Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to be able to send an RPM to customers that will install the complete server, including Apache and MySQL. The customers will install it on a clean machine.

After installation, the server should connect to our main DB, so I though of including the password in the RPM somehow, encrypted if possible.

The reason I'm asking this is because I'm pretty sure that it's not wise to save the password in the rpm scripts. I was hoping that someone else had a similar problem and managed to solve that somehow.

If anyone knows a way to do that, or have a better idea please share!

share|improve this question
This is a really terrible idea. Do not do this. – womble Aug 8 '12 at 10:06
up vote 1 down vote accepted

Assuming that each customer has a unique could build the passwords into the RPMs if you generate the packages on demand when the custom requests them. The workflow would look something like this:

  • Customer requests package.
  • You generate a random password for the customer and update your database with the new password.
  • You generate the RPM package appropriate configured with the new password.
  • You deliver it to the customer.
  • You delete the package off your server.

This is reasonably secure while still allowing your customer to have a completely functional install.

If you don't want to invest the time to put this workflow together, I think your best solution is to include a script that the customer runs post installation that will prompt for a password and configure the necessary files.

share|improve this answer
This is again too complex to manage and insecure (anyone with access to RPM file has the password). Once the RPM is installed, request customer to run a setup or a install script that will ask for password and update your services. – Chida Aug 12 '12 at 8:16
1're saying you agree with exactly what I said in the final paragraph. – larsks Aug 12 '12 at 11:08

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.