Skip to main content
In this article, we explain how to interrupt the Linux boot process to gain access to a system when, for example, the root password is lost. The procedures below outline the steps for both Red Hat Enterprise Linux 8 and Red Hat Enterprise Linux 9. ─────────────────────────────

​
Red Hat Enterprise Linux 8

Begin by logging into your Red Hat Enterprise Linux 8 virtual machine and perform a restart. When the GRUB boot menu appears, press the down arrow key to pause the automatic boot process. This menu displays the available kernel versions. Next, press E to edit the default kernel entry.
The image shows a boot menu for Red Hat Enterprise Linux with multiple kernel versions listed. It provides options to select or edit the boot entry.
At this stage, you will see the kernel line with various options passed by GRUB. There are several scenarios where modifying these boot parameters is necessary. In our case, we assume the root password has been lost and emergency access is required. Follow these steps:
  1. Scroll down to the Linux kernel line and press Ctrl-E to move the cursor to the end of the line.
  2. Ensure that there is a single space after the quiet option.
  3. Append the parameter rd.break to introduce a breakpoint, halting the normal boot process.
Below is the final, edited kernel entry (along with the associated initrd line) that should be present before you boot:
Press Ctrl-X to boot using the modified command line. The system will initiate its normal graphical boot process until it reaches the breakpoint and drops into an emergency shell, which is indicated by a # prompt. At this emergency prompt, note that many utilities (such as whoami) might not be available. Although your Linux file system is mounted in read-only mode under /sysroot, you can proceed with the following commands to remount it as read-write, update the root password, and prepare the system for a normal reboot:
Next, change your working directory to the mounted file system and use the chroot command to switch to the actual root environment:
With the shell now operating within the real root, update the root password:
Red Hat Enterprise Linux systems use SELinux for security. It is essential to signal the system to relabel file contexts on the next boot.
To trigger this process, create the hidden file .autorelabel in the root directory:
After creating the file, exit the chroot and the emergency shell:
The system will now reboot and perform an SELinux targeted policy relabeling. You might observe output similar to the following as the system corrects file labels:
After relabeling, the normal login prompt will appear. You can log in using the new root password. For example, to switch to the root user using the su command:
On systems without a graphical login, simply enter the root username and the new password at the text-based prompt. ─────────────────────────────

​
Red Hat Enterprise Linux 9

The process for RHEL 9 is similar, with some adjustments because of changes in Dracut (the tool that creates the initial RAM filesystem). Begin by stopping the virtual machine at the GRUB bootloader screen, then press E to edit the boot parameters. Scroll down to the Linux kernel line. You should see a configuration similar to the following:
Make the following changes to the command line:
  1. Replace the read-only root option (ro) with read-write (rw) just before the crashkernel parameter.
  2. Instead of appending rd.break, add the parameter init=/bin/bash to launch a bash shell directly.
The modified kernel command should appear as follows:
Press Ctrl-X to boot. This action will drop you straight into a bash shell as the root user with the file system mounted in read-write mode. At the bash prompt, update the root password:
Then, create the .autorelabel file to ensure SELinux contexts are corrected on the next boot:
Now, execute the init process manually to continue the boot sequence without an immediate reboot:
The system will proceed to boot, perform any necessary SELinux relabeling, and eventually present you with the login prompt. For text-based environments, use the updated root credentials to log in. In graphical environments, log in with your regular user account and then switch to the root account using:
─────────────────────────────

​
Conclusion

This guide demonstrated how to interrupt the boot process on both Red Hat Enterprise Linux 8 and 9 to recover or modify the root password. By modifying the GRUB boot parameters, you can access an emergency or bash shell to perform system maintenance. Remember, if SELinux is enabled, creating the .autorelabel file is critical to ensure correct file contexts on the subsequent boot. Thank you for following along. Continue exploring our labs and documentation to further strengthen your Linux system administration skills.
The image shows a VirtualBox 6.1 boot screen with an Oracle logo and a cube graphic.
The image shows a boot menu for Red Hat Enterprise Linux with multiple kernel versions listed. It provides options to select and edit the boot configuration.

Watch Video