[users] Set allowWeakPasswords and allowWeakPasswordsDefault to false for all three flavors, but add some basic password recommendations based on NIST standards, warning if the password falls outside of that.

debian/changelog

@@ -1,3 +1,11 @@
+calamares-settings-ubuntu (1:25.04.13) UNRELEASED; urgency=medium
+
+  * [users] Set allowWeakPasswords and allowWeakPasswordsDefault to false for
+    all three flavors, but add some basic password recommendations based on
+    NIST standards, warning if the password falls outside of that.
+
+ -- Simon Quigley <tsimonq2@ubuntu.com>  Sun, 16 Feb 2025 17:55:11 -0600
+
 calamares-settings-ubuntu (1:25.04.12) plucky; urgency=medium
 
   * [Lubuntu] Update password requirements to match NIST recommendations.

kubuntu/modules/users.conf

@@ -13,8 +13,16 @@ defaultGroups:
       system: true
     - sudo
 passwordRequirements:
-    minLength: 1
+    minLength: 8
     maxLength: -1
+    libpwquality:
+        - minlen=8
+        - maxrepeat=3
+        - maxsequence=3
+        - usersubstr=4
+        - badwords=linux
+allowWeakPasswords: false
+allowWeakPasswordsDefault: false
 # Explicitly set the shell instead of deferring to Calamares. We have a platform
 # expectation derived from Ubuntu here.
 user:

lubuntu/modules/users.conf

@@ -21,7 +21,7 @@ passwordRequirements:
         - maxsequence=3
         - usersubstr=4
         - badwords=linux
-allowWeakPasswords: true
+allowWeakPasswords: false
 allowWeakPasswordsDefault: false
 # Explicitly set the shell instead of deferring to Calamares. We have a platform
 # expectation derived from Ubuntu here.

ubuntuunity/modules/users.conf

@@ -13,8 +13,16 @@ defaultGroups:
       system: true
     - sudo
 passwordRequirements:
-    minLength: 1
+    minLength: 8
     maxLength: -1
+    libpwquality:
+        - minlen=8
+        - maxrepeat=3
+        - maxsequence=3
+        - usersubstr=4
+        - badwords=linux
+allowWeakPasswords: false
+allowWeakPasswordsDefault: false
 # Explicitly set the shell instead of deferring to Calamares. We have a platform
 # expectation derived from Ubuntu here.
 user: