Your Root Password No Longer Reaches the VPS Console Log
Cloud-init now receives a SHA-512 hash instead of your plaintext root password, and your own SSH settings are no longer overridden by ours.
What's changed
- The root password is embedded as a SHA-512 crypt hash, never as plaintext
- Passwords you supply in custom cloud-init are hashed the same way
- Our sshd drop-in is ordered so that your own Port and authentication overrides win
- ssh.socket is reloaded so a custom SSH port takes effect on socket-activated Ubuntu
- Fixed password logins being refused on Ubuntu images