramfs-tools.

### Source excerpt

Jeżeli tu zaglądasz pewnie zdarzyło Ci się kiedyś, że przykładowo wygrzebujesz jakiś stary serwer i nie masz pojęcia co na nim było, ani do czego służyło, czy jeszcze działa... Albo jeszcze inaczej - serwer działał tak długo, że wszystkie osoby znające hasło na root'a przeszły na emeryturę lub zmarły... Nieistotne 😃 Jest pewna prosta sztuczka, pozwalająca wbić się na konto root'a nie znając hasła - dając nam możliwość jego zmiany. Potrzebne dwa restarty ale za to nie trzeba korzystać z żadnychlive cd.