default user + disable root

[cadriel]

Generally speaking, its considered good practice to disable the root user, and add your own user with sudo access.

I'm not sure if this applies to LXC's in both Privileged and Non-Privileged containers, but it seems like this could be an option in your scripts? I.e., ask for a user name and password and if to disable root.

Thanks!

[cadriel]

Thinking about it - perhaps cloud-init might be valuable too? This way a user could pre-define this sort of thing themselves, and have ssh-keys pre-setup etc.

One option might be to have your scripts allow the selection of a users templates. I.e., I setup a cloud-init image template based on 20.04 - and your script does its normal thing but uses my image.

This way my image would have all of its pre-defined cloud-init fancy fancy. :)