[neon/neon/calamares-settings/Neon/unstable] /: align user passwords and autologin options

[Carlos De Maine]

Git commit ad684e91ab43057cb4d998c1af5e8b9a26e13f5c by Carlos De Maine.
Committed on 13/06/2026 at 07:00.
Pushed by carlosdem into branch 'Neon/unstable'.

align user passwords and autologin options

M  +30   -7    bigscreen/calamares/bigscreen/modules/users.conf
M  +30   -7    mobile/calamares/mobile/modules/users.conf

https://invent.kde.org/neon/neon/calamares-settings/-/commit/ad684e91ab43057cb4d998c1af5e8b9a26e13f5c

diff --git a/bigscreen/calamares/bigscreen/modules/users.conf b/bigscreen/calamares/bigscreen/modules/users.conf
index 6f9a350..2c5489a 100644
--- a/bigscreen/calamares/bigscreen/modules/users.conf
+++ b/bigscreen/calamares/bigscreen/modules/users.conf
@@ -1,9 +1,8 @@
 # SPDX-License-Identifier: GPL-3.0-only OR LicenseRef-KDE-Accepted-GPL
-# SPDX-FileCopyrightText: 2018-2020 Harald Sitter <sitter at kde.org>
+# SPDX-FileCopyrightText: 2018-2021 Harald Sitter <sitter at kde.org>
 # SPDX-FileCopyrightText: 2015-2016 Rohan Garg <rohan at kde.org>
 ---
-displayAutologin:   true
-doAutologin: true
+# keep in options available in sync with oem user module
 setRootPassword: false
 sudoersGroup: sudo
 defaultGroups:
@@ -21,8 +20,32 @@ defaultGroups:
       system: true
     - name: sudo
       must_exist: true
-# Explicitly set the shell instead of defering to calamares. We have a platform
-# expectation derived from ubuntu here.
-userShell: /bin/bash
+# disable autologin, user can enable in systemsettings post install
+displayAutologin: true
+doAutologin: true
+# These are requirements the try to follow the suggestions from
+# https://pages.nist.gov/800-63-3/sp800-63b.html , "Digital Identity Guidelines".
+# but we allow it to be overridden
 passwordRequirements:
-    nonempty: true
+      minLength: 8
+      maxLength: 64
+      libpwquality:
+          - minlen=8
+          - maxrepeat=3
+          - maxsequence=3
+          - usersubstr=4
+          - badwords=linux
+allowWeakPasswords: true
+allowWeakPasswordsDefault: false
+# Explicitly set the shell instead of deferring to calamares. We have a platform
+# expectation derived from ubuntu here.
+user:
+  shell: /bin/bash
+  forbidden_names: [ root ]
+#presets:
+#    fullName:
+#        value: "OEM User"
+#        editable: false
+#    loginName:
+#        value: "oem"
+#        editable: false
diff --git a/mobile/calamares/mobile/modules/users.conf b/mobile/calamares/mobile/modules/users.conf
index 6f9a350..2c5489a 100644
--- a/mobile/calamares/mobile/modules/users.conf
+++ b/mobile/calamares/mobile/modules/users.conf
@@ -1,9 +1,8 @@
 # SPDX-License-Identifier: GPL-3.0-only OR LicenseRef-KDE-Accepted-GPL
-# SPDX-FileCopyrightText: 2018-2020 Harald Sitter <sitter at kde.org>
+# SPDX-FileCopyrightText: 2018-2021 Harald Sitter <sitter at kde.org>
 # SPDX-FileCopyrightText: 2015-2016 Rohan Garg <rohan at kde.org>
 ---
-displayAutologin:   true
-doAutologin: true
+# keep in options available in sync with oem user module
 setRootPassword: false
 sudoersGroup: sudo
 defaultGroups:
@@ -21,8 +20,32 @@ defaultGroups:
       system: true
     - name: sudo
       must_exist: true
-# Explicitly set the shell instead of defering to calamares. We have a platform
-# expectation derived from ubuntu here.
-userShell: /bin/bash
+# disable autologin, user can enable in systemsettings post install
+displayAutologin: true
+doAutologin: true
+# These are requirements the try to follow the suggestions from
+# https://pages.nist.gov/800-63-3/sp800-63b.html , "Digital Identity Guidelines".
+# but we allow it to be overridden
 passwordRequirements:
-    nonempty: true
+      minLength: 8
+      maxLength: 64
+      libpwquality:
+          - minlen=8
+          - maxrepeat=3
+          - maxsequence=3
+          - usersubstr=4
+          - badwords=linux
+allowWeakPasswords: true
+allowWeakPasswordsDefault: false
+# Explicitly set the shell instead of deferring to calamares. We have a platform
+# expectation derived from ubuntu here.
+user:
+  shell: /bin/bash
+  forbidden_names: [ root ]
+#presets:
+#    fullName:
+#        value: "OEM User"
+#        editable: false
+#    loginName:
+#        value: "oem"
+#        editable: false