refactor(global_defaults): derive the primary user once for every consumer

2026-10-05 16:54:28 +02:00
parent ef8d50e6be
commit 9aad42a4c2
4 changed files with 20 additions and 13 deletions
@@ -217,7 +217,7 @@ When `interfaces` is empty, the flat fields (`bridge`, `ip`, `prefix`, `gateway`

 #### `system.users`

-Dict keyed by username. At least one user must have a `password` (used for SSH access during bootstrap). Users without a password get locked accounts (key-only auth).
+Dict keyed by username. At least one user must have a non-empty `password`: the first such user, in declaration order, is the account bootstrap logs in as after the reboot and the cloud-init and Proxmox `ciuser` primary user. Users without a password get locked accounts (key-only auth).

 ```yaml
 system: