#cloud-config

ssh_pwauth: true
disable_root: false
chpasswd: { list: ["root:toor"], expire: false }

runcmd:
  - sed -ni '/^PermitRootLogin\s/!p;$aPermitRootLogin yes' /etc/ssh/sshd_config
  - systemctl restart ssh.service