From e76c8a9a3a493f957db7dac83855c652317ce33b Mon Sep 17 00:00:00 2001
From: Astro <astro@spaceboyz.net>
Date: Mon, 5 Jun 2023 00:27:24 +0200
Subject: [PATCH] pkgs/switches/junos: update password hash method from SHA-256
 to SHA-512

---
 nix/pkgs/switches/junos.nix | 10 +++-------
 1 file changed, 3 insertions(+), 7 deletions(-)

diff --git a/nix/pkgs/switches/junos.nix b/nix/pkgs/switches/junos.nix
index 2e6f77a..efe17dd 100644
--- a/nix/pkgs/switches/junos.nix
+++ b/nix/pkgs/switches/junos.nix
@@ -9,7 +9,7 @@ let
         host-name ${hostName};
         time-zone Europe/Berlin;
         root-authentication {
-            encrypted-password "$5$EBmFELmv$kQxtWwS0SBS.TqVPRvs8sKpH./l9DTtTxX/I2FJB2n2"; ## SECRET-DATA
+            encrypted-password "%%HASH%%"; ## SECRET-DATA
             ssh-ed25519 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHGgoLzQMeyX1wjsX/hgVkN//zyfOQPiBRYgO2ajEGH6 root@server2";
         }
         services {
@@ -114,13 +114,9 @@ let
   '';
 
   configFileWithHash = runCommand "junos.config" {
-    nativeBuildInputs = [ python3 ];
+    nativeBuildInputs = [ mkpasswd ];
   } ''
-    cat >gen.py<<EOF
-    import crypt
-    print(crypt.crypt('${hostConfig.password}', crypt.mksalt(crypt.METHOD_SHA256)))
-    EOF
-    HASH=$(python gen.py)
+    HASH=$(echo "${hostConfig.password}" | mkpasswd --method=SHA-512 --stdin)
     substitute ${configFile} $out \
       --replace "%%HASH%%" "$HASH"
   '';