From 5630168ae76fa1de66026c616ba92fb92486cf52 Mon Sep 17 00:00:00 2001
From: Craig Jennings <c@cjennings.net>
Date: Mon, 19 Jan 2026 18:04:41 -0600
Subject: fix(archsetup): remove root account locking

Locking root prevents console access after reboot, making recovery
impossible without reinstalling.
---
 archsetup | 18 ++----------------
 1 file changed, 2 insertions(+), 16 deletions(-)

(limited to 'archsetup')

diff --git a/archsetup b/archsetup
index 40e30d7..5f6e9ba 100755
--- a/archsetup
+++ b/archsetup
@@ -34,7 +34,6 @@ fresh_install=false
 show_status_only=false
 skip_gpu_drivers=false
 enable_autologin=""  # empty=auto-detect, true=force enable, false=skip
-skip_root_lock=false
 
 while [ $# -gt 0 ]; do
     case "$1" in
@@ -62,10 +61,6 @@ while [ $# -gt 0 ]; do
             enable_autologin=false
             shift
             ;;
-        --no-root-lock)
-            skip_root_lock=true
-            shift
-            ;;
         --help|-h)
             echo "Usage: $0 [OPTIONS]"
             echo ""
@@ -76,7 +71,6 @@ while [ $# -gt 0 ]; do
             echo "  --no-gpu-drivers      Skip GPU driver detection/installation"
             echo "  --autologin           Enable automatic console login"
             echo "  --no-autologin        Disable automatic console login"
-            echo "  --no-root-lock        Skip locking root account (for testing)"
             echo "  --help, -h            Show this help message"
             exit 0
             ;;
@@ -1645,16 +1639,8 @@ outro() {
 
     action="Cleanup" && display "title" "$action"
 
-    if $skip_root_lock; then
-        display "task" "skipping security locks (--no-root-lock)"
-    else
-        action="forcing user password change on first login" && display "task" "$action"
-        chage -d 0 "$username"  >> "$logfile" 2>&1 || error "error" "$action" "$?"
-
-        # Lock root account last - if script fails earlier, root is still available for recovery
-        action="locking root account (use sudo instead)" && display "task" "$action"
-        passwd -l root >> "$logfile" 2>&1 || error "error" "$action" "$?"
-    fi
+    action="forcing user password change on first login" && display "task" "$action"
+    chage -d 0 "$username"  >> "$logfile" 2>&1 || error "error" "$action" "$?"
 
     display "subtitle" "Statistics"
     action="identifying newly installed packages" && display "task" "$action"
-- 
cgit v1.2.3