Merge ~k-ubuntu-s/ubuntu/+source/ubiquity:fix/forget-oem-wifi into ubuntu/+source/ubiquity:ubuntu/devel

[Elias]

Forget saved Wifi connections created during OEM installation. This did show Wifi connection to end-users after the initial setup, including Wifi passwords.

[Nick Rosbrook (enr0n)]

This needs some context. Is there a bug you are trying to fix here?

This should also probably be reviewed by Foundations, rather than being in the general sponsorship queue.

review: Needs Information

[Elias (k-ubuntu-s)]

My workflow is to install via the OEM installation method, and run a post-install script on every machine. Usually it's laptops, so I connect them to my home-Wifi because this way I can also make sure that Wifi is actually working for the person to receive the laptop. When I'm done, I run the "Prepare for shipping to end user" thing from desktop.

The bug is that the "Prepare for shipping to end user" does not wipe the saved Wifi connections, so people who receive this laptop will have my home Wifi saved in their brand new system.

How can I make sure this MR is in the correct queue?

[Nick Rosbrook (enr0n)]

Okay, that certainly sounds like a valid issue to address. Please start by opening a bug report explaining that, and detail which releases are affected.

I suggest requesting another review (with the "Request a review" button above) and select canonical-foundations. That should put it in the Foundations queue to review.

[Elias (k-ubuntu-s)]

Here's the issue for this MR: https://bugs.launchpad.net/ubuntu/+source/ubiquity/+bug/2138557

Unmerged commits

e055dd1... by Elias on 2025-11-16

Delete Wifi connections established during OEM setup

diff --git a/bin/oem-config-prepare b/bin/oem-config-prepare
index fba5680..e633819 100755
--- a/bin/oem-config-prepare
+++ b/bin/oem-config-prepare
@@ -26,7 +26,8 @@ if [ "$(id -u)" = 0 ]; then
 	rm -f /etc/NetworkManager/system-connections/*
 
 	# Potentially sensitive.
-	rm -f /home/oem/.ssh/known_hosts
+	rm -f /home/oem/.ssh/known_hosts \
+	      /etc/netplan/90-*.yaml
 
 	cp -a /usr/lib/oem-config/oem-config.service /lib/systemd/system
 	cp -a /usr/lib/oem-config/oem-config.target /lib/systemd/system