As stated in the title, are there any existing best practices to install Debian on a remote server, without sending clear text passwords over the link?
For example - a lot of dedicated server providers will give their customers direct access to the KVM of the supermicro board. This gives them a lot of choices - for example, I can mount any local ISO image as if it were in the CD drive.
However, installing Debian would be a no-go, because I'll have to type in the root password during the setup, which an eavesdropper can read too.
My guess would be to create a pre-made installation image, with the SSH public key already installed. You would no longer rely on what's on the KVM screen, but rather connect to the SSH service immediately. You'd still open yourself up to man in the middle attacks, since someone eavesdropping on the KVM connection could copy the public key and the hostkey, and intercept the connection, but I imagine it would be difficult to do in a timely fashion.
Is there any better way I am missing?