[elbe-devel] [PATCH v2 6/8] proprocess: migrate root and user passwords

[Bastian Germann]

Am 24.06.22 um 13:12 schrieb Bastian Germann:
> The crypt module is deprecated in Python 11.
> preprocess runs on the host machine so I would like to have broad compatibility.
> I am thinking of making the host commands compatible with Windows where this is
> not available (part of the rationale for the deprecation). If there is no Python
> 3.6+ module (hashlib?) that we can use, I would prefer introducing a dependency,
> possibly passlib.
> 
> The method has to be compatible with the oldest of our supported target systems,
> which is jessie. I would prefer Blowfish over SHA512. If we keep SHA512, please
> use a greater than default rounds parameter.

passlib uses bcrypt module for bcrypt. So on moving to bcrypt directly using it
should be preferred.

If there is a good reason to keep using sha512-crypt, please use passlib.