feat(pkg/board): add SetPassword api (#588)

Co-authored-by: Davide <davideneri18@gmail.com>

Author: lucarin91

cmd/arduino-app-cli/board/board.go

@@ -3,10 +3,12 @@ package board
 import (
 	"context"
 	"fmt"
+	"os"
 	"path"
 	"strconv"
 
 	"github.com/spf13/cobra"
+	"golang.org/x/term"
 
 	"github.com/bcmi-labs/orchestrator/cmd/feedback"
 	"github.com/bcmi-labs/orchestrator/pkg/appsync"
@@ -63,6 +65,7 @@ func NewBoardCmd() *cobra.Command {
 	fsCmd.AddCommand(newSyncAppCmd())
 	fsCmd.AddCommand(newBoardListCmd())
 	fsCmd.AddCommand(newBoardSetName())
+	fsCmd.AddCommand(newSetPasswordCmd())
 
 	return fsCmd
 }
@@ -161,3 +164,28 @@ func newBoardSetName() *cobra.Command {
 
 	return setNameCmd
 }
+
+func newSetPasswordCmd() *cobra.Command {
+	return &cobra.Command{
+		Use:   "set-password",
+		Short: "Set the user password of the board",
+		Args:  cobra.ExactArgs(0),
+		RunE: func(cmd *cobra.Command, args []string) error {
+			conn := cmd.Context().Value(remoteConnKey).(remote.RemoteConn)
+
+			feedback.Print("Enter new password: ")
+			// TODO: fix for not interactive terminal
+			password, err := term.ReadPassword(int(os.Stdin.Fd())) // nolint:forbidigo
+			if err != nil {
+				return fmt.Errorf("failed to read password: %w", err)
+			}
+
+			if err := board.SetUserPassword(cmd.Context(), conn, string(password)); err != nil {
+				return fmt.Errorf("failed to set user password: %w", err)
+			}
+
+			feedback.Printf("User password set\n")
+			return nil
+		},
+	}
+}

debian/arduino-app-cli/etc/sudoers.d/10-arduino-passwd

@@ -0,0 +1 @@
+arduino ALL=(ALL) NOPASSWD: /usr/local/bin/arduino-passwd

debian/arduino-app-cli/usr/local/bin/arduino-passwd

@@ -0,0 +1,8 @@
+#!/bin/bash
+
+read -s "pass"
+
+[ -n "$pass" ] || exit 1
+
+echo "arduino:$pass" | chpasswd
+

go.mod

@@ -50,6 +50,7 @@ require (
 	go.bug.st/f v0.4.0
 	go.bug.st/serial v1.6.4
 	golang.org/x/crypto v0.40.0
+	golang.org/x/term v0.34.0
 	golang.org/x/text v0.28.0
 )
 
@@ -272,7 +273,6 @@ require (
 	golang.org/x/oauth2 v0.30.0 // indirect
 	golang.org/x/sync v0.16.0 // indirect
 	golang.org/x/sys v0.35.0 // indirect
-	golang.org/x/term v0.34.0 // indirect
 	golang.org/x/time v0.11.0 // indirect
 	golang.org/x/tools v0.35.0 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20250528174236-200df99c418a // indirect

pkg/board/board.go

@@ -241,6 +241,29 @@ func IsUserPasswordSet(conn remote.RemoteShell) (bool, error) {
 	return isUserSet, nil
 }
 
+func SetUserPassword(ctx context.Context, conn remote.RemoteConn, newPass string) error {
+	cmd := conn.GetCmd("sudo", "arduino-passwd")
+	stdin, stdout, stderr, closer, err := cmd.Interactive()
+	if err != nil {
+		return fmt.Errorf("failed to set password: %w", err)
+	}
+
+	if _, err = stdin.Write([]byte(newPass)); err != nil {
+		return fmt.Errorf("failed to write password: %w", err)
+	}
+	if err := stdin.Close(); err != nil {
+		return fmt.Errorf("failed to close stdin: %w", err)
+	}
+
+	if err := closer(); err != nil {
+		out, _ := io.ReadAll(stdout)
+		errOut, _ := io.ReadAll(stderr)
+		return fmt.Errorf("failed to set password: %w: %s %s", err, out, errOut)
+	}
+
+	return nil
+}
+
 func getSerial(conn remote.RemoteConn) (string, error) {
 	f, err := conn.ReadFile(SerialPath)
 	if err != nil {