On 15 Jul 2014, at 15:41, Matthew Miller <mattdm at mattdm.org> wrote: > On Tue, Jul 15, 2014 at 12:30:38PM +0100, Neil Wilson wrote: >> Yes that’s what I mean. >> i.e. there is no ‘user’ command in the kickstart file. > > Except that currently, anaconda won't let you lock the root password if you > don't create a user. (There's a bug report for this somewhere.) In Fedora, > we're currently working around it by creating the user and the removing in > %post. I do the opposite and don’t lock the root user, but lock it in %post As in: # Install root password - removed and locked in post. rootpw --iscrypted $1$2e74e5$wMj25e4rEb4rJxqm7BAnk0 [snip] %post # lock root password passwd -d root passwd -l root