From 1e4be728442a782e3dbfaa877104e879c9022f61 Mon Sep 17 00:00:00 2001
From: Oleksandr Kuchmystyi <o.kuchmystyi@vyos.io>
Date: Wed, 3 Jun 2026 15:11:37 +0300
Subject: password-reset: T8346: Fix password recovery when only
 `plaintext-password` is set

When a user account was provisioned with only `plaintext-password` (e.g.
via cloud-init), the password recovery tool failed to persist the new
password across reboots. On the next boot, VyOS would re-apply the
`plaintext-password` from config.boot, silently overwriting the recovered
encrypted password.
---
 debian/control | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'debian/control')

diff --git a/debian/control b/debian/control
index d3333e088..7edd692f4 100644
--- a/debian/control
+++ b/debian/control
@@ -123,6 +123,11 @@ Depends:
   wide-dhcpv6-client,
 # Generic colorizer
   grc,
+# The package "whois" contains both a whois database client
+# that end users can find useful,
+# and the "mkpasswd" utility we use for generating hashed passwords
+# in the standalone password reset script
+  whois,
 ## End of System services and utilities
 ## For the installer
   fdisk,
-- 
cgit v1.2.3