Ensure random root password at kvmx-create

diff --git a/kvmx-create b/kvmx-create
index 43e5a8206a6c47770f9f3c4f21ea84bf4a2396b6..70812ff52d50794224518b2f9e111f005a83535a 100755 (executable)
--- a/kvmx-create
+++ b/kvmx-create
@@ -460,8 +460,9 @@ EOF
   $APT_INSTALL sudo -y
   echo "%sudo ALL=NOPASSWD: ALL" | $SUDO tee $WORK/etc/sudoers.d/local > /dev/null
 
-  # Root password
-  echo 'root:root' | kvmx_sudo_run chroot $WORK/ chpasswd
+  # Scrambled root password
+  #echo 'root:root'                               | kvmx_sudo_run chroot $WORK/ chpasswd
+  echo "root:$(head -c 40 /dev/urandom | base64)" | kvmx_sudo_run chroot $WORK/ chpasswd
 
   # Initial user
   if ! grep -q "^$user:" $WORK/etc/passwd; then