#cloud-config
ssh_pwauth: true
disable_root: false
chpasswd: { list: ["root:toor"], expire: false }
runcmd:
- sed -ni '/^PermitRootLogin\s/!p;$aPermitRootLogin yes' /etc/ssh/sshd_config
- systemctl restart ssh.service