From a4731dcbfc228dd84710c7b89cd8d8d1f83a7fe3 Mon Sep 17 00:00:00 2001
From: Christian Rebischke <chris@shibumi.dev>
Date: Sun, 10 May 2020 02:19:02 +0200
Subject: [PATCH] lock root account via setting an invalid password

---
 http/install-common.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/http/install-common.sh b/http/install-common.sh
index 19b188d..b674620 100644
--- a/http/install-common.sh
+++ b/http/install-common.sh
@@ -94,6 +94,9 @@ sed -i -e 's/^GRUB_TIMEOUT=.*$/GRUB_TIMEOUT=1/' /etc/default/grub
 sed -i -e 's/^GRUB_CMDLINE_LINUX=.*$/GRUB_CMDLINE_LINUX="net.ifnames=0"/' /etc/default/grub
 grub-mkconfig -o /boot/grub/grub.cfg
 
+# lock root account
+usermod -p "*" root
+
 if declare -f post >/dev/null; then
   post
 fi