quick-docs/modules/ROOT/pages/reset-root-password.adoc
2022-12-19 20:35:43 +01:00

196 lines
5 KiB
Text

[[chap-how-to-reset-a-root-password]]
= How to Reset the root Password
The Fedora docs team
:revnumber: F36
:revdate: 2022-01-10
:category: Administration
:tags: Password
[abstract]
____
A root password may be set up while installing Fedora Linux, although it is now suggested to leave the root account locked and use `sudo`. This article describes how to proceed if you have used a root password, but for some reason you can no longer access it.
____
There are two common methods to reset the root password if it is forgotten or lost.
* In Rescue Mode
* Using a Fedora Live Media (USB/DVD/CD)
[[sect-how-to-reset-the-password-from-emergency-or-single-user-mode]]
== How to reset the root password in Rescue Mode
[NOTE]
====
Changing passwords as root will not prompt for the old password.
====
While booting the system the xref:bootloading-with-grub2.adoc[GRUB2] menu will be displayed.
To boot the system into rescue mode using `bash` follow these steps:
. Select the boot entry you wish to edit with the arrow keys.
. Select the entry you with to edit by pressing *e*.
. Use the arrow keys to go to select the line begging with `linux`, `linux16`, or `linuxefi`.
. Go the the end of that line and include a space and the following `rw init=/bin/bash`.
+
[Note]
====
If your disk is encrypted, you may need to add `plymouth.enable=0`
====
. Press *Ctrl-x* or *F10* to boot the entry
. Run the command:
+
[source,bash]
----
passwd
----
+
You will be prompted to enter the new root password twice.
. Restore the SELinux context and permissions with:
+
[source,bash]
----
touch /.autorelabel
----
+
[WARNING]
====
If you do not restore the SELinux permissions, the boot process may fail.
You may have to do a hard-reboot and start back at step 1.
====
. Reboot the machine with:
+
[source,bash]
----
/sbin/reboot -f
----
The system may take a moment to boot while SELinux relabels its permissions on the filesystem.
If you see the Plymouth boot screen you can press the `ESC` key on your keyboard to view the SELinux progress.
Once it is complete, your system is ready and your root password has been successfully changed.
[[sect-reset-password-using-the-fedora-live-media]]
== How to reset the root password with a Fedora Live Media
[NOTE]
====
To _download_ and create a live USB of Fedora Workstation, follow the instructions on the xref:creating-and-using-a-live-installation-image.adoc[Fedora USB Live Media Quick Doc].
__For additional information__, specifically about live media using BTRFS, see also
https://docs.fedoraproject.org/en-US/quick-docs/bootloading-with-grub2/#restoring-bootloader-using-live-disk[Restoring the bootloader using the Live disk]
====
. Boot the Live installation media and choose `Try Fedora`.
. From the desktop, open a terminal and switch to root using `su` (the system will not ask for a password).
. To view your hard drive device nodes, enter `df -H` into the terminal.
For this example we will use `/dev/sda1` for the `/boot` partition and `/dev/sda2` for the root `/` partition.
+
If you are using LVM partitions, type: `sudo lvscan` and note the `/dev` path of your root partition.
For this example we will use `/dev/fedora/root`.
. Create a directory for the mount point (use the `-p` option to create subdirectories):
+
[source,bash]
----
mkdir -p /mnt/sysimage/boot
----
. Mount the `/` (root) partition (be sure to use the actual device node or LVM path of your root `/` partition):
+
To mount root on a *standard partition* scheme enter:
+
[source,bash]
----
mount /dev/sda2 /mnt/sysimage
----
+
To mount root on an *LVM partition* scheme enter:
+
[source,bash]
----
mount /dev/fedora/root /mnt/sysimage
----
. Continue the process by mounting `/boot`, `proc`, `/dev`, and `/run` with:
+
[source,bash]
----
mount /dev/sda1 /mnt/sysimage/boot
mount -t proc none /mnt/sysimage/proc
mount -o bind /dev /mnt/sysimage/dev
mount -o bind /run /mnt/sysimage/run
----
. `chroot` to the mounted root partition with:
+
[source,bash]
----
chroot /mnt/sysimage /bin/bash
----
. Change the root password:
+
[source,bash]
----
passwd
----
. Exit out of chroot with:
+
[source,bash]
----
exit
----
+
and exit out of the terminal.
. Reboot your system and boot from the hard drive.
Congratulations, your root password has been successfully changed.
[[sect-additional-troubleshooting]]
== Additional Troubleshooting
. If you cannot enter rescue mode because you forgot the Firmware/BIOS password here are some options:
.. Refer to your computer's documentation for instructions on resetting the Firmware/BIOS password in CMOS memory.
.. Temporarily move the system hard disk to another machine, and follow the procedures above to reset the root password.
. If you have set a password for your boot loader, refer to xref:creating-and-using-a-live-installation-image.adoc[Creating and Using a Live Installation Image].
. If you want to reset the boot loader password, refer to the instructions on how to link:++https://fedoraproject.org/wiki/Reset_Bootloader_Password++[Reset the Bootloader Password].