Preserve password for root
diff --git a/classes/cluster/mcp-offline/infra/init.yml b/classes/cluster/mcp-offline/infra/init.yml
index 86dff99..f3c4f96 100644
--- a/classes/cluster/mcp-offline/infra/init.yml
+++ b/classes/cluster/mcp-offline/infra/init.yml
@@ -84,3 +84,6 @@
       service:
         apt-daily.timer:
           status: dead
+      user:
+        root:
+          password: false