diff --git a/trymcp-day01-image/files/etc/cloud/cloud.cfg b/trymcp-day01-image/files/etc/cloud/cloud.cfg
index 10290e1..ad73e20 100644
--- a/trymcp-day01-image/files/etc/cloud/cloud.cfg
+++ b/trymcp-day01-image/files/etc/cloud/cloud.cfg
@@ -77,14 +77,19 @@
 
 hostname: cfg01.try-mcp.local
 runcmd:
-  - sed -i'.orig' -e's/PermitRootLogin.*/PermitRootLogin yes/g' -e's/PasswordAuthentication.*/PasswordAuthentication yes/g' /etc/ssh/sshd_config
-  - service sshd restart
+  # TODO : add model update
+  #- salt-call state.apply reclass
   - salt-call --timeout=120 test.ping
   - salt-call saltutil.clear_cache
   - salt-call saltutil.refresh_pillar
   - salt-call saltutil.sync_all
+  #- salt-call state.sls salt.minion.ca
+  #- sleep 5
+  #- salt-call state.apply salt
+  - salt-call --timeout=120 test.ping
   - systemctl restart docker
   - sleep 20
+  - salt-call state.sls linux.system.user,openssh
   - salt-call state.sls docker.swarm
   - sleep 60
   - salt-call state.sls nginx
@@ -93,9 +98,6 @@
   - sleep 20
   - salt-call state.sls docker.client
   - sleep 60
-  - salt-call state.sls openldap
-  - sleep 20
-  - salt-call state.sls gerrit
-  - sleep 25
   - salt-call state.sls jenkins
+  - bash /opt/add_keycloak_service_user.sh
   - touch /done_cloud_init_bootstrap