Password logins disabled / no keys

[ScaredyCat]

During the setup ssh password logins are disabled but no keys are generated / imported.

This means that on reboot there's no way for the user to login.

[techbitsio]

Assumptions section on the readme says about logging in with key and not password. My starting point for this script was my own use/testing, and ssh is far more convenient when creating lots of instances to test with.

For local testing, I can understand using a password, so I'll consider adding some kind of '--insecure' flag for this use-case.

I'd counter with: creating ssh keys is pretty painless, and even if you're not using a provider that adds the public key on creation, importing a public key is quite straightforward (ssh-import-id-gh <username> will import a key that you've added to your github account).

My concern is this being used to create an instance that is open to public signups, where password auth there would mean access to the system, then root/sudo access to user data. Maybe an --insecure flag will provoke a red warning.