git: a209aac86882 - main - nuageinit: root should be allowed to log in when disable_root is false

From: Navdeep Parhar <np_at_FreeBSD.org>
Date: Sat, 22 Aug 2026 07:03:24 UTC
The branch main has been updated by np:

URL: https://cgit.FreeBSD.org/src/commit/?id=a209aac86882d3062318dea4971b2f728463c7e2

commit a209aac86882d3062318dea4971b2f728463c7e2
Author:     Navdeep Parhar <np@FreeBSD.org>
AuthorDate: 2026-08-21 20:16:48 +0000
Commit:     Navdeep Parhar <np@FreeBSD.org>
CommitDate: 2026-08-22 06:58:28 +0000

    nuageinit: root should be allowed to log in when disable_root is false
    
    PermitRootLogin is "no" by default and that stopped root from logging in
    even though disable_root was set to false during initialization.
    
    Reviewed by:    bapt
    Sponsored by:   Chelsio Communications
    Differential Revision:  https://reviews.freebsd.org/D59101
---
 libexec/nuageinit/nuageinit | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/libexec/nuageinit/nuageinit b/libexec/nuageinit/nuageinit
index 31daff5c71b9..712a516c5195 100755
--- a/libexec/nuageinit/nuageinit
+++ b/libexec/nuageinit/nuageinit
@@ -603,6 +603,8 @@ local function disable_root(obj, metadata)
 		end
 		opts = opts:gsub("%$USER", "freebsd")
 		opts = opts:gsub("%$DISABLE_USER", "root")
+	else
+		nuage.update_sshd_config("PermitRootLogin", "prohibit-password")
 	end
 	local keys = {}
 	if obj.allow_public_ssh_keys ~= false and