Getting Started

This page covers the first-time setup flow for a new OpenNMC unit.

What Is True On A New Board

  • the board boots and obtains a DHCP lease on eth0
  • the network is not usable for management until a local user has been initialized
  • the web interface is not intended for first-time setup
  • the initial login path is the USB console

First Login

  1. Connect to the USB console.
  2. Log in as root with no password.
  3. Set the password for the default admin account:
passwd admin
  1. Enter the new password twice when prompted.

  2. If you want to set up networking now, run:

nmtui

What Changes After Setup

After admin has a password:

  • local users with UID >= 1000 can sign in to the web interface
  • admin can also be used for SSH and console login
  • the web UI becomes the normal management entry point

The bootstrap root login is for the USB console only.

Security Notes

  • The device does not implement Secure Boot.
  • Updates are installed securely with RAUC verity images.
  • The keyring is embedded in the image at /etc/rauc/keyring.pem.
  • Early units may ship with development keyrings.
  • Later units will ship with production keyrings.
  • Keyrings can be replaced by an operator with console or SSH access. See Firmware Trains.

Next Steps