I currently have a virtual machine environment set up at home with three RHEL10 test nodes running configuration variations in order to test exam tasks.
Bypassing a locked root account in RHEL10 is different than RHEL7/8/9 because rd.break no longer works; init=/bin/bash must be used. Moreover, even with enforcing=0 included, the system will break unless sudo restorecon -vZ /etc/shadow is also run from the chroot after any passwd edit to root.