[Lubuntu] add NIST pw requirements with user override option

debian/changelog

@@ -1,3 +1,11 @@
+calamares-settings-ubuntu (1:25.04.12) plucky; urgency=medium
+
+  * [Lubuntu] Update password requirements to match NIST recommendations.
+  * [Lubuntu] Allow user to override password requirements, but not by
+    default.
+
+ -- Walter Lapchynski <wxl@ubuntu.com>  Tue, 28 Jan 2025 17:14:06 +0000
+
 calamares-settings-ubuntu (1:25.04.11) plucky; urgency=medium
 
   * Rearrange the Lubuntu module order to account for packages with new stuff

lubuntu/modules/users.conf

@@ -13,8 +13,16 @@ defaultGroups:
       system: true
     - sudo
 passwordRequirements:
-    minLength: 1
+    minLength: 8
     maxLength: -1
+    libpwquality:
+        - minlen=8
+        - maxrepeat=3
+        - maxsequence=3
+        - usersubstr=4
+        - badwords=linux
+allowWeakPasswords: true
+allowWeakPasswordsDefault: false
 # Explicitly set the shell instead of deferring to Calamares. We have a platform
 # expectation derived from Ubuntu here.
 #